', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x104, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r2}}, 0x10) [ 1251.771714] Bluetooth: Invalid header checksum [ 1251.831108] Bluetooth: Invalid header checksum 20:13:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) gettid() ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x3fc}, 0x0) 20:13:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xc0fe) [ 1251.851829] audit: type=1804 audit(1625170386.457:879): pid=31202 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2699/bus" dev="sda1" ino=14036 res=1 [ 1251.883908] Bluetooth: Invalid header checksum [ 1251.941057] Bluetooth: Invalid header checksum [ 1251.991073] Bluetooth: Invalid header checksum [ 1252.051132] Bluetooth: Invalid header checksum [ 1252.075006] validate_nla: 14 callbacks suppressed [ 1252.075016] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1252.102575] Bluetooth: Invalid header checksum 20:13:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xea1e) [ 1252.162907] Bluetooth: Invalid header checksum [ 1252.212150] Bluetooth: Invalid header checksum [ 1252.240147] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1252.277726] Bluetooth: Invalid header checksum [ 1252.327290] Bluetooth: Invalid header checksum [ 1252.381157] Bluetooth: Invalid header checksum [ 1252.431139] Bluetooth: Invalid header checksum [ 1252.491267] Bluetooth: Invalid header checksum [ 1252.542762] Bluetooth: Invalid header checksum [ 1252.604546] Bluetooth: Invalid header checksum [ 1252.664419] Bluetooth: Invalid header checksum [ 1252.711167] Bluetooth: Invalid header checksum [ 1252.762729] Bluetooth: Invalid header checksum [ 1252.821174] Bluetooth: Invalid header checksum 20:13:07 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000100)='./bus\x00', 0xea882, 0x0) open(0x0, 0x1, 0x144) fallocate(r4, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) syz_open_procfs(r2, &(0x7f0000000140)='net/mcfilter6\x00') ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1252.872721] Bluetooth: Invalid header checksum 20:13:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000001500)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) pwritev(r4, &(0x7f0000001480)=[{&(0x7f0000000140)="3e81af2f89d32e184085809b9b1c32adb83aa50d8d7d05b05397c85cb568250e88c9a11b6952097e6b2af0d30b2ef77010a0664ad999ebc8e297060394484b6c5d47603030e696fd1f13c1dbb24db48875efe2a750f4a5384a6a854c42982f41c837ecdf270bda0c851d7dc89e2287a362b09048578f20f548f5f1062eadebeb62da77d2eedc694b6eaa698d89ddb5cf2ab1d9758e13b3e38f494d19ac40a4959528d9f4d63c93d986", 0xa9}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="1e8fed2d3795b84deed1e21e2291f98b1b3ed8b61335b2be2d70a34d26eb86bb4ac9209e54ebe0872ba5ae4c013a1c4555dfcd0b694598a5de774e04987e9bc7d3ef407ceb3ae42415760a95aaf34cd3d0706daa2056e409a17d770d14512812aa67a589211abdc8eb0018f48402ca62e6d53d779e670cae6505652a95a68e47030d5bdef262b81959d2a67f7f40f2e081b50acedb7237abbd46c5958c824be4877f73b64ba9b213c0f8b284f36bb269b588f5e0c7172a1aec498c1adb63", 0xbe}, {&(0x7f00000012c0)="87c55fc36a0a5bc9f027d67be9fcf41c68db39a049d8b344", 0x18}, {&(0x7f0000001300)="e272de8e0daf42ce669f59b8e765035c5243f5501aeec2b47f318f035bc302f5fbdf80ed468e4d", 0x27}, {&(0x7f0000001340)="0d5c7d464d6bc7c7227c6a065968afce2740abf6523b1c5019cb8aeb4c0ed3c3b166f121c061ab48587f5806ff2a7d00ecc91967f6e0aeba", 0x38}, {&(0x7f0000001380)="a266f6df5f08209b16ef08c101096bbe17e94bc54b0be5b416c80bb6a4e23f88051a60b0ef510658bb4510f3e8ee7fc29d09f1b6f2a055cc589c7c66cc698618d59dade2d99da9f9f24f5441753aa5a5ccddc7d664024442d4426c20cda6c006fdbfc00a88958920b9ef2173b606836b67a169d06037f4e7b417f5c37bbd63d36347968e25a867dfe06dad5e792b8b7e50f7b6b111de960d1f790be15d1ea50d0862d8e83459d76cb4bc607facc28989bd2bb45fe3af0fd8f1a01718647125ea7a1d066a86218f6a61fb8eb0e2e2e0b874b1d3de71b5c2dd0f6437", 0xdb}], 0x7, 0xff, 0x5) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000100)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x6) 20:13:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xf000) 20:13:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x600}, 0x0) [ 1252.931074] Bluetooth: Invalid header checksum [ 1252.968794] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1252.981404] Bluetooth: Invalid header checksum 20:13:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xfc00) [ 1253.036152] audit: type=1804 audit(1625170387.647:880): pid=31249 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2700/bus" dev="sda1" ino=13961 res=1 [ 1253.062951] Bluetooth: Invalid header checksum 20:13:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x400000) r2 = syz_open_pts(r0, 0x199080) openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) syz_open_pts(r2, 0x111102) r3 = socket$inet6(0x10, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/43, 0x2b) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) sendfile(r1, r3, &(0x7f0000000140)=0x4, 0x2a) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000200)) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000100)) [ 1253.092694] Bluetooth: Invalid header checksum 20:13:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x700}, 0x0) [ 1253.162101] Bluetooth: Invalid header checksum [ 1253.211647] Bluetooth: Invalid header checksum 20:13:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xfe80) [ 1253.240574] IPv6: Can't replace route, no match found [ 1253.249319] audit: type=1804 audit(1625170387.737:881): pid=31258 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2700/bus" dev="sda1" ino=13961 res=1 [ 1253.276725] Bluetooth: Invalid header checksum [ 1253.314362] Bluetooth: Invalid header checksum 20:13:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x61000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) sendfile(r2, r0, &(0x7f00000000c0)=0x40, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r3 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e21, 0x4, @loopback, 0xa91}, 0x1c) close(r3) 20:13:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x400000) r2 = syz_open_pts(r0, 0x199080) openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) syz_open_pts(r2, 0x111102) r3 = socket$inet6(0x10, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/43, 0x2b) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) sendfile(r1, r3, &(0x7f0000000140)=0x4, 0x2a) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000200)) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000100)) [ 1253.339625] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1253.382966] Bluetooth: Invalid header checksum [ 1253.421181] Bluetooth: Invalid header checksum [ 1253.493521] Bluetooth: Invalid header checksum 20:13:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xfec0) [ 1253.522871] mkiss: ax0: crc mode is auto. [ 1253.534815] IPv6: Can't replace route, no match found [ 1253.534876] Bluetooth: Invalid header checksum [ 1253.601379] Bluetooth: Invalid header checksum [ 1253.651646] Bluetooth: Invalid header checksum [ 1253.711136] Bluetooth: Invalid header checksum [ 1253.761596] Bluetooth: Invalid header checksum [ 1253.824524] Bluetooth: Invalid header checksum [ 1253.871251] Bluetooth: Invalid header checksum [ 1253.932781] Bluetooth: Invalid header checksum [ 1253.981240] Bluetooth: Invalid header checksum 20:13:08 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000100)='./bus\x00', 0xea882, 0x0) open(0x0, 0x1, 0x144) fallocate(r4, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xff00) 20:13:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 20:13:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x400000) r2 = syz_open_pts(r0, 0x199080) openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) syz_open_pts(r2, 0x111102) r3 = socket$inet6(0x10, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/43, 0x2b) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) sendfile(r1, r3, &(0x7f0000000140)=0x4, 0x2a) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000200)) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000100)) 20:13:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = signalfd4(r0, &(0x7f0000000140)={[0xf3]}, 0xb, 0xc00) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1254.040997] Bluetooth: Invalid header checksum [ 1254.091013] Bluetooth: Invalid header checksum [ 1254.115024] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1254.146899] audit: type=1804 audit(1625170388.757:882): pid=31308 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2701/bus" dev="sda1" ino=14343 res=1 [ 1254.151217] Bluetooth: Invalid header checksum [ 1254.199813] mkiss: ax0: crc mode is auto. [ 1254.211116] Bluetooth: Invalid header checksum 20:13:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x34000) [ 1254.231592] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1254.262282] Bluetooth: Invalid header checksum [ 1254.276689] IPv6: Can't replace route, no match found 20:13:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x5, 0x4, 0x80000001, 0x19, "3b4cce6b1b1ff05a1d1e02ab4971c52ae8f908"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x2, 0xa0, 0x1f, 0x1, 0xe, "721350a11e5fd7e2558947d954516c27c7e510"}) [ 1254.321595] audit: type=1804 audit(1625170388.867:883): pid=31319 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2701/bus" dev="sda1" ino=14343 res=1 [ 1254.345399] Bluetooth: Invalid header checksum [ 1254.386354] Bluetooth: Invalid header checksum 20:13:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xb00}, 0x0) 20:13:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x400000) r2 = syz_open_pts(r0, 0x199080) openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) syz_open_pts(r2, 0x111102) r3 = socket$inet6(0x10, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/43, 0x2b) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) sendfile(r1, r3, &(0x7f0000000140)=0x4, 0x2a) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000200)) [ 1254.441282] Bluetooth: Invalid header checksum 20:13:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x400300) [ 1254.481463] Bluetooth: Invalid header checksum [ 1254.515564] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1254.551455] Bluetooth: Invalid header checksum [ 1254.603245] Bluetooth: Invalid header checksum [ 1254.648859] IPv6: Can't replace route, no match found [ 1254.663420] Bluetooth: Invalid header checksum 20:13:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1027}], 0x1, 0x0, 0x0) syz_open_pts(r1, 0x280) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000001100)=0xfe) [ 1254.708133] Bluetooth: Invalid header checksum 20:13:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xf0ffff) [ 1254.771041] Bluetooth: Invalid header checksum [ 1254.816073] Bluetooth: Invalid header checksum [ 1254.881178] Bluetooth: Invalid header checksum [ 1254.921118] Bluetooth: Invalid header checksum 20:13:09 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000100)='./bus\x00', 0xea882, 0x0) open(0x0, 0x1, 0x144) fallocate(r4, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x400000) r2 = syz_open_pts(r0, 0x199080) openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) syz_open_pts(r2, 0x111102) r3 = socket$inet6(0x10, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/43, 0x2b) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) sendfile(r1, r3, &(0x7f0000000140)=0x4, 0x2a) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000200)) 20:13:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xc00}, 0x0) [ 1255.001286] Bluetooth: Invalid header checksum 20:13:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x1000000) 20:13:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1255.045810] Bluetooth: Invalid header checksum [ 1255.114518] audit: type=1804 audit(1625170389.727:884): pid=31363 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2702/bus" dev="sda1" ino=14388 res=1 [ 1255.139764] Bluetooth: Invalid header checksum [ 1255.144818] Bluetooth: Invalid header checksum [ 1255.171734] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1255.184854] mkiss: ax0: crc mode is auto. [ 1255.211090] Bluetooth: Invalid header checksum [ 1255.216535] Bluetooth: Invalid header checksum 20:13:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x2000000) [ 1255.236388] IPv6: Can't replace route, no match found [ 1255.242724] Bluetooth: Invalid header checksum [ 1255.251516] Bluetooth: Invalid header checksum [ 1255.291886] audit: type=1804 audit(1625170389.867:885): pid=31376 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2702/bus" dev="sda1" ino=14388 res=1 [ 1255.321092] Bluetooth: Too short H5 packet [ 1255.325458] Bluetooth: Invalid header checksum 20:13:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xc02}, 0x0) 20:13:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x400000) r2 = syz_open_pts(r0, 0x199080) openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) syz_open_pts(r2, 0x111102) r3 = socket$inet6(0x10, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/43, 0x2b) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) sendfile(r1, r3, &(0x7f0000000140)=0x4, 0x2a) [ 1255.351646] Bluetooth: Invalid header checksum [ 1255.362087] Bluetooth: Invalid header checksum 20:13:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x3000000) [ 1255.431096] Bluetooth: Invalid header checksum [ 1255.439727] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1255.478761] Bluetooth: Invalid header checksum [ 1255.483577] Bluetooth: Invalid header checksum [ 1255.510246] mkiss: ax0: crc mode is auto. [ 1255.510645] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1255.541135] Bluetooth: Invalid header checksum [ 1255.559347] IPv6: Can't replace route, no match found [ 1255.581203] Bluetooth: Invalid header checksum [ 1255.585893] Bluetooth: Invalid header checksum 20:13:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 20:13:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x8000000) 20:13:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x400000) r1 = syz_open_pts(r0, 0x199080) openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) syz_open_pts(r1, 0x111102) r2 = socket$inet6(0x10, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/43, 0x2b) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) [ 1255.656286] Bluetooth: Invalid header checksum [ 1255.693228] Bluetooth: Invalid header checksum [ 1255.698381] Bluetooth: Invalid header checksum [ 1255.761187] Bluetooth: Invalid header checksum [ 1255.787050] mkiss: ax0: crc mode is auto. [ 1255.802513] Bluetooth: Invalid header checksum [ 1255.803081] Bluetooth: Invalid header checksum [ 1255.834196] IPv6: Can't replace route, no match found [ 1255.871111] Bluetooth: Invalid header checksum [ 1255.912073] Bluetooth: Invalid header checksum [ 1255.912780] Bluetooth: Invalid header checksum 20:13:10 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000100)='./bus\x00', 0xea882, 0x0) open(0x0, 0x1, 0x144) fallocate(r4, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 20:13:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xb000000) 20:13:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x400000) r1 = syz_open_pts(r0, 0x199080) openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) syz_open_pts(r1, 0x111102) socket$inet6(0x10, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/43, 0x2b) 20:13:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x333, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x333, 0x0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x40800) ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f00000001c0)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1256.021693] Bluetooth: Invalid header checksum [ 1256.027163] Bluetooth: Invalid header checksum [ 1256.058715] mkiss: ax0: crc mode is auto. 20:13:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xf000000) [ 1256.107896] audit: type=1804 audit(1625170390.717:886): pid=31446 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2703/bus" dev="sda1" ino=14434 res=1 [ 1256.132570] Bluetooth: Invalid header checksum [ 1256.143214] Bluetooth: Invalid header checksum 20:13:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x1900}, 0x0) 20:13:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x400000) r1 = syz_open_pts(r0, 0x199080) openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) syz_open_pts(r1, 0x111102) socket$inet6(0x10, 0x2, 0x0) 20:13:10 executing program 2: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f00000000c0)={0x0, 0x1}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x100000000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1256.248604] Bluetooth: Invalid header checksum [ 1256.254007] Bluetooth: Invalid header checksum 20:13:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x286301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSCTTY(r0, 0x540e, 0xc2c) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x20002000}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f00000000c0)=0x100000001) [ 1256.294358] audit: type=1804 audit(1625170390.847:887): pid=31450 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2703/bus" dev="sda1" ino=14434 res=1 [ 1256.354946] Bluetooth: Invalid header checksum [ 1256.362370] Bluetooth: Invalid header checksum 20:13:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x9effffff) 20:13:11 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000005c0)=0xf) r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) pwritev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="c8bcae55fea038426691f53e6453101e2f61333ba29ed1d1bae157606a72af4b6c54d5f0ca43796d7d8bafdde7a34dd04f3a2d0d5ff6fbc91e68d2fafc404ecfd613c4b4da3448c756bce263f0afa29f6228fda0b7d49d6369925e3d7e419f037e427d7901604d9f5933991ca7f7c0df460a566facdc8a4da6121c3a37b00ecfe93b0f6813fd5adfa50c9ef2f8f7681669008dc6453468e5c4454e2c5866a98ce2e015e72d1d7d068bb3f3647740a56fef8f44c54adbf911327dfef987157e616a3ed5b63c26cae8c5ed1f4ae910e801315f93a6", 0xd4}, {&(0x7f00000001c0)="b5ec1c912ce02504c273ef2eef5aedaa62c380b440346f06f17c2ae2ae3214d4e66a74be18e7b899f0bbef4ebe29c70abba2f3454cef69636e3c8e621b97a114d5bb7463d39c0528c9a6fd979bf3a862f3c3daa99a39bb7989701e5d4e93d975c6d23eea9f9c7c665771", 0x6a}, {&(0x7f0000000240)="977a7c59dd0b013b77d76d842c58f115949e1ae05bd190824d48e4162149b7f997d6b7e2c146d1698273b3c417080ffb870b084da5f179eee5af4caf13bda196256ac772e053c70b726c4a4e3bd91ca3955760162d23cd1a6c8d536cb00f210f39f55bbcc4f95f92b98fd76342ee0ebcfc96a9cfa669d940a8fc8af7529ffdaa54fa138257882b7383da075eb3fab5ad319581840fc0e7766fdb784ab3dd757b9de7ea760e8f72a6dcfa0b73b0e45a7ecce80eee65bb76990308813e0b99e2e4c271f727e6be25f6f11865f2fd251bb9f55ff265019708742f987611", 0xdc}, {&(0x7f0000000340)="c55daf0789d7ec9524fb8dec71f1f1887afa72f5ef917aeabf9d1f788ed0f777d194eb630bbde2a722b31e5919e6679635740eeb70ceb3db6e1e31ab3540daadf0b5cce181725110f4d55d6714785585599869a771c319a73cdc31be1f18edf9da3f017986d854ce6191337f9ce941cb018c2034e6dab3", 0x77}, {&(0x7f00000003c0)}], 0x5, 0x5, 0x1dfccb22) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @remote}, &(0x7f00000004c0)=0x10, 0x400) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000500)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x20, 0x3, 0x8, 0x2, 0x2]}, &(0x7f0000000580)=0x78) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) [ 1256.398698] mkiss: ax0: crc mode is auto. [ 1256.467496] Bluetooth: Invalid header checksum [ 1256.472692] Bluetooth: Invalid header checksum [ 1256.550207] IPv6: Can't replace route, no match found [ 1256.571405] Bluetooth: Invalid header checksum [ 1256.582296] Bluetooth: Invalid header checksum [ 1256.589404] IPv6: Can't replace route, no match found [ 1256.682884] Bluetooth: Invalid header checksum [ 1256.696058] Bluetooth: Invalid header checksum [ 1256.793030] Bluetooth: Invalid header checksum [ 1256.805228] Bluetooth: Invalid header checksum [ 1256.901090] Bluetooth: Invalid header checksum [ 1256.913785] Bluetooth: Invalid header checksum 20:13:11 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000100)='./bus\x00', 0xea882, 0x0) open(0x0, 0x1, 0x144) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x1cff}, 0x0) 20:13:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x1ff, 0x1, 0x20, 0x1ff, 0xc, "0603192d3d0a46abd1aee431ed636c4bacbdd2"}) 20:13:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x400000) r1 = syz_open_pts(r0, 0x199080) openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) syz_open_pts(r1, 0x111102) 20:13:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xea1e0000) 20:13:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x12, 0x0, 0x80000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) [ 1257.012167] Bluetooth: Invalid header checksum [ 1257.031648] Bluetooth: Invalid header checksum 20:13:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x2300}, 0x0) [ 1257.096984] mkiss: ax0: crc mode is auto. 20:13:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xf0ffffff) 20:13:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x8, 0xce7, 0x868, 0x1f, 0x15, "52c6949541be4739"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x11) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x1, 0x10001, 0x0, 0x1f, 0xf, "e3db3886a0e627018ed4a425cc13350014a274"}) [ 1257.121864] Bluetooth: Invalid header checksum [ 1257.131306] Bluetooth: Invalid header checksum 20:13:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0), 0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_pts(r1, 0x200080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) [ 1257.167544] validate_nla: 7 callbacks suppressed [ 1257.167554] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1257.196562] netlink: 'syz-executor.1': attribute type 20 has an invalid length. 20:13:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x400000) syz_open_pts(r0, 0x199080) openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) [ 1257.231170] Bluetooth: Invalid header checksum [ 1257.243103] Bluetooth: Invalid header checksum 20:13:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xfc000000) [ 1257.343233] mkiss: ax0: crc mode is auto. [ 1257.344557] Bluetooth: Invalid header checksum [ 1257.353270] Bluetooth: Invalid header checksum [ 1257.453105] Bluetooth: Invalid header checksum [ 1257.467402] Bluetooth: Invalid header checksum [ 1257.560630] audit: type=1804 audit(1625170392.167:888): pid=31563 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2704/bus" dev="sda1" ino=14391 res=1 [ 1257.562176] Bluetooth: Invalid header checksum [ 1257.589393] Bluetooth: Invalid header checksum [ 1257.676322] Bluetooth: Invalid header checksum [ 1257.701237] Bluetooth: Invalid header checksum [ 1257.730463] audit: type=1804 audit(1625170392.337:889): pid=31570 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2704/bus" dev="sda1" ino=14391 res=1 [ 1257.820464] Bluetooth: Invalid header checksum [ 1257.825403] Bluetooth: Invalid header checksum [ 1257.893324] Bluetooth: Invalid header checksum [ 1257.923074] Bluetooth: Invalid header checksum [ 1258.006598] Bluetooth: Invalid header checksum [ 1258.033553] Bluetooth: Invalid header checksum [ 1258.118951] Bluetooth: Invalid header checksum 20:13:12 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000100)='./bus\x00', 0xea882, 0x0) open(0x0, 0x1, 0x144) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x2c03}, 0x0) 20:13:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x4) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xe) 20:13:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x400000) syz_open_pts(r0, 0x199080) 20:13:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xfe800000) [ 1258.155451] Bluetooth: Invalid header checksum [ 1258.227073] Bluetooth: Invalid header checksum [ 1258.235432] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1258.251339] Bluetooth: Invalid header checksum [ 1258.259938] mkiss: ax0: crc mode is auto. [ 1258.273443] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1258.288799] audit: type=1804 audit(1625170392.897:890): pid=31598 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2705/bus" dev="sda1" ino=14644 res=1 [ 1258.332035] Bluetooth: Invalid header checksum [ 1258.362906] Bluetooth: Invalid header checksum 20:13:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xfec00000) 20:13:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x400000) 20:13:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x2f00}, 0x0) 20:13:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000100)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x4) 20:13:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x800000b) r2 = signalfd4(r0, &(0x7f00000000c0)={[0x1]}, 0x8, 0x80000) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x5) [ 1258.442386] Bluetooth: Invalid header checksum [ 1258.483983] Bluetooth: Invalid header checksum [ 1258.504851] audit: type=1804 audit(1625170393.087:891): pid=31613 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2705/bus" dev="sda1" ino=14644 res=1 20:13:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xff000000) [ 1258.551088] Bluetooth: Invalid header checksum [ 1258.592072] Bluetooth: Invalid header checksum [ 1258.622312] mkiss: ax0: crc mode is auto. [ 1258.622333] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1258.661206] Bluetooth: Invalid header checksum [ 1258.690434] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1258.701628] Bluetooth: Invalid header checksum [ 1258.772768] Bluetooth: Invalid header checksum [ 1258.816900] Bluetooth: Invalid header checksum [ 1258.891043] Bluetooth: Invalid header checksum [ 1258.926134] Bluetooth: Invalid header checksum [ 1258.994621] Bluetooth: Invalid header checksum [ 1259.039659] Bluetooth: Invalid header checksum [ 1259.101251] Bluetooth: Invalid header checksum [ 1259.141174] Bluetooth: Invalid header checksum 20:13:13 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000100)='./bus\x00', 0xea882, 0x0) open(0x0, 0x1, 0x144) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x183c81, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xfffff000) 20:13:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x3b01}, 0x0) 20:13:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:13 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x18000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x2e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x269, 0x7, 0x401, 0xffff, 0xa, "87a2d837a67e57257f643114a085ee57541d26"}) [ 1259.225323] Bluetooth: Invalid header checksum [ 1259.259827] Bluetooth: Invalid header checksum [ 1259.261955] netlink: 'syz-executor.1': attribute type 20 has an invalid length. 20:13:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xffffff7f) [ 1259.321203] Bluetooth: Invalid header checksum [ 1259.352753] mkiss: ax0: crc mode is auto. [ 1259.357180] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1259.365672] Bluetooth: Invalid header checksum 20:13:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000000)) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000140)=""/183, 0xb7}, {&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f00000002c0)=""/193, 0xc1}, {&(0x7f00000003c0)=""/71, 0x47}, {&(0x7f0000000440)=""/112, 0x70}, {&(0x7f00000004c0)=""/123, 0x7b}, {&(0x7f0000000540)}], 0x7, 0x2, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x333, 0x0, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) dup3(r4, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x9) 20:13:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x0) [ 1259.431172] Bluetooth: Invalid header checksum 20:13:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1259.471484] Bluetooth: Invalid header checksum 20:13:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x0, 0x7, 0x1, 0x1, 0x10, "6996c29a159a5f2e"}) 20:13:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xffffff9e) [ 1259.541100] Bluetooth: Invalid header checksum [ 1259.548960] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1259.581052] audit: type=1804 audit(1625170394.187:892): pid=31721 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2706/bus" dev="sda1" ino=14467 res=1 [ 1259.606248] Bluetooth: Invalid header checksum [ 1259.609767] IPv6: Can't replace route, no match found [ 1259.646119] IPv6: Can't replace route, no match found [ 1259.651214] Bluetooth: Invalid header checksum [ 1259.691854] Bluetooth: Invalid header checksum [ 1259.699976] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1259.762409] Bluetooth: Invalid header checksum [ 1259.791639] audit: type=1804 audit(1625170394.287:893): pid=31734 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2706/bus" dev="sda1" ino=14467 res=1 [ 1259.821407] Bluetooth: Invalid header checksum [ 1259.910551] Bluetooth: Invalid header checksum [ 1259.987026] Bluetooth: Invalid header checksum [ 1259.991895] Bluetooth: Invalid header checksum [ 1260.052868] Bluetooth: Invalid header checksum [ 1260.092980] Bluetooth: Invalid header checksum [ 1260.177492] Bluetooth: Invalid header checksum [ 1260.201961] Bluetooth: Invalid header checksum [ 1260.284676] Bluetooth: Invalid header checksum [ 1260.313994] Bluetooth: Invalid header checksum [ 1260.401114] Bluetooth: Invalid header checksum [ 1260.421098] Bluetooth: Invalid header checksum 20:13:15 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000100)='./bus\x00', 0xea882, 0x0) open(0x0, 0x1, 0x144) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xfffffff0) 20:13:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xa) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 20:13:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x7e1000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000140)={0xff, 0x5, 0x80000001, 0x1, 0x10, "8b796c4903df21b33a3f8cc7b4238c5fcd36f9"}) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{}]}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1260.512983] Bluetooth: Invalid header checksum [ 1260.531470] Bluetooth: Invalid header checksum 20:13:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x4900}, 0x0) 20:13:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1260.622175] Bluetooth: Invalid header checksum [ 1260.641563] Bluetooth: Invalid header checksum 20:13:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x40030000000000) 20:13:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0xbd41, 0x2, 0xfffffffb, 0x6, 0x6, "cdadafc2076708738867c73044af810a99e4dc"}) 20:13:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x1) [ 1260.738594] Bluetooth: Invalid header checksum [ 1260.751938] Bluetooth: Invalid header checksum 20:13:15 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) [ 1260.841892] Bluetooth: Invalid header checksum [ 1260.861572] Bluetooth: Invalid header checksum [ 1260.957028] Bluetooth: Invalid header checksum [ 1260.965860] audit: type=1804 audit(1625170395.577:894): pid=31785 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2707/bus" dev="sda1" ino=14661 res=1 [ 1260.992461] Bluetooth: Invalid header checksum [ 1261.070492] Bluetooth: Invalid header checksum [ 1261.088783] audit: type=1804 audit(1625170395.697:895): pid=31790 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2707/bus" dev="sda1" ino=14661 res=1 [ 1261.112936] Bluetooth: Invalid header checksum 20:13:15 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000100)='./bus\x00', 0xea882, 0x0) open(0x0, 0x1, 0x144) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x5200}, 0x0) 20:13:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xf0ffffffffffff) 20:13:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 20:13:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x165802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:15 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) [ 1261.171433] Bluetooth: Invalid header checksum 20:13:15 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) [ 1261.221271] Bluetooth: Invalid header checksum 20:13:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x5865}, 0x0) [ 1261.282995] Bluetooth: Invalid header checksum 20:13:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) readv(r0, &(0x7f0000001340)=[{&(0x7f0000000380)=""/179, 0xb3}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000200)=""/203, 0xcb}, {&(0x7f0000000300)=""/2, 0x2}, {&(0x7f00000013c0)=""/4101, 0x1005}], 0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000340)) 20:13:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) 20:13:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x100000000000000) [ 1261.336707] Bluetooth: Invalid header checksum 20:13:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1261.391179] Bluetooth: Invalid header checksum [ 1261.418508] audit: type=1804 audit(1625170396.027:896): pid=31813 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2708/bus" dev="sda1" ino=14946 res=1 [ 1261.443166] Bluetooth: Invalid header checksum [ 1261.501109] Bluetooth: Invalid header checksum 20:13:16 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000100)='./bus\x00', 0xea882, 0x0) open(0x0, 0x1, 0x144) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 20:13:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x200000000000000) 20:13:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x10) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x3ff, 0x7, 0x6, 0x100, 0x13, "0b052f9e1e599067b493465d570ea9587c80a5"}) 20:13:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1261.562054] Bluetooth: Invalid header checksum [ 1261.566571] audit: type=1804 audit(1625170396.157:897): pid=31828 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2708/bus" dev="sda1" ino=14946 res=1 [ 1261.620224] Bluetooth: Invalid header checksum 20:13:16 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/187) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)) [ 1261.661361] Bluetooth: Invalid header checksum 20:13:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x300000000000000) [ 1261.721355] Bluetooth: Invalid header checksum [ 1261.732883] audit: type=1804 audit(1625170396.347:898): pid=31840 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2709/bus" dev="sda1" ino=14724 res=1 [ 1261.771129] Bluetooth: Invalid header checksum 20:13:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x6558}, 0x0) [ 1261.831197] Bluetooth: Invalid header checksum 20:13:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x980, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x140, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xa) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000000c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0x17) [ 1261.883254] Bluetooth: Invalid header checksum [ 1261.892887] audit: type=1804 audit(1625170396.447:899): pid=31853 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2709/bus" dev="sda1" ino=14724 res=1 [ 1261.942180] Bluetooth: Invalid header checksum 20:13:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x800000000000000) [ 1261.994550] Bluetooth: Invalid header checksum [ 1262.053700] Bluetooth: Invalid header checksum [ 1262.112551] Bluetooth: Invalid header checksum [ 1262.161454] Bluetooth: Invalid header checksum [ 1262.218565] Bluetooth: Invalid header checksum 20:13:16 executing program 0: ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000080)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x21a0c1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xfd) 20:13:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x80fe}, 0x0) 20:13:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:16 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000100)='./bus\x00', 0xea882, 0x0) fallocate(r4, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xb00000000000000) [ 1262.273260] Bluetooth: Invalid header checksum 20:13:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1262.321205] Bluetooth: Invalid header checksum 20:13:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xf00000000000000) 20:13:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000100)) [ 1262.345044] validate_nla: 9 callbacks suppressed [ 1262.345053] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1262.381475] Bluetooth: Invalid header checksum [ 1262.402072] audit: type=1804 audit(1625170397.017:900): pid=31889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2710/bus" dev="sda1" ino=14804 res=1 [ 1262.431172] Bluetooth: Invalid header checksum 20:13:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1262.474582] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1262.498864] Bluetooth: Invalid header checksum [ 1262.522571] audit: type=1804 audit(1625170397.107:901): pid=31897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2710/bus" dev="sda1" ino=14804 res=1 [ 1262.547030] Bluetooth: Invalid header checksum 20:13:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x8100}, 0x0) [ 1262.601267] Bluetooth: Invalid header checksum [ 1262.651150] Bluetooth: Invalid header checksum [ 1262.711057] Bluetooth: Invalid header checksum [ 1262.746150] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1262.801168] Bluetooth: Invalid header checksum [ 1262.831563] Bluetooth: Invalid header checksum [ 1262.836817] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1262.874337] Bluetooth: Invalid header checksum 20:13:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001640)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x2c}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x12) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x8000000000000000) 20:13:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0x6, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c02}, 0x0) [ 1262.942708] Bluetooth: Invalid header checksum [ 1262.981160] Bluetooth: Invalid header checksum [ 1263.044079] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1263.061181] Bluetooth: Invalid header checksum [ 1263.091167] Bluetooth: Invalid header checksum [ 1263.117711] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1263.176453] Bluetooth: Invalid header checksum [ 1263.202292] Bluetooth: Invalid header checksum 20:13:17 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000100)='./bus\x00', 0xea882, 0x0) fallocate(r4, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x9effffff00000000) 20:13:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="09ff945f11ffffff25f749a2ce0b42d6f1306d55e8c6ccf2b11dca5d6014da905767239d54966e89843eb186186f7a2ce8fe9e6a25317660ac94328a0c8b0431559bd2175558c672e4f61f93ade3fdc4bad8cb4079ff14cfa5b50abe3e5a9e818543660176419b4b42e65b9027d25eb0296aecfe77c41fdb49a94eea1441f277ca8bff592898be73b055b9724436903ee3415cb2416c48d9e3e85037141878fa8a425ee2d660bc35c9ebce55248d26ddcb5bd37b20d3bd6a18bb9c78b20479da516a807b5a0eadae6bfd", @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000050007000500000008000300", @ANYRES32=0x0, @ANYBLOB="05000800000000000800010000000000"], 0x34}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200080, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x17) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x18, 0x15, 0x16f, &(0x7f00000001c0)}) [ 1263.284179] Bluetooth: Invalid header checksum [ 1263.313769] Bluetooth: Invalid header checksum 20:13:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x8d01}, 0x0) 20:13:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1263.401801] Bluetooth: Invalid header checksum [ 1263.421254] Bluetooth: Invalid header checksum 20:13:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xea1e000000000000) 20:13:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x6) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x404002, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x0, 0x5, 0xffffffff, 0xffff, 0x5, "6fb33b09660042ae9c23e2ded1ff2b24cabd91"}) r2 = syz_open_pts(r1, 0x2d000) syz_open_pts(r2, 0x636000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f00000000c0)={0xd, 0xfffffcda}) [ 1263.509612] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1263.521637] Bluetooth: Invalid header checksum [ 1263.532731] Bluetooth: Invalid header checksum 20:13:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1263.589415] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1263.632283] Bluetooth: Invalid header checksum [ 1263.642142] Bluetooth: Invalid header checksum [ 1263.741046] Bluetooth: Invalid header checksum [ 1263.751983] Bluetooth: Invalid header checksum [ 1263.854024] Bluetooth: Invalid header checksum [ 1263.862331] Bluetooth: Invalid header checksum [ 1263.964765] Bluetooth: Invalid header checksum [ 1263.974680] Bluetooth: Invalid header checksum [ 1264.071298] Bluetooth: Invalid header checksum [ 1264.083910] Bluetooth: Invalid header checksum [ 1264.181179] Bluetooth: Invalid header checksum [ 1264.198767] Bluetooth: Invalid header checksum [ 1264.291320] Bluetooth: Invalid header checksum [ 1264.307220] Bluetooth: Invalid header checksum [ 1264.401870] Bluetooth: Invalid header checksum [ 1264.414877] Bluetooth: Invalid header checksum [ 1264.513253] Bluetooth: Invalid header checksum [ 1264.524301] Bluetooth: Invalid header checksum 20:13:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x12) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xf0ffffff00000000) 20:13:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x9b03}, 0x0) 20:13:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x539f80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) 20:13:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:19 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000100)='./bus\x00', 0xea882, 0x0) fallocate(r4, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1264.627174] Bluetooth: Invalid header checksum [ 1264.632329] Bluetooth: Invalid header checksum [ 1264.731111] Bluetooth: Invalid header checksum [ 1264.742086] Bluetooth: Invalid header checksum [ 1264.753744] netlink: 'syz-executor.1': attribute type 20 has an invalid length. 20:13:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 20:13:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1264.797496] kauditd_printk_skb: 2 callbacks suppressed [ 1264.797511] audit: type=1804 audit(1625170399.407:904): pid=32244 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2712/bus" dev="sda1" ino=15311 res=1 20:13:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xfc00000000000000) [ 1264.845100] Bluetooth: Invalid header checksum [ 1264.849155] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1264.875316] Bluetooth: Invalid header checksum 20:13:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xa100}, 0x0) [ 1264.954167] Bluetooth: Invalid header checksum [ 1264.963736] Bluetooth: Invalid header checksum 20:13:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCCONS(r0, 0x541d) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1264.990690] audit: type=1804 audit(1625170399.567:905): pid=32256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2712/bus" dev="sda1" ino=15311 res=1 20:13:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40240, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x8, 0x6, 0x2, 0x1, "515f13e850317a528a598847b117ed6ed6137fb4d695250a9786c5ed2888fe9a07ec8401320046383338c3bc37b01cb84779d5ef6d68a93d9a645d82ad71057e", "28143b95b005824d09d072c9ba194b48da08b9bbc51ab42e0fafa5da65351b0e", [0x7f, 0x3]}) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000140)=0x1) 20:13:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xfe80000000000000) [ 1265.061064] Bluetooth: Invalid header checksum [ 1265.068327] mkiss: ax0: crc mode is auto. [ 1265.073591] Bluetooth: Invalid header checksum [ 1265.171241] Bluetooth: Invalid header checksum [ 1265.184509] Bluetooth: Invalid header checksum 20:13:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xac01}, 0x0) 20:13:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 20:13:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xfec0000000000000) 20:13:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) syz_open_pts(r1, 0x402) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0xffffffff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1265.281034] Bluetooth: Invalid header checksum [ 1265.292104] Bluetooth: Invalid header checksum [ 1265.401174] Bluetooth: Invalid header checksum [ 1265.401524] Bluetooth: Invalid header checksum [ 1265.429367] mkiss: ax0: crc mode is auto. [ 1265.516941] Bluetooth: Invalid header checksum [ 1265.521750] Bluetooth: Invalid header checksum 20:13:20 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:20 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x80) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) 20:13:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xff00000000000000) 20:13:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xae01}, 0x0) 20:13:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 20:13:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) [ 1265.623005] Bluetooth: Invalid header checksum [ 1265.632659] Bluetooth: Invalid header checksum 20:13:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0fe}, 0x0) [ 1265.731139] Bluetooth: Invalid header checksum [ 1265.735945] Bluetooth: Invalid header checksum [ 1265.758489] mkiss: ax0: crc mode is auto. 20:13:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x12) ioctl$KDADDIO(r0, 0x4b34, 0x800) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000000c0)) 20:13:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xffffff7f00000000) [ 1265.842916] Bluetooth: Invalid header checksum [ 1265.847801] Bluetooth: Invalid header checksum 20:13:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000000c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, 0x0) [ 1265.951857] Bluetooth: Invalid header checksum [ 1265.952718] Bluetooth: Invalid header checksum [ 1265.966026] audit: type=1804 audit(1625170400.577:906): pid=32360 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2713/bus" dev="sda1" ino=15310 res=1 20:13:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x0) [ 1266.061483] Bluetooth: Invalid header checksum [ 1266.064992] Bluetooth: Invalid header checksum [ 1266.173174] Bluetooth: Invalid header checksum [ 1266.178221] Bluetooth: Invalid header checksum [ 1266.228712] mkiss: ax0: crc mode is auto. [ 1266.287862] Bluetooth: Invalid header checksum [ 1266.287866] Bluetooth: Invalid header checksum [ 1266.391284] Bluetooth: Invalid header checksum [ 1266.405174] Bluetooth: Invalid header checksum [ 1266.501656] Bluetooth: Invalid header checksum [ 1266.511828] Bluetooth: Invalid header checksum [ 1266.619058] Bluetooth: Invalid header checksum [ 1266.624548] Bluetooth: Invalid header checksum 20:13:21 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xfffffffffffff000) 20:13:21 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000100)='./bus\x00', 0xea882, 0x0) fallocate(r4, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xe003}, 0x0) 20:13:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x0, 0x1, 0x1000, 0x1, 0x1a, "f983e4edcd5441f0094727fc04fd80cc9df6c2"}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r0, 0xb3d08000) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x10010, r1, 0x7ea93000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=0x10, 0x80000) preadv(r3, &(0x7f00000017c0), 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, 0x0) [ 1266.722901] Bluetooth: Invalid header checksum [ 1266.734511] Bluetooth: Invalid header checksum 20:13:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xe300}, 0x0) [ 1266.817329] mkiss: ax0: crc mode is auto. [ 1266.834198] Bluetooth: Invalid header checksum [ 1266.851699] Bluetooth: Invalid header checksum 20:13:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, 0x0) [ 1266.907654] audit: type=1804 audit(1625170401.517:907): pid=32441 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir137494313/syzkaller.uQTUVq/2918/bus" dev="sda1" ino=15027 res=1 [ 1266.941085] Bluetooth: Invalid header checksum [ 1266.962382] Bluetooth: Invalid header checksum 20:13:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x9, 0x8, &(0x7f0000001640)=[{&(0x7f0000000140)="5a00d1c9e60891aa2b7528a34c4cc712811b78f10ec5abd6c02a1063752685", 0x1f, 0x4f1b}, {&(0x7f0000001700)="36d15c779c67f8ac168f45e59c81b1e84dcc0052fdb8f465afe768e40c8153e62f4fc7b882641a9cf866ec2b9c47de2da9244a431d887df840afdac49b372e24823324bb25fad4285d8e671cced24b64e166af57cbd39050fdeefcf45d1ae59bb89493962c386b3ae3983d0ea8c73ddcaf496974246a2bce0760175cf845154613782ca40acdeb11132b0ccecc916c59ace88470d3c1935d8481916eb30c633f99e67dc6325f3ae54d9b3379cc66d5e7b1659b34d1ca4131337801e7ce713b05c7b70a72873a979244400d9ea6dacfd1ae94344b0a89bdeb358c5d6f0defc0788e636e183fbbf62e3dd0ade5e78fcf41867518287b33", 0xf6, 0x7}, {&(0x7f0000001340)="3c76ad2e85129aac980cd2c4ff9c7efb1747d5f2328ab0c463bf391c1db358be4245a80f171599f4ba773f16f794e77c3b1839d294d67859d634126ead3a731c20cd3f5f12a85897bc286f8d55fc7cca0eff5364932322041bcb9320dd0d3029eedf47fd4c53118d5df9746368dd49d9e96841a137f1", 0x76}, {&(0x7f0000000300)="a180469c1832d7e5984cf21b88bb6037cde0f953c5247e43cb1a4eed9d515ba5831012d73527f7439aadc33326106f5882f2ea7ba6c2bbc82f8653", 0x3b, 0x7}, {&(0x7f0000000340)="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", 0x1000, 0x4}, {&(0x7f0000001580)="23e7fc6308000000b5cc383bb3f28bf36b25f0d2ce39cd6719aac8cc5869fb3eef8efd4ba7ad85dfebbea88ca109e8d1ae0ba8ce0008dd1d850255114b70ba67c34ad900fcbffd7eacf26c296fded174", 0x50, 0x7fffffff}, {&(0x7f0000001480)="77af87db1ebbafda138edb01cee4c38974b6d47265a5663fde7104d3177aac3b5e99508d18c8cf4c41e58785e12e8f4857ca96425a74e4a6dc6b147d8029e880df5618aa95d87d5d8e8aa5c66f7c9c0e87d0e34414b008ac2c1e46ea526a4ea53d4e819f758f29f34268c2ca4e6d399eb63491601e5e78756ee1fe084e098ffc124df07deaad8c7aba75ca7fb512129aae5048d2531cc9475d671330891793547d116dcea4bbe3e6ff79b57f2d69f2a5cb7655d430a44e9e14487d83c2255116e36e433bffe9b2f47af6b985f467330f4580f86e7c26e6a58d9a43ee06cc2e71a763e399f5e873c1bd79049771", 0xed, 0x81}, {&(0x7f00000013c0)="4b174a515a3548c9d3a3aec60e4446", 0xf, 0x4}], 0x8000c, &(0x7f0000001dc0)=ANY=[@ANYBLOB='shortname=winnt,shortname=winnt,nonumtail=0,uni_xlate=1,hash,fowner=', @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b66736861743db94bf3951dd598c91840c0fe83e8092e570c39b9d6586aac8c8e137be019b77e97b7f1c76fc03f9ebce6721a548b23059728609c5bfdb809b73abc19f1e3a4474cf8aa6cafec35f3cfef057d5f6fe07e0b0af72cd583c2fbb32c736d61636b6673666c6f6f723d30469ad10f999e72996d1caf56cce277d308f38d312c7d4b0b2347582b81ed3212ef9ef9824912139fd2398ffaef3833663c3315c2e0bde36d68b1b58228bc71d7aff63a8da6690e76c694f22186d0ff2544678013a2af60e6fa5e29d2f341dd91e8432fc30e63e6c96deed533774e7c0c852625c186e300000000b219aeaa5d97dd386a8488edfb4f6c219d0fc28e374a14bb542a84756f6495a6d131204a6ec0eeed7d3f7b5040962bddb6f5edfb72b475fe2aa0fe93bb1160129348ea0b70976d267d8f5b2da8fac38578a430394c5f77157535f07a3c2f41332c0dadf55ac27a1517ae29092c047569643de95888e21a0661d32189327fee0f761f9c23cf87d28f866891cc136ec0b4d06a4ac786d650e0092d68ccfcf89eafc5be57d003a9b4d2a87b09ecd96b30edf01bf7f951c7abcf9369854ef2454765176e2278d0a6db51751d8eb232a26a8cdb922c17164db2200013da7465d18381da452d3268dad34eed3a3b5165353975eae8ff2dcc1fada5fa6b5ae195f30f35932a693fd35bc6d34598feb36bf146ebf7a2df8ce660580d03f009d40b08c1cd8935c282a1d99a572bd968d855a3a90ff0e40ad60eca862e8ce784064d8ae23e6982857b3122af0a089f6113110e6f5ef8ce3740cb87b3bd28b999a0f6b5b1061f3816d5d4ed3d4dbaffa2766492deae6fa2e635e327a5c91563801246d4fce7e52c2b856943f74918a32e60ee1a257fc5e4973884bd57810861044a023e232eceade03d808bba337a32f34923c062641b9634e8046ebe06d30b63e5a9f0a1e400d96128c370c0fea3545750941c0a9011ac93de35e58ef391dd79cbe8da33a1be6765216d6ea868798e8321eefa985103cb1296ed4d026ffd2f9329a6563be8fd1d2eb1f56e1b2fba4fa45b3d1c537fb8650dfeab0655889b95d515eac4a6c8c2478f55e4fed6b8eaa7904e3ad73324e7aaff1b64380b47bb0e6c745b6638bc264cda22fb71202b8284e7da945ece48a45e426eb4f0da16163bc7de0d860bbe4dfc53e3c1e31e02cbe72c762af715b392c2330c89b340a34e673d857e2436dfe6f216d02b182635c25786ed8e5403657338333682003e66bcbb94f52798a01fd1a6", @ANYRESDEC=0x0, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB=',smackfsdef=,\x00']) r2 = epoll_create1(0x0) tee(r1, r2, 0x100, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x8, 0x0, 0x0, {0xa, 0x20}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) [ 1267.062049] Bluetooth: Invalid header checksum [ 1267.072623] Bluetooth: Invalid header checksum [ 1267.089931] audit: type=1804 audit(1625170401.657:908): pid=32455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir137494313/syzkaller.uQTUVq/2918/bus" dev="sda1" ino=15027 res=1 20:13:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xf000}, 0x0) [ 1267.161164] Bluetooth: Invalid header checksum [ 1267.181246] Bluetooth: Invalid header checksum [ 1267.274589] Bluetooth: Invalid header checksum [ 1267.291164] Bluetooth: Invalid header checksum [ 1267.331350] audit: type=1804 audit(1625170401.917:909): pid=32473 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2714/bus" dev="sda1" ino=15310 res=1 [ 1267.355703] mkiss: ax0: crc mode is auto. 20:13:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1267.381802] Bluetooth: Invalid header checksum 20:13:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000480)={0x4, 0x8000, 0xaa15}) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x3) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) r2 = socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000440)={0x1, 0x1ff}, 0x8) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x6, 0x401, 0x3, 0x6, 0x0, 0x7}, {0x4f, 0x7f, 0x1f, 0x8, 0x9}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) [ 1267.415114] Bluetooth: Invalid header checksum [ 1267.489717] validate_nla: 12 callbacks suppressed [ 1267.489728] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1267.503989] Bluetooth: Invalid header checksum [ 1267.521074] Bluetooth: Invalid header checksum [ 1267.577513] IPv6: Can't replace route, no match found [ 1267.601376] Bluetooth: Invalid header checksum [ 1267.631620] Bluetooth: Invalid header checksum [ 1267.644964] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1267.713420] IPv6: Can't replace route, no match found [ 1267.722705] Bluetooth: Invalid header checksum [ 1267.745410] Bluetooth: Invalid header checksum [ 1267.832768] Bluetooth: Invalid header checksum [ 1267.853880] Bluetooth: Invalid header checksum [ 1267.944451] Bluetooth: Invalid header checksum [ 1267.962408] Bluetooth: Invalid header checksum 20:13:22 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:22 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000100)='./bus\x00', 0xea882, 0x0) fallocate(r4, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={0x0, @can={0x1d, 0x0}, @phonet={0x23, 0x80, 0x92}, @l2={0x1f, 0x9, @any, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='wg2\x00', 0x48, 0x10001, 0x100}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000006100010027bd7000fddbdf2500000002c4dfb9f9118a688c14df1eba0f9c7e4bb82efc118445b2e4ef4dfc74ad00b52c3f083bd375bb9f2f32d7c0eb6339a7440e88b6a8f114c06ca1cc0350af83d5adbcea771a0fbb256ba65b3a0e847fa1bb12440cc66183b53cbf491dac25baba0dfe56020a59dd1e301a57bb560fd52b", @ANYRES32=r1, @ANYBLOB="f1fff1ffe9ff58850d3786f3af000000000005be22778788e933bb1fba6e0608be3640382ebc6ff263e5ed599a2424d98a48d9ba092c9aa8b972adc27aade492c09d5493f69246792a8b9f7c17572a8d489330b64edbe9002ac7e1d278e4cf26192926c5b8bd93a5d174ebfe5ba77cfbd28b46e9f4fd12adc20d5d74b9cd584208049a"], 0x2c}, 0x1, 0x0, 0x0, 0x20008010}, 0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xfc00}, 0x0) 20:13:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) 20:13:22 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000100)='./bus\x00', 0xea882, 0x0) open(0x0, 0x1, 0x144) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1268.051120] Bluetooth: Invalid header checksum [ 1268.071044] Bluetooth: Invalid header checksum [ 1268.153833] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1268.161779] Bluetooth: Invalid header checksum [ 1268.182423] Bluetooth: Invalid header checksum [ 1268.249706] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1268.271054] Bluetooth: Invalid header checksum [ 1268.291177] Bluetooth: Invalid header checksum 20:13:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xfc03}, 0x0) [ 1268.295970] audit: type=1804 audit(1625170402.907:910): pid=32525 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir137494313/syzkaller.uQTUVq/2919/bus" dev="sda1" ino=15324 res=1 [ 1268.381461] Bluetooth: Invalid header checksum [ 1268.399769] audit: type=1804 audit(1625170402.907:911): pid=32521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir371779395/syzkaller.9X3iUh/1038/bus" dev="sda1" ino=15325 res=1 [ 1268.434966] Bluetooth: Invalid header checksum 20:13:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f00000001c0)={0x0, &(0x7f0000000100)="1399145ed1889e9ef3519e9ced5ee5c1e8a220847907708e2ed715a22c5e63642ce9c743165c9311127bb1615e621c70e90008854d2cbfab099830b5ce4f6e319f1f378cf04bd9e07ac15c3872fbbc4f8ae971579e7fc453a8377d8eb7fe79d5874bd9a98cf71a98ea162ce9b3faa9506a03468ee8055a7f6f95384a0009fed355195ec3a0b87fa085b00211eaea30eb8efdd450f1b183e6ba5fa57fab42e272f8de46491cb66fd0f9fc796a77d6d69381fadfd113b5", 0xb6}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) openat(r2, &(0x7f0000000040)='./file0\x00', 0x40000, 0x200) [ 1268.491120] Bluetooth: Invalid header checksum 20:13:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1268.569546] Bluetooth: Invalid header checksum [ 1268.601095] Bluetooth: Invalid header checksum [ 1268.644422] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1268.665169] Bluetooth: Invalid header checksum [ 1268.711345] Bluetooth: Invalid header checksum 20:13:23 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1268.777400] Bluetooth: Invalid header checksum [ 1268.782325] audit: type=1804 audit(1625170403.047:912): pid=32527 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir371779395/syzkaller.9X3iUh/1038/bus" dev="sda1" ino=15325 res=1 [ 1268.806562] audit: type=1804 audit(1625170403.057:913): pid=32544 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2715/bus" dev="sda1" ino=15332 res=1 [ 1268.821153] Bluetooth: Invalid header checksum 20:13:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xfe80}, 0x0) [ 1268.891998] Bluetooth: Invalid header checksum [ 1268.992785] Bluetooth: Invalid header checksum [ 1269.002550] Bluetooth: Invalid header checksum [ 1269.049777] Bluetooth: Invalid header checksum 20:13:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1269.093890] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1269.111731] Bluetooth: Invalid header checksum [ 1269.157731] Bluetooth: Invalid header checksum 20:13:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x7, 0x10, 0x400, 0xdf96, {{0x44, 0x4, 0x2, 0x7, 0x110, 0x64, 0x0, 0x2, 0x2f, 0x0, @loopback, @empty, {[@lsrr={0x83, 0x7, 0x47, [@broadcast]}, @timestamp_addr={0x44, 0x24, 0xd1, 0x1, 0xe, [{@empty, 0xffff7fff}, {@multicast2, 0xc7}, {@empty, 0x1}, {@empty, 0xfff}]}, @end, @timestamp={0x44, 0x18, 0x5f, 0x0, 0x2, [0x4bb, 0x8, 0x5, 0x3, 0x3f]}, @ssrr={0x89, 0xb, 0x96, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp_addr={0x44, 0x2c, 0x9b, 0x1, 0x8, [{@rand_addr=0x64010100, 0x7}, {@broadcast, 0x8}, {@remote, 0x3}, {@broadcast, 0xc4d}, {@local, 0x6}]}, @timestamp_addr={0x44, 0x14, 0xcc, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fffffff}, {@private=0xa010102, 0x3f}]}, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x7, 0x10, "afa40e17a1777cd66fa7432698f6"}, {0x0, 0x3, "fa"}]}, @cipso={0x86, 0x54, 0x3, [{0x6, 0x10, "9b97c0823001807c038f097eb8fc"}, {0x0, 0x8, "3bda9eb62b01"}, {0x7, 0xa, "7a1cd0eaf78fb401"}, {0x2, 0x5, 'Tm\f'}, {0x6, 0xa, "2be1dee8cd73c757"}, {0x6, 0x12, "73e2cacd9a4553411cedc13092afb2ed"}, {0x7, 0xb, "32c1ee364b630623b5"}]}]}}}}}) accept$packet(r0, &(0x7f0000000300), &(0x7f0000000340)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x20, 0x70bd2d, 0x25dfdbfb, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x2, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}}, 0x8009) [ 1269.374894] Bluetooth: Invalid header checksum [ 1269.379746] Bluetooth: Invalid header checksum [ 1269.386213] Bluetooth: Invalid header checksum [ 1269.391316] Bluetooth: Invalid header checksum 20:13:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000000)) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000140)=""/183, 0xb7}, {&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f00000002c0)=""/193, 0xc1}, {&(0x7f00000003c0)=""/71, 0x47}, {&(0x7f0000000440)=""/112, 0x70}, {&(0x7f00000004c0)=""/123, 0x7b}, {&(0x7f0000000540)}], 0x7, 0x2, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x333, 0x0, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) dup3(r4, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x9) [ 1269.419276] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1269.481099] Bluetooth: Invalid header checksum [ 1269.504114] Bluetooth: Invalid header checksum 20:13:24 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1269.598554] Bluetooth: Invalid header checksum [ 1269.614122] Bluetooth: Invalid header checksum [ 1269.632873] mkiss: ax0: crc mode is auto. 20:13:24 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendmsg$unix(r3, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000100)='./bus\x00', 0xea882, 0x0) open(0x0, 0x1, 0x144) fallocate(r4, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xfec0}, 0x0) [ 1269.701059] Bluetooth: Invalid header checksum [ 1269.721357] Bluetooth: Invalid header checksum 20:13:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfc}, [@RTA_MULTIPATH={0xc, 0x9, {0x1000, 0x4, 0x2, r4}}]}, 0x28}}, 0x0) [ 1269.784804] IPv6: Can't replace route, no match found [ 1269.800921] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1269.812134] Bluetooth: Invalid header checksum [ 1269.825666] kauditd_printk_skb: 2 callbacks suppressed 20:13:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1269.825681] audit: type=1804 audit(1625170404.437:916): pid=32606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2717/bus" dev="sda1" ino=15336 res=1 [ 1269.851730] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1269.863968] Bluetooth: Invalid header checksum 20:13:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 20:13:24 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1269.921457] Bluetooth: Invalid header checksum [ 1269.941452] Bluetooth: Invalid header checksum 20:13:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xff00}, 0x0) [ 1270.023484] audit: type=1804 audit(1625170404.527:917): pid=32610 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir137494313/syzkaller.uQTUVq/2920/bus" dev="sda1" ino=15027 res=1 [ 1270.049137] Bluetooth: Invalid header checksum [ 1270.083057] Bluetooth: Invalid header checksum [ 1270.092474] Bluetooth: Invalid header checksum [ 1270.098473] Bluetooth: Invalid header checksum [ 1270.152775] Bluetooth: Invalid header checksum [ 1270.180921] audit: type=1804 audit(1625170404.637:918): pid=32614 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir137494313/syzkaller.uQTUVq/2920/bus" dev="sda1" ino=15027 res=1 [ 1270.201129] Bluetooth: Too short H5 packet [ 1270.205215] Bluetooth: Invalid header checksum [ 1270.217720] audit: type=1804 audit(1625170404.827:919): pid=32629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2718/bus" dev="sda1" ino=15338 res=1 [ 1270.240459] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1270.254484] Bluetooth: Invalid header checksum [ 1270.273710] Bluetooth: Invalid header checksum 20:13:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x230040, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000100)={0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) r5 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) r6 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="860dce5acdb332a49d476627dcc72ad364b8abc8f7f8d43ca881b07345fec745a1c283a9cbd9ffdb76e816dc3ebdc64cddc5c5332c1ff44c938c4527dcc8b21dcda5f7148b0e9f19a8fc4e5714b2fe88b8af757745b86845195e7400c7de5ea1ffdbada0b837b659bd9263c7327c6ff7c8ac1d6381dc39"], 0x24}}, 0x0) 20:13:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xa68a) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x3c, &(0x7f00000002c0)="f47970da7c2fd541e0656c5762306aa606a0c2a76e59b65fa78fb184da006cabbd58564cf09dcac54f6d212e05d23391ff083d38ff122a776e08af20"}}], 0x1c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1270.311141] Bluetooth: Invalid header checksum [ 1270.316142] Bluetooth: Invalid header checksum [ 1270.371700] Bluetooth: Invalid header checksum 20:13:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xff1c}, 0x0) [ 1270.421307] Bluetooth: Invalid header checksum [ 1270.426138] Bluetooth: Invalid header checksum [ 1270.458803] IPv6: Can't replace route, no match found [ 1270.483477] Bluetooth: Invalid header checksum [ 1270.484925] IPv6: Can't replace route, no match found [ 1270.520471] IPv6: Can't replace route, no match found [ 1270.531316] Bluetooth: Invalid header checksum [ 1270.536022] Bluetooth: Invalid header checksum [ 1270.546681] IPv6: Can't replace route, no match found [ 1270.591448] Bluetooth: Invalid header checksum [ 1270.609885] IPv6: Can't replace route, no match found [ 1270.627616] IPv6: Can't replace route, no match found [ 1270.634209] IPv6: Can't replace route, no match found [ 1270.641120] Bluetooth: Invalid header checksum [ 1270.646341] Bluetooth: Invalid header checksum [ 1270.703688] Bluetooth: Invalid header checksum 20:13:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x34000}, 0x0) [ 1270.751079] Bluetooth: Invalid header checksum [ 1270.757135] Bluetooth: Invalid header checksum [ 1270.813040] Bluetooth: Invalid header checksum [ 1270.861535] Bluetooth: Invalid header checksum 20:13:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1270.921196] Bluetooth: Invalid header checksum [ 1270.985563] Bluetooth: Invalid header checksum [ 1271.034024] Bluetooth: Invalid header checksum 20:13:25 executing program 2 (fault-call:2 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 20:13:25 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1271.091171] Bluetooth: Invalid header checksum [ 1271.142052] Bluetooth: Invalid header checksum [ 1271.146754] Bluetooth: Invalid header checksum [ 1271.151873] Bluetooth: Invalid header checksum 20:13:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) [ 1271.201049] Bluetooth: Invalid header checksum [ 1271.251227] Bluetooth: Invalid header checksum [ 1271.261919] Bluetooth: Too short H5 packet [ 1271.266610] Bluetooth: Invalid header checksum [ 1271.284427] audit: type=1804 audit(1625170405.897:920): pid=32668 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2719/bus" dev="sda1" ino=15324 res=1 [ 1271.321064] Bluetooth: Invalid header checksum [ 1271.361075] Bluetooth: Invalid header checksum 20:13:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) [ 1271.380356] Bluetooth: Invalid header checksum [ 1271.431594] Bluetooth: Invalid header checksum [ 1271.472386] Bluetooth: Invalid header checksum [ 1271.482403] Bluetooth: Invalid header checksum 20:13:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 1271.543229] Bluetooth: Invalid header checksum [ 1271.560399] mkiss: ax0: crc mode is auto. [ 1271.585473] Bluetooth: Invalid header checksum [ 1271.595708] Bluetooth: Invalid header checksum 20:13:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:26 executing program 5: ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000100)={0x0, "8df8e27e284d458a510319ba68260fc4"}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="1e", 0x1}, {&(0x7f00000004c0)=']', 0x1}], 0x2, 0x0) close(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000280)=0xa, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800000000000000000000f000", @ANYRES32=0x0, @ANYBLOB="000000000800040000000000", @ANYRES32=r7, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=ANY=[@ANYBLOB="f3000000700000022dbd7000fcdbdf2507000000", @ANYRES32=r7, @ANYBLOB="0c00018005000300030000000c00018008000100100000000c00018005000300030000000c00018006000200100000000c00018008000100100004000c0001800500030002000000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4000810) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x8800) [ 1271.652405] Bluetooth: Invalid header checksum [ 1271.691210] Bluetooth: Invalid header checksum [ 1271.702645] Bluetooth: Invalid header checksum [ 1271.732698] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1271.754048] mkiss: ax0: crc mode is auto. [ 1271.764736] Bluetooth: Invalid header checksum [ 1271.802111] Bluetooth: Invalid header checksum [ 1271.812401] Bluetooth: Invalid header checksum [ 1271.871520] Bluetooth: Invalid header checksum [ 1271.911141] Bluetooth: Invalid header checksum [ 1271.981162] Bluetooth: Invalid header checksum [ 1272.023051] Bluetooth: Invalid header checksum [ 1272.102163] Bluetooth: Invalid header checksum [ 1272.132025] Bluetooth: Invalid header checksum [ 1272.201239] Bluetooth: Invalid header checksum [ 1272.241449] Bluetooth: Invalid header checksum [ 1272.311325] Bluetooth: Invalid header checksum [ 1272.351223] Bluetooth: Invalid header checksum [ 1272.431171] Bluetooth: Invalid header checksum [ 1272.461032] Bluetooth: Invalid header checksum [ 1272.551106] Bluetooth: Invalid header checksum [ 1272.571510] Bluetooth: Invalid header checksum [ 1272.671084] Bluetooth: Invalid header checksum [ 1272.681335] Bluetooth: Invalid header checksum [ 1272.781064] Bluetooth: Invalid header checksum [ 1272.791658] Bluetooth: Invalid header checksum [ 1272.892012] Bluetooth: Invalid header checksum [ 1272.901357] Bluetooth: Invalid header checksum [ 1273.001105] Bluetooth: Invalid header checksum [ 1273.021235] Bluetooth: Invalid header checksum [ 1273.112035] Bluetooth: Invalid header checksum [ 1273.131222] Bluetooth: Invalid header checksum [ 1273.221066] Bluetooth: Invalid header checksum [ 1273.241118] Bluetooth: Invalid header checksum [ 1273.331375] Bluetooth: Invalid header checksum [ 1273.351078] Bluetooth: Invalid header checksum 20:13:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000000000a000000000000000000000008000600", @ANYRES32=0x0, @ANYBLOB="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"], 0x24}}, 0x0) 20:13:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 20:13:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x2, &(0x7f0000000000)) 20:13:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:28 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0x10001, 0x5, 0x7fffffff, 0x101, 0x80], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000340)=""/47) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x4}, @fwd={0xd}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xf, 0x1}, {0x5, 0x2}, {0x2, 0x2}, {0x7}, {0x9, 0x1}, {0xb, 0x1}, {0xc, 0x1}]}, @restrict={0x7, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x0, 0x5f, 0x5f, 0x5f]}}, &(0x7f00000002c0)=""/53, 0x86, 0x35}, 0x20) r3 = socket$inet6(0x10, 0x2, 0x0) r4 = accept4$phonet_pipe(r1, &(0x7f0000000380), &(0x7f00000003c0)=0x10, 0x0) fcntl$getown(r4, 0x9) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) preadv(r3, &(0x7f0000000500), 0x63, 0xffffffff, 0x0) r5 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f00000001c0)={0x20000008}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x2, 0x1, 0x4, 0x3ff, 0xa, "cf9673dec2bb641d280ea012c9f0577e9b1ce3"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) [ 1273.441412] Bluetooth: Invalid header checksum [ 1273.461163] Bluetooth: Invalid header checksum [ 1273.488054] audit: type=1804 audit(1625170408.097:921): pid=32725 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2720/bus" dev="sda1" ino=15349 res=1 [ 1273.508417] validate_nla: 11 callbacks suppressed [ 1273.508427] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1273.543529] mkiss: ax0: crc mode is auto. [ 1273.554452] Bluetooth: Invalid header checksum [ 1273.571198] Bluetooth: Invalid header checksum [ 1273.576246] netlink: 'syz-executor.1': attribute type 20 has an invalid length. 20:13:28 executing program 5: getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0x2, 0xfffffffd, 0x400000]}, &(0x7f0000000780)=0x44) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) mmap(&(0x7f00003c8000/0x2000)=nil, 0x2000, 0x0, 0x4010, r0, 0x7f19c000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) preadv(r2, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/105, 0x69}], 0x1, 0xb504, 0x1) r3 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) syncfs(r3) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000001800010000000000000000000a000000000000000000000008000600", @ANYRES32=0x0, @ANYBLOB="a15f4ca68093df574d54a3094c5c1b24b259fd7a73d32f0b33bf0110da3d159aa720c6562e30dbceb4dd7a1f51996c6bbc86d20a421fa2bc2abb46be5087d44d20bc8d6893713b686e3be15c69f061081d42cba7b44dbc3293ef2c52c2c44f6ab0f5205dca6d97ef97f89b7d766622a5bd210924d4ee552a123f90e7bca48315c04bd47f96625526d75a4c234b2203aacba448d859173c93384ff8d1a7ee8958ec1640795759668fa2e93858bc6ea43696b2861c63fad65b934122b9a4237a8e20e42dc40fa7f87e94b24d78bbdcf056cc6c89e6e1f7cff7f19841dd6fe7f7db679be1f5895aadde"], 0x24}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000600)={0x3, 0x1, 0x1, 0x8, 0xb6, &(0x7f0000000200)}) 20:13:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 1273.627277] mkiss: ax0: crc mode is auto. [ 1273.631149] Bluetooth: Invalid header checksum [ 1273.636115] Bluetooth: Invalid header checksum [ 1273.661382] Bluetooth: Invalid header checksum [ 1273.694603] IPv6: Can't replace route, no match found [ 1273.699993] Bluetooth: Invalid header checksum [ 1273.729376] IPv6: Can't replace route, no match found 20:13:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x180e31d3288a3ad8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1273.741829] Bluetooth: Too short H5 packet [ 1273.746574] Bluetooth: Invalid header checksum [ 1273.771321] Bluetooth: Invalid header checksum [ 1273.778932] IPv6: Can't replace route, no match found 20:13:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5409, &(0x7f0000000000)) [ 1273.801971] Bluetooth: Invalid header checksum [ 1273.849692] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1273.851252] Bluetooth: Invalid header checksum [ 1273.882324] Bluetooth: Invalid header checksum 20:13:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000200)=0xc69, 0x4) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000100)=""/134, 0x86}], 0x2, 0x3ff, 0x8d85) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x220001, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x0, 0x401, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x20, 0x10, 0x7, 0x5}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)=@bridge_newneigh={0x8c, 0x1c, 0x800, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x60, 0x1d, 0x1}, [@NDA_IFINDEX={0x8}, @NDA_MASTER={0x8, 0x9, 0xd6}, @NDA_VNI={0x8, 0x7, 0x7fff}, @NDA_CACHEINFO={0x14, 0x3, {0x9, 0x800, 0xc293, 0x3}}, @NDA_DST_IPV6={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_DST_MAC={0xa, 0x1, @random="3fbbc5e259f8"}, @NDA_IFINDEX={0x8, 0x8, r6}, @NDA_DST_MAC={0xa, 0x1, @broadcast}, @NDA_VLAN={0x6, 0x5, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) [ 1273.894796] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1273.911376] Bluetooth: Invalid header checksum [ 1273.957536] mkiss: ax0: crc mode is auto. [ 1273.962506] Bluetooth: Invalid header checksum 20:13:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) [ 1274.001757] Bluetooth: Invalid header checksum [ 1274.013173] IPv6: Can't replace route, no match found [ 1274.021791] Bluetooth: Invalid header checksum [ 1274.038855] IPv6: Can't replace route, no match found 20:13:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x540b, &(0x7f0000000000)) [ 1274.071992] Bluetooth: Invalid header checksum [ 1274.101162] Bluetooth: Invalid header checksum 20:13:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) readahead(r0, 0x1, 0x5) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) [ 1274.131222] Bluetooth: Invalid header checksum 20:13:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x3ff) r2 = syz_mount_image$sysv(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x9ace, 0x2, &(0x7f0000000440)=[{&(0x7f0000000380)="4b0d1e2329bb34ed788b7c957e79c0924af5e3e48622df9f78836bde694d70998cecd42afecb0485706680fb01198e732b83dbb31eee86ee276c0228b3ce79440ac3f24d", 0x44, 0x1f}, {&(0x7f0000000400), 0x0, 0x8000}], 0xa00081, &(0x7f0000000480)={[{}, {'+\xa5'}, {'/dev/btrfs-control\x00'}, {'/](\\:'}], [{@smackfsroot={'smackfsroot', 0x3d, '*@'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@uid_gt={'uid>', 0xee00}}]}) r3 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) r5 = openat$md(0xffffffffffffff9c, &(0x7f0000000500), 0x4000, 0x0) r6 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) r7 = accept4$unix(r0, &(0x7f0000000540)=@abs, &(0x7f00000005c0)=0x6e, 0x80800) r8 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) r9 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) sendmsg$unix(r1, &(0x7f0000000680)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000280)=[{&(0x7f00000001c0)="5582224eb16f704d438a530bb975c04986f69ee5ea71465a0ce7443cbe1896a18f9f6f50cd46ef1aca6f61559c988f59acdb80211d36d462aad070c70d7e7bd38d43df279e3b29997ac933606d4fb9236f96713df3cb845c1f265195aed6665222e0d8ea0396deab41418b3c1437fc602cc253320b48a1300ecf66683f4643beba77bcf7b037c3505b94990eca9109f8f45eba5d63587cbe14e0a8b0f0965888ea61aabc5704756c100d1d694124b7038e", 0xb1}], 0x1, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r1, r0, r2, r0, r3, r4, r5]}}, @rights={{0x20, 0x1, 0x1, [r6, r7, r8, r9]}}], 0x70, 0x8801}, 0x18081) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) [ 1274.179426] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1274.181176] Bluetooth: Invalid header checksum [ 1274.211190] Bluetooth: Invalid header checksum [ 1274.229079] mkiss: ax0: crc mode is auto. [ 1274.231467] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1274.241479] Bluetooth: Invalid header checksum [ 1274.291578] Bluetooth: Invalid header checksum [ 1274.317321] mkiss: ax0: crc mode is auto. [ 1274.322225] Bluetooth: Invalid header checksum [ 1274.354440] Bluetooth: Invalid header checksum 20:13:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:29 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 20:13:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=ANY=[@ANYBLOB="240000001800011002000000000000000a000000050000000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) [ 1274.377064] VFS: unable to find oldfs superblock on device loop0 [ 1274.431142] Bluetooth: Invalid header checksum [ 1274.461128] Bluetooth: Invalid header checksum 20:13:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x540c, &(0x7f0000000000)) [ 1274.484341] VFS: unable to find oldfs superblock on device loop0 20:13:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00001d6000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0xa1f5e000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) [ 1274.536676] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1274.560099] Bluetooth: Invalid header checksum [ 1274.573345] Bluetooth: Invalid header checksum 20:13:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$KDENABIO(r1, 0x4b36) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1274.601949] Bluetooth: Invalid header checksum [ 1274.611471] Bluetooth: Invalid header checksum [ 1274.633670] mkiss: ax0: crc mode is auto. [ 1274.652182] Bluetooth: Invalid header checksum [ 1274.654902] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1274.677513] audit: type=1804 audit(1625170409.287:922): pid=373 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2721/bus" dev="sda1" ino=15354 res=1 [ 1274.718861] Bluetooth: Invalid header checksum [ 1274.723955] Bluetooth: Too short H5 packet [ 1274.728243] Bluetooth: Invalid header checksum 20:13:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) [ 1274.761741] Bluetooth: Invalid header checksum [ 1274.769608] mkiss: ax0: crc mode is auto. 20:13:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYRESDEC=r2], 0x24}}, 0x20000004) [ 1274.821468] Bluetooth: Invalid header checksum [ 1274.821990] Bluetooth: Invalid header checksum 20:13:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x540d, &(0x7f0000000000)) 20:13:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDENABIO(r0, 0x4b36) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x81, 0xd7, 0x0, 0x1, 0x0, 0x400, 0x80080, 0x13, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x100000000000000, 0x2}, 0x8000, 0x2, 0x0, 0x8, 0x2, 0x1, 0x0, 0x0, 0x4, 0x0, 0x3}, r2, 0x0, r1, 0x7) [ 1274.871280] Bluetooth: Invalid header checksum [ 1274.931314] Bluetooth: Invalid header checksum [ 1274.935992] Bluetooth: Invalid header checksum [ 1274.944395] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1274.976982] IPv6: Can't replace route, no match found [ 1274.984256] Bluetooth: Invalid header checksum [ 1274.989270] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1275.025750] mkiss: ax0: crc mode is auto. [ 1275.043697] Bluetooth: Invalid header checksum [ 1275.048368] Bluetooth: Invalid header checksum 20:13:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) [ 1275.095869] Bluetooth: Invalid header checksum [ 1275.115699] mkiss: ax0: crc mode is auto. [ 1275.151264] Bluetooth: Invalid header checksum [ 1275.151268] Bluetooth: Invalid header checksum [ 1275.202080] Bluetooth: Invalid header checksum [ 1275.263724] Bluetooth: Invalid header checksum [ 1275.268481] Bluetooth: Invalid header checksum [ 1275.313149] Bluetooth: Invalid header checksum 20:13:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1275.371862] Bluetooth: Invalid header checksum [ 1275.421087] Bluetooth: Invalid header checksum [ 1275.483806] Bluetooth: Invalid header checksum 20:13:30 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x100) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x0, 0x9, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000004300020024913900ffdbdf25020000fb0b000800ee64000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000c}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 20:13:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x92200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x11) 20:13:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xb000000}, 0x0) 20:13:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5413, &(0x7f0000000000)) [ 1275.532976] Bluetooth: Invalid header checksum [ 1275.569013] Bluetooth: Invalid header checksum [ 1275.574834] Bluetooth: Invalid header checksum [ 1275.591212] Bluetooth: Invalid header checksum 20:13:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=ANY=[@ANYBLOB="2400001e0500010000000000000000003a060000000000000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@gettaction={0x178, 0x32, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x19}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xa35}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff7f}}]}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7c}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x71, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8de}]}, 0x178}, 0x1, 0x0, 0x0, 0xc881}, 0x200044c0) [ 1275.641269] Bluetooth: Invalid header checksum [ 1275.681177] Bluetooth: Invalid header checksum 20:13:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) [ 1275.708122] Bluetooth: Invalid header checksum [ 1275.718554] mkiss: ax0: crc mode is auto. [ 1275.751370] Bluetooth: Invalid header checksum 20:13:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000000c0)={0x8, "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"}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCCONS(r1, 0x541d) [ 1275.784046] mkiss: ax0: crc mode is auto. [ 1275.793463] Bluetooth: Invalid header checksum [ 1275.817025] Bluetooth: Invalid header checksum 20:13:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) mmap(&(0x7f00002de000/0x2000)=nil, 0x2000, 0x1000004, 0x12, r0, 0x42078000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x101, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xf3, 0xc5, "f2f1849a46efaf26f5ff2a91d1204927401d0f6b1e87cb57c9984f20d0193f88d6da44f016ab166ffe5e777ada0f7deca7af828e4fab04d0997c329d2e69ad5dcbffe37103c823b9beb39ca346a6efce84b1da2b6319cae179f84b8d37bb9354b23c37a3badb9fa7da866b108d8d5cd3d0a1276267e4e99ecbe9b8be9a5e35f1e75f2c494c18ea73007380d057f14b6132ab2d654598978c6003819933282d1eedc97c47243d79ca240f5e5c04a720d65d5a73ae4810fc82aed66ea4eba6352fe718121929789ebea1dd337d1aa947335b592745c32da416f9455d5ced51f6779e3ce0a6af04f18f3ca99f665c3416"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7ff}, @NL80211_ATTR_VENDOR_DATA={0x35, 0xc5, "f5685b088175ea76743e8999c963108c5b14a7cfa8cb5b8b93468cee1661ca224ce56430b1fd0c65520f436f69f741e30f"}]}, 0x148}, 0x1, 0x0, 0x0, 0x8010}, 0x8004) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) [ 1275.861608] Bluetooth: Invalid header checksum 20:13:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 20:13:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xc020000}, 0x0) [ 1275.901396] Bluetooth: Invalid header checksum [ 1275.921301] Bluetooth: Invalid header checksum [ 1275.923957] audit: type=1804 audit(1625170410.537:923): pid=487 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2722/bus" dev="sda1" ino=15365 res=1 [ 1275.972306] Bluetooth: Invalid header checksum [ 1276.011838] Bluetooth: Invalid header checksum [ 1276.031389] Bluetooth: Invalid header checksum [ 1276.081047] Bluetooth: Invalid header checksum [ 1276.094265] mkiss: ax0: crc mode is auto. [ 1276.125928] Bluetooth: Invalid header checksum [ 1276.141144] Bluetooth: Invalid header checksum [ 1276.167021] mkiss: ax0: crc mode is auto. [ 1276.231081] Bluetooth: Invalid header checksum [ 1276.236299] Bluetooth: Invalid header checksum [ 1276.251040] Bluetooth: Invalid header checksum 20:13:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1276.333196] Bluetooth: Invalid header checksum [ 1276.364328] Bluetooth: Invalid header checksum [ 1276.442934] Bluetooth: Invalid header checksum [ 1276.462996] Bluetooth: Invalid header checksum [ 1276.467647] Bluetooth: Invalid header checksum [ 1276.482138] Bluetooth: Invalid header checksum [ 1276.553201] Bluetooth: Invalid header checksum [ 1276.571465] Bluetooth: Invalid header checksum [ 1276.581509] Bluetooth: Invalid header checksum [ 1276.663034] Bluetooth: Invalid header checksum [ 1276.683120] Bluetooth: Invalid header checksum [ 1276.698205] Bluetooth: Invalid header checksum 20:13:31 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x1800003, 0x12, r0, 0x1000000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x20008040) 20:13:31 executing program 0: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/189, 0xbd}, {&(0x7f0000000180)=""/142, 0x8e}, {&(0x7f0000000240)=""/104, 0x68}, {&(0x7f00000002c0)}], 0x4, 0x5, 0x1c4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 20:13:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 20:13:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5415, &(0x7f0000000000)) [ 1276.771395] Bluetooth: Invalid header checksum [ 1276.791114] Bluetooth: Invalid header checksum [ 1276.802170] Bluetooth: Invalid header checksum [ 1276.881082] Bluetooth: Invalid header checksum [ 1276.896736] mkiss: ax0: crc mode is auto. [ 1276.901410] Bluetooth: Invalid header checksum [ 1276.912270] Bluetooth: Invalid header checksum [ 1276.916068] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 20:13:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 20:13:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r6) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r7, 0x400455c8, 0x2) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)) [ 1276.992351] Bluetooth: Invalid header checksum [ 1277.004398] mkiss: ax0: crc mode is auto. [ 1277.011596] Bluetooth: Invalid header checksum [ 1277.021417] Bluetooth: Invalid header checksum 20:13:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) r2 = accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000140)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1f, "6db43e54800f0a"}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f0000000300)={@local, 0x6a}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001540)=ANY=[@ANYRES64=r6, @ANYBLOB="b5b50e84a33bd9a4f8a271634ca81d0ae5b639e45eee8f44509ede7889e47fe2fcf13a5b5bdd821949fa90e6ba4735729298d6f822218184b6cc68e75a0aaae99ed7d7f1080400f17c805e62d220bb4405c32a9185d89a646612b38155d95d002b9ee824463e339abb0af220bf1ed8ed4efac92e3bd00e4cb0e32912b56ef28b0936c4275006310cee8cd11435f23ec6bc77ca9efc477a736588bbef8c566bf50362ebfe306945db7e2876eb35d7d987b6e6e466a05b7b6e1a40151775de8df79c098d21058e7891b19ba0f21185f58a76e35efae0107768b7e78cbbe972b7bd9b210639946d37b51d602552a35a348eb618bf9f228cf0971e2a0be956828eac4ea8e041f2421dcd204455264e129abe591b92728ee92875e82c57742c12351c74724e05c8ce60f405786a9b77c68fdf2ad03860789f70ce20b48a42a397938ff800c748aef5806a9fb4c2b326b08417ee3b2cfd61ae8213aa826ede4637f0662dbe19e1deda98af7e58ab9fa5d4d7197bb21d3a36f720f4d13a36672bb01ee20f9ae9e1093147480e2c818802c8528873e86a35104819cc9bef6ef24da363883ff8c2486b55ce188a4f3f648772788a00015757b4fced3bb3aa2b2130ff981f3c50420d38a2d2e9234466866c0746b44c692c8095d6a4fb7a9f88acd04233f2a510da987e139945750900bc5c0cbbe51d9c8a4eda34eaf3e4d09a59c9deb6f23b6d5e87f8c7fceff52686e8b3258820"]) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000040)={r6, 0x7}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001480)={0xffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "7dff3fa1f2643e"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000002480)={r4, r7, "9509c9128e6a326449eb6c977849f7725cc6f8a107d3693fdef01912ca89dca4b513db2eaa5153670e0f42f5f9a93485fb216ad9f4e0969c5fd41ee4d8a31d2658f9d9260ab3e55b571994e3ee087507b3ff95cff39186b6cc8552970d373cd097e66ca6852697f23abc08f5117a71410b1936f0807c98c8e4e21a3126fcd8e4bc63b93e7469754bf55332842ae9b20644c2ee803826eedb33f2b2aad3405da5dd04fa9aa032265ad7af668ac5d75a009d30eec1b449cf55523f3058d3a8b6c9a1575bf5874b4e4fec932adda439c8ba76f8d2b3c7c707a3e29d8ee78fab71b218d7a1dd8984138553ed03e36d17ac9a1c0bb1ffe4e8f6921626524dfe64cf43", "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"}) 20:13:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5416, &(0x7f0000000000)) [ 1277.101108] Bluetooth: Invalid header checksum [ 1277.121095] Bluetooth: Invalid header checksum [ 1277.131702] Bluetooth: Invalid header checksum 20:13:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 20:13:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1277.211620] Bluetooth: Invalid header checksum [ 1277.218668] mkiss: ax0: crc mode is auto. [ 1277.241827] Bluetooth: Invalid header checksum 20:13:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x61c0, 0x83) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x6) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000100)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r2, r3, &(0x7f0000000180)=0x8, 0x0) 20:13:31 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1277.321098] Bluetooth: Invalid header checksum 20:13:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000001000)=[{0x0, 0x0, &(0x7f0000000040)=[{0xfffffffffffffffd}, {&(0x7f0000000100)="c9bc186acaf011880a032ecb2553a43f3107063099e9dec856a74105262f82ad3a7d5b1c3674eab1213e3e8eb208793b64b0079193742342793936c6f0c439dd699c30fd465b4e95ebe3", 0x4a}, {&(0x7f0000000180)="584d36befdfa4d022211a88da10cf0d730d1246fd7757d241591bd11cda74abb823752776722f3cedfbebe5d26b965854edfc335dcd44879ddd772ff0ad7825f0be8b1ce4644530f9d9fd090c17303afbe0f92b2", 0x54}, {&(0x7f0000000200)="a8457888dc9b9c0baa4184fa98723c3c60bbb241643b686d3d05516673224331bfc8dd1f73e4d1305ea1c7ce06c616f231072c6c072e1aae5549870337f30488446658ae61cfec10eb252e237ead8a6b5028a8627e90d3da84457b22348aefc036763a4d43cabcbdf2d5b534e684c0aae480ea35c00f719ecfa9d15a18bef848dee8454dc3ebc97fa32cd0526c19a5c81fc180cb4d50fbd860cddc90b42781096e478d530678c3a0acb7f3d3be1783a4e7c0d8d238338a30b541f9a9fa80b03300b59e1674d877236ce25a74a83b6d2644305775cf", 0xd5}], 0x4, &(0x7f0000000300)=[@assoc={0x18, 0x117, 0x4, 0xa9}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x38, 0x117, 0x2, 0x24, "3df2ef80ad1c2253425a5575e536c8baa230a7592800b1d18f929b2c0b709c71ffe94e2f"}], 0x68, 0x4040080}, {0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000380)="1458", 0x2}, {&(0x7f00000003c0)="d687e42175709434189f36", 0xb}, {&(0x7f0000000400)="c45094cfe656e36810603766db", 0xd}, {&(0x7f0000000440)="fca4d74b2171483a532abe35c79e7dff015132372f0143fca85beb300d14004327a3b04e256b", 0x26}, {&(0x7f0000000480)="ce63ffdb0b2cc3a17f11160c54017dafca27ea62b8c7bc13d4b7059e00e9e1094bdfe816ace938729e92cc13e8163b8dc4014974ba7a2118c48bf0d23aaab786950c581f19f9d18e1fa94df39201bc90d6814d95f848e3d567feb0835a812ab000b04a1cdf7ef4beb6de9d52ee9095f10457a49a2fe279b40d04ff0da708e7ae97f40dfae2a855d4e04815", 0x8b}, {&(0x7f0000000540)="ea4a4d1f9a9da8eb61c968130efb7dde1826fbffd3b2a444b9ad7d8d492fba729e16b1e613184f44131b89c796b8138b4cfb0b0aeaa3c0d3b54218715bd5c4e5ab4d697c917c0ef97b179bd3f3dbcf08b1af54b447037bb53fe770a787093003faf33d00667a3f275a9a9d5cdd79b3fcdc6ee4974cebc055657e9011ed5477d13ccbce0023c7b82a9fa772b06fb8d3230843c6bd59f18e24cfeb2e830c4e250421d40ed3244e6f5b4b085eae7df1420b95e8173051721d1cf9b2eb9f10364e5cde41765543ce5a673c9b4bdd", 0xcc}, {&(0x7f0000000640)="c7e841508166ce7f2d08f34705ce5a54b49ae8a9498f32612d41e0883581c92340fcae96cd77651afa30caafe664cdea37bc0f2fa163548736aecd9881f4ccf4ff8a01cdf2075a767a24945498c84ff426d998d72fff8850bbb89225a0f92b8a2e1bda84d82b4470c51488688ef5633b111caf7590c9507e5b7d376755634a567102cda0abd7e7f2f43043d23e039b34f8096380e347e3308725dc597091d6396f3f64e340bfed7c8c", 0xa9}], 0x7, &(0x7f0000000780)=[@op={0x18}, @op={0x18}], 0x30}, {0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000007c0)="f60fc9e86671e36d37aa44c5eeef3b4296c69b3c33697b", 0x17}], 0x1, &(0x7f0000000840)=[@assoc={0x18, 0x117, 0x4, 0x8f2b}, @assoc={0x18, 0x117, 0x4, 0x800}, @op={0x18}, @iv={0x98, 0x117, 0x2, 0x7e, "343eb3f1d4483d657361449c623ac57cfff7e8ada476314efa1e09bcad61e9f0242776b3693ae31f963b41ddaa4ca3cf4336bee5c8925f3b1c9a9fdf72544969e05ecec0b0e04131e03c13f556a0b99e78a1be521b87c17d4d58c5ce77e57486ceb19061831b87ffa259508b93041c23d11ed7da49214cde0745796e70c2"}, @iv={0xd0, 0x117, 0x2, 0xbb, "1f201f3228725a26e979228c679b9d6b23bfb3a3828bacf8d42f5e7f7c578f1740bb4fed3a4880d253bd9857e039807a4c1e05625396eb27ea34a26aa29f4c48d886f14bf6590e3290a8939e0b8c4ba29a43f0fe744c5a34fa1fcce2b0ecbaf47535cfed75ea46a3bfdd8ac22e1d65cf4cec881dc23113f3df9c921c4a83d5809254944cf9bddae92609f9f8170f927a10ad98882133fdbbd8e0d4ad508e3c4e3bc2b6aec73ee97899c57c6c1c19bd132d6b3d70c32c724465276f"}, @iv={0xb0, 0x117, 0x2, 0x9b, "c9d3640bccb9ece1ce9767a2fd8ef0458c747647e5f101525f4ed9eefe9466d608fb57e335a75e561ce48af410ab12081e4eb6f3e1e2eae9072dab4d9790625e71d76b078123d854ae0c482501a4f28c1629b7ceb6eda98e8d5557b42908f13586d52832ef5407d712e2a7a1c7df73484b8fa2418942f495befaf6e8113120302ea753e5f53462dce6a6e07d594263cd297b64b20ac9773ac9d446"}], 0x260, 0xc0}, {0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000ac0)="b6b231862246fb422bf742d57ac45cdc3ad403afc8c6ca525dd9b06d6c64a5629b18bbf502ad21bc44bff637d50be73a67f3fd7fcc302e5eda5f043741238278da6f4935eba3605824b4ada624e57182af678901bf02e3b4fa4796e66a0901cb2766d9eae80533322a2ab09e1054afad3df303dd936c6e7aca28671c2e2e67c5c09276513959e3d5ffe30488abd8ad503aee46a17295022d45c4695c1cc6097f436e89f7e43432a2a79651d01382147048ab279855ee5c6c75f7787e972edb6ec9684c0ac9c28fad27937a", 0xcb}, {&(0x7f0000000bc0)="84256ba87619ac54fa16fd1f04c5a4caf437184b82", 0x15}, {&(0x7f0000000c00)="43014c7f2d2e178140e32c1f4fee1c364b89499b84e5323bd261b34d69a678bd31daeb1c72ee3b0c74bd9fe610b00279d61382e7473010c3452f30f76d5a900247449f7cde12c1024fcd4ccfbb", 0x4d}, {&(0x7f0000000c80)="fa6995cbb1412e2f1a1acb0f869c8b597cd1f91d5002ac8e7eb772fa3b2ce6d75d55cd59839a1b0e2b15418df14c30dc68b201e6cfb4a89b1df4aac3f8f5356cdab4c47ebffd98cd2e98d447edfcf4a3fee98b78c1f03d622c229ea16624a2c7953111c19ab350e9c225ea006ab2be8b52165ab102da1f48384de56adeeaae80fd0506b3620abcf451acd8eba9b6889b7ad1e2bddd6980e98e2948b867e071a0ca8b", 0xa2}, {&(0x7f0000000d40)="22accd3269af60b9222bb57248cdf000e7af8ed122e365e312df74bf1b6d540051076b2f4d2c5221f4e0a84c75411752718ec0c827b867767297ad4306021d0cc7f5131f576441aeef234bc465b5c4708925a5813f2619089e7ac030ee97847213749de8f5aeca29fe8965cc75ce47d57ab868f8ee61e420a730fa21d99043d6d1ca705a3469a3805d73e21a894c102ffe5f78eb65ea443dba12fa2fc68bb1533c184efdb80d66b9fba356281f74bbb695098008958bd1c7ba2d2301d8498faf0313bfda0791e7d652", 0xc9}, {&(0x7f0000000e40)="bae5be68bf99c26b728d740129b5a2404c5ef0976ce420135fb3bf55c7efe2b2", 0x20}, {&(0x7f0000000e80)="51735e6ba18f9fdcc93d22f71645f949d90b98e7af4fbcbe09a0395475c96f099374fa5a1e6c57f6012bb72ee2b80d364d1cadb90e14916c5cc846121666b1be2414d41cdc78f854ea76e23c14c26cb996e99f692f929004724034275a6b9a7c6b84dd79388bffda5a5b431d62c285b98a15531add998ba8961fecbdc27d6ec5b28994b5811515fdb84634d5ee1510522c07b68ac9ac3cca8b986561d40cf6023112de3e2dfa1b795383d649f59c7093403fc1a4a81b5d", 0xb7}], 0x7, &(0x7f0000000fc0), 0x0, 0x800}], 0x4, 0x2) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) [ 1277.351331] Bluetooth: Invalid header checksum 20:13:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5418, &(0x7f0000000000)) 20:13:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x19000000}, 0x0) [ 1277.431268] Bluetooth: Invalid header checksum [ 1277.466780] audit: type=1800 audit(1625170412.077:924): pid=615 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15350 res=0 [ 1277.471205] Bluetooth: Invalid header checksum [ 1277.502205] Bluetooth: Invalid header checksum [ 1277.510392] Bluetooth: Invalid header checksum 20:13:32 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1277.541790] Bluetooth: Invalid header checksum [ 1277.554814] mkiss: ax0: crc mode is auto. [ 1277.573899] Bluetooth: Invalid header checksum 20:13:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1277.611289] Bluetooth: Invalid header checksum [ 1277.639269] mkiss: ax0: crc mode is auto. [ 1277.653917] Bluetooth: Invalid header checksum 20:13:32 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpgid(0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1277.681394] Bluetooth: Invalid header checksum 20:13:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x23000000}, 0x0) [ 1277.722442] Bluetooth: Invalid header checksum 20:13:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x541d, &(0x7f0000000000)) [ 1277.761296] Bluetooth: Invalid header checksum [ 1277.791116] Bluetooth: Invalid header checksum 20:13:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x68}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4011}, 0x50) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) [ 1277.823273] audit: type=1804 audit(1625170412.437:925): pid=653 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2726/bus" dev="sda1" ino=13961 res=1 [ 1277.850709] Bluetooth: Invalid header checksum [ 1277.871222] Bluetooth: Invalid header checksum [ 1277.901263] Bluetooth: Invalid header checksum [ 1277.951899] Bluetooth: Invalid header checksum [ 1277.976489] mkiss: ax0: crc mode is auto. [ 1277.981112] Bluetooth: Invalid header checksum [ 1278.011515] Bluetooth: Invalid header checksum [ 1278.057634] mkiss: ax0: crc mode is auto. [ 1278.061990] Bluetooth: Invalid header checksum [ 1278.091202] Bluetooth: Invalid header checksum [ 1278.123163] Bluetooth: Invalid header checksum [ 1278.187165] Bluetooth: Invalid header checksum [ 1278.201212] Bluetooth: Invalid header checksum [ 1278.233082] Bluetooth: Invalid header checksum 20:13:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:32 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000300)={r1, @in6={{0xa, 0x4e20, 0x9, @local, 0x8}}, 0x3, 0x9}, 0x90) socketpair(0x1, 0x2, 0x1000, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001d80)={r3, @in={{0x2, 0x0, @dev}}}, &(0x7f0000001e40)=0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={r3, @in={{0x2, 0x4e21, @broadcast}}, 0x8, 0x9}, 0x90) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f000000f000/0x4000)=nil, 0x4000, 0x1800002, 0x1010, r6, 0x0) preadv(r6, &(0x7f0000000140), 0x0, 0xd9f, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) write(r7, &(0x7f0000000040)="9677a6f0b5ea408c0475d78cd9bee021e1a1bdbb3a166dc40a4df022e2ac68cf85878b0abce35ebd80086cc1a9c0b70a453c690f116d65e507f47e6f560b4844171d1a14c8e10826c8b564a20a73125c0df77f492316d32e93774af7e4e3e0feb35f77639e18510fe2e8ebb8fc8610b6652fb386a039a3243cc0ff6fbb7593abd82fd16f16baf4c402ae6736f199ee814a302d62c3bbc87eb28214b33c2245a967d72a03c92726fd96923bc96977cf9baeaa61e11d66e542e4ce3466f61a8dec48d653b57d38b2275eca", 0xca) 20:13:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x2c030000}, 0x0) 20:13:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xa) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x541e, &(0x7f0000000000)) [ 1278.311251] Bluetooth: Invalid header checksum [ 1278.341339] Bluetooth: Invalid header checksum [ 1278.379646] mkiss: ax0: crc mode is auto. [ 1278.380345] IPv6: Can't replace route, no match found [ 1278.421486] Bluetooth: Invalid header checksum 20:13:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x2f000000}, 0x0) [ 1278.451291] Bluetooth: Invalid header checksum 20:13:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x402400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000080), 0x7a7c, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100)) [ 1278.475588] mkiss: ax0: crc mode is auto. [ 1278.481599] Bluetooth: Invalid header checksum [ 1278.486962] Bluetooth: Invalid header checksum [ 1278.511053] Bluetooth: Invalid header checksum 20:13:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000040)) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) [ 1278.531395] Bluetooth: Invalid header checksum [ 1278.561844] Bluetooth: Invalid header checksum [ 1278.591759] Bluetooth: Invalid header checksum 20:13:33 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpgid(0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5421, &(0x7f0000000000)) 20:13:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x7, 0x8, 0xffff, 0x8, 0x16, "8794203a3edaa949b54a21e910816fb59e5f12"}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x35) [ 1278.644512] Bluetooth: Invalid header checksum [ 1278.664503] validate_nla: 17 callbacks suppressed [ 1278.664513] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1278.687771] Bluetooth: Invalid header checksum [ 1278.704103] Bluetooth: Invalid header checksum [ 1278.735315] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1278.751997] Bluetooth: Invalid header checksum 20:13:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=ANY=[@ANYBLOB="240000111800010000000000000000000a000000000000000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) [ 1278.791933] Bluetooth: Invalid header checksum [ 1278.808551] mkiss: ax0: crc mode is auto. [ 1278.813580] Bluetooth: Invalid header checksum [ 1278.861108] Bluetooth: Invalid header checksum [ 1278.898994] mkiss: ax0: crc mode is auto. [ 1278.905878] Bluetooth: Invalid header checksum [ 1278.925806] Bluetooth: Invalid header checksum [ 1278.971076] Bluetooth: Invalid header checksum [ 1279.007811] audit: type=1804 audit(1625170413.617:926): pid=771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2727/bus" dev="sda1" ino=15361 res=1 [ 1279.034685] Bluetooth: Invalid header checksum [ 1279.039363] Bluetooth: Invalid header checksum [ 1279.081198] Bluetooth: Invalid header checksum [ 1279.141244] Bluetooth: Invalid header checksum [ 1279.141429] Bluetooth: Invalid header checksum [ 1279.197311] Bluetooth: Invalid header checksum 20:13:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x3b010000}, 0x0) 20:13:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/usb_f_uvc', 0x709a00, 0x80) dup(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newroute={0x24, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_PRIORITY={0x8, 0x6, 0x7}]}, 0x24}}, 0x0) 20:13:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 20:13:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x333, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000100)="0f20d10f20140f01dfb800008ec80f01d1cbd20bb800008ed8b807018ed80fc3b86fae", 0x23}], 0x1, 0x0, 0x0, 0x0) [ 1279.259763] Bluetooth: Invalid header checksum [ 1279.301361] Bluetooth: Invalid header checksum [ 1279.345764] mkiss: ax0: crc mode is auto. [ 1279.354649] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1279.363226] Bluetooth: Invalid header checksum [ 1279.382283] netlink: 'syz-executor.1': attribute type 20 has an invalid length. 20:13:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001800010000000000000000000a000000000000000000000008000600", @ANYRES32=0x0, @ANYBLOB="8bfa9e61873541c562e3470700476ae2b93c10694723af25cf085392b67cd0ce62777e6ad947013669563d9626d502000000000000088abb87c1b09ee741ee0bd5adff270759f41c3ca59ec3a7748cdfbe9f355383c803b7000000000000001e0421c79fc9a3bc2d7ec89a82cd6284976539b087c4bf0a0d00002100000000cec3"], 0x24}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x1c000, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x20010, r1, 0x6f66a000) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x2004000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, '+.{-'}}, {@noextend}, {@cachetag={'cachetag', 0x3d, '-'}}, {@cache_none}, {@cachetag={'cachetag', 0x3d, '\xab@+\\(%'}}, {@access_user}, {@cache_loose}], [{@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@measure}]}}) [ 1279.412957] Bluetooth: Invalid header checksum [ 1279.419811] mkiss: ax0: crc mode is auto. 20:13:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010000}, 0x0) [ 1279.471295] Bluetooth: Invalid header checksum [ 1279.482720] Bluetooth: Invalid header checksum [ 1279.496516] Bluetooth: Invalid header checksum [ 1279.514933] Bluetooth: Invalid header checksum 20:13:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5424, &(0x7f0000000000)) [ 1279.527677] Bluetooth: Invalid header checksum [ 1279.573496] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1279.581502] Bluetooth: Invalid header checksum [ 1279.593156] Bluetooth: Invalid header checksum [ 1279.631197] Bluetooth: Invalid header checksum [ 1279.647154] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1279.691797] Bluetooth: Invalid header checksum [ 1279.706943] Bluetooth: Invalid header checksum [ 1279.712116] mkiss: ax0: crc mode is auto. [ 1279.741399] Bluetooth: Invalid header checksum 20:13:34 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpgid(0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r1, 0x109ea000) 20:13:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x21f, 0x46}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ff5b5f4655"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008040) 20:13:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x48020000}, 0x0) [ 1279.806715] Bluetooth: Invalid header checksum [ 1279.821320] Bluetooth: Invalid header checksum [ 1279.859195] Bluetooth: Invalid header checksum [ 1279.911094] Bluetooth: Invalid header checksum [ 1279.917604] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1279.931983] Bluetooth: Invalid header checksum [ 1279.955036] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1279.967137] Bluetooth: Invalid header checksum [ 1280.021085] Bluetooth: Invalid header checksum [ 1280.041158] Bluetooth: Invalid header checksum [ 1280.071088] Bluetooth: Invalid header checksum [ 1280.099582] audit: type=1804 audit(1625170414.707:927): pid=860 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2728/bus" dev="sda1" ino=14016 res=1 [ 1280.131333] Bluetooth: Invalid header checksum [ 1280.152093] Bluetooth: Invalid header checksum [ 1280.181164] Bluetooth: Invalid header checksum 20:13:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5425, &(0x7f0000000000)) 20:13:34 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x89) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000200)={r2}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) fcntl$dupfd(r0, 0x0, r0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_MASTER={0x8, 0x4, r7}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=@ipv6_getroute={0x44, 0x1a, 0x10, 0x70bd29, 0x25dfdbfd, {0xa, 0x14, 0x10, 0x6, 0xfc, 0x4, 0x0, 0x3, 0x900}, [@RTA_PRIORITY={0x8, 0x6, 0x6}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x1c, 0x1, [{0x5}, {0x26a7, 0x0, 0x1}, {0xadbe, 0x0, 0x1}, {0x7f}, {0x9}, {0x2, 0x0, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28004841}, 0x40) preadv(r4, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000240)={0x6, 0x0, '\x00', {0x0, @bt={0x4000000, 0x10001, 0x1, 0x0, 0x2, 0x1, 0x9, 0x59, 0x0, 0x6, 0xffffffff, 0x7, 0x4, 0x7, 0x4, 0x30, {0x3, 0x2}, 0x3c}}}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001800010000000000000000000a000000000000000000000008000600", @ANYRES32=0x0, @ANYBLOB="8e9f404f38180d4a3c28791d386b175903fa927d4609cab344a18ad05771"], 0x24}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000140)=""/24, 0x18}], 0x3, 0x7, 0x2) 20:13:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x49000000}, 0x0) 20:13:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x660880, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xfe) [ 1280.261871] Bluetooth: Invalid header checksum [ 1280.276140] IPv6: Can't replace route, no match found [ 1280.293153] Bluetooth: Invalid header checksum [ 1280.305609] mkiss: ax0: crc mode is auto. [ 1280.321029] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1280.358299] IPv6: Can't replace route, no match found [ 1280.371161] Bluetooth: Invalid header checksum [ 1280.382793] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1280.401823] Bluetooth: Invalid header checksum 20:13:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = memfd_create(&(0x7f00000003c0)='\xff\x00l\x1e\xa00xffffffffffffffff}) preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000200)=""/239, 0xef}, {&(0x7f0000000300)=""/46, 0x2e}, {&(0x7f0000000340)=""/41, 0x29}, {&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f0000000440)=""/206, 0xce}, {&(0x7f0000000540)=""/8, 0x8}, {&(0x7f0000000580)=""/2, 0x2}, {&(0x7f00000005c0)=""/112, 0x70}], 0x8, 0x551c, 0xbe) r4 = dup2(r2, r1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000140)) preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCSBRK(r1, 0x5427) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) [ 1280.465488] Bluetooth: Invalid header checksum [ 1280.477109] Bluetooth: Invalid header checksum [ 1280.491169] Bluetooth: Invalid header checksum [ 1280.503802] Bluetooth: Invalid header checksum 20:13:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x52000000}, 0x0) [ 1280.512116] Bluetooth: Invalid header checksum [ 1280.571696] Bluetooth: Invalid header checksum [ 1280.604013] Bluetooth: Invalid header checksum [ 1280.622069] Bluetooth: Invalid header checksum [ 1280.682998] Bluetooth: Invalid header checksum [ 1280.711591] Bluetooth: Invalid header checksum [ 1280.731627] Bluetooth: Invalid header checksum [ 1280.791830] Bluetooth: Invalid header checksum [ 1280.827369] Bluetooth: Invalid header checksum [ 1280.847225] Bluetooth: Invalid header checksum [ 1280.902871] Bluetooth: Invalid header checksum [ 1280.931470] Bluetooth: Invalid header checksum 20:13:35 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5427, &(0x7f0000000000)) 20:13:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0xd9f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) 20:13:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) [ 1280.952043] Bluetooth: Invalid header checksum [ 1281.001746] mkiss: ax0: crc mode is auto. [ 1281.012410] Bluetooth: Invalid header checksum [ 1281.042098] Bluetooth: Invalid header checksum [ 1281.062529] Bluetooth: Invalid header checksum [ 1281.067861] mkiss: ax0: crc mode is auto. [ 1281.128436] Bluetooth: Invalid header checksum [ 1281.151810] Bluetooth: Invalid header checksum [ 1281.173261] Bluetooth: Invalid header checksum [ 1281.176213] audit: type=1804 audit(1625170415.787:928): pid=955 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2729/bus" dev="sda1" ino=14016 res=1 20:13:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) 20:13:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newroute={0x160, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x2}, [@RTA_MARK={0x8, 0x10, 0x3f}, @RTA_METRICS={0x62, 0x8, 0x0, 0x1, "7ce865d7ef1231b5ef88c74851ca326f291399698210f7d66fffb4c6927e96b11ab488643ca0a826cca86e67d419c4a01ea6856e44deccb1aaa4ed184dc67adc1e2c44337bdc824eb4030c662cc5456a9c812ede942264780538992bed7d"}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x5, 0x8}}, @RTA_PREF={0x5, 0x14, 0x6}, @RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x4}}, @RTA_PREF={0x5, 0x14, 0x1}, @RTA_MARK={0x8, 0x10, 0x1}, @RTA_METRICS={0xa5, 0x8, 0x0, 0x1, "c6180ee8b691b17458d18b513e5397d0fb90c1a6485509b4d5338f0bfc61964d8c7a0c7aa3d9b80cd063ccf4cb4663cad654139872edfbebc69238366c14f6de51b327168168265d93ec9b90d8228f14c6d307973fe0ad6603d25d0e8d308404afab81a37419b487fd238bc4db19d46cac4314cd493b9b24a5a8f727dc5a862cfb488a919ea375cac233c8414072f453002df57f3f783924d1517ad1b258083e8d"}]}, 0xfffffffffffffea6}}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x20b) 20:13:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) 20:13:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5428, &(0x7f0000000000)) 20:13:35 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1281.271316] Bluetooth: Invalid header checksum [ 1281.282237] Bluetooth: Invalid header checksum [ 1281.322774] mkiss: ax0: crc mode is auto. 20:13:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50000020}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x278, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x62}}}}, [@NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4d5fcaf9c1509570992676126ee43955"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5da9473951a327a3fce7d18ee54485d0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x51b}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2d1900db91a4f72d59fc1a576ac9402378e0ee59cf9a7e4db7751f3add0eef6c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e92481d355cc0eb7"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3a22c8357494a6246f31ecfdc45dfcfb1b10d5f0a364e9ca"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9f06ee4ea8b26a08"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c10e8be86c8eaf3ccb20d7a7c5dd4c391c8a2efe8da0ce57c12f21afc0a775ac"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e2cf8a0b719e89ef"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dc489593525e24f4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5f7d551096b3c60226a8bd164fe9f4c4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "acdf9e4e0d87fa74"}]}, @NL80211_ATTR_REKEY_DATA={0xb0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a7bff422827c8a29eb9e76cae84acaf9"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7fd7f863e51e5b4eca41e9a847289db2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b28377a4690258ee"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5a913388a74fb1846aea8141d9c5c1e03b39bb1c57903a9bae8138e003d2867d"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8809dbc9368e087b2be6041d97f0cf22"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="085de49766e52e8f63dbb9da5bfaebc7"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="37e4e3e7cb68e74c9f298be258716f9361181ab9314d6711096e76c7c4a0a93c"}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9c6e97f07eba7377"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c9f0bc7437932f33cf3da1a6e95ccaa9"}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f14a5b912e23d13a8f15eab807d9dcfd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="58fd80fbdfb5ccd39d83e4d3b8601f68"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fc40756baeadde76d3e21148511f5763"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="97bdcd6f87b964d27f903ce8748d5119f4ca735dc014d7d6feb9d6848f203f69"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d1c72596222d8eac"}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x8000}, 0x10) [ 1281.371138] Bluetooth: Invalid header checksum [ 1281.388315] mkiss: ax0: crc mode is auto. [ 1281.391669] Bluetooth: Invalid header checksum [ 1281.401361] Bluetooth: Invalid header checksum [ 1281.431316] Bluetooth: Invalid header checksum [ 1281.436307] audit: type=1804 audit(1625170416.047:929): pid=985 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2730/bus" dev="sda1" ino=13926 res=1 [ 1281.481259] Bluetooth: Invalid header checksum 20:13:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x81000000}, 0x0) 20:13:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x88a8ffff}, 0x0) [ 1281.591134] Bluetooth: Invalid header checksum [ 1281.596272] Bluetooth: Invalid header checksum [ 1281.611195] Bluetooth: Invalid header checksum 20:13:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1281.635580] Bluetooth: Invalid header checksum [ 1281.640470] Bluetooth: Invalid header checksum 20:13:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x23184}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0xe}, {0xd, 0x1b}, {0xffe0, 0x10}}, [{0x8, 0xb, 0xffffff22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x408080d) [ 1281.701848] Bluetooth: Invalid header checksum 20:13:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000000)) [ 1281.751108] Bluetooth: Invalid header checksum [ 1281.752072] Bluetooth: Invalid header checksum [ 1281.812088] Bluetooth: Invalid header checksum [ 1281.851378] Bluetooth: Invalid header checksum [ 1281.851386] Bluetooth: Invalid header checksum [ 1281.933064] Bluetooth: Invalid header checksum [ 1281.937255] mkiss: ax0: crc mode is auto. [ 1281.961898] Bluetooth: Invalid header checksum [ 1281.962794] Bluetooth: Invalid header checksum [ 1282.044653] Bluetooth: Invalid header checksum [ 1282.074571] Bluetooth: Invalid header checksum [ 1282.075447] Bluetooth: Invalid header checksum [ 1282.155445] Bluetooth: Invalid header checksum 20:13:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c020000}, 0x0) 20:13:36 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000ac0)) preadv(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000000)=""/82, 0x52}, {&(0x7f0000000600)=""/82, 0x52}, {&(0x7f0000000680)=""/132, 0x84}, {&(0x7f0000000740)=""/67, 0x43}, {&(0x7f00000007c0)=""/43, 0x2b}, {&(0x7f0000000800)=""/162, 0xa2}, {&(0x7f00000008c0)=""/157, 0x9d}, {&(0x7f0000000980)=""/31, 0x1f}, {&(0x7f00000009c0)=""/46, 0x2e}], 0x9, 0xd9f, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000b00)={0x1e, 0x4}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000100)=@pppol2tpv3, 0x80, &(0x7f0000000480)=[{&(0x7f0000000040)}, {&(0x7f0000000180)=""/249, 0xf9}, {&(0x7f0000000280)=""/222, 0xde}, {&(0x7f0000000380)=""/216, 0xd8}], 0x4, &(0x7f00000004c0)=""/226, 0xe2}, 0x40000000) 20:13:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x20402, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x7fffffff, 0x8, 0x9, 0x1, 0x15, "17ba007d63015bc2b59ca14eb03cabd967b4a1"}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5441, &(0x7f0000000000)) [ 1282.192932] Bluetooth: Invalid header checksum [ 1282.206957] syz-executor.3 (985) used greatest stack depth: 22552 bytes left 20:13:36 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1282.261519] Bluetooth: Invalid header checksum [ 1282.296046] Bluetooth: Invalid header checksum [ 1282.301270] IPv6: Can't replace route, no match found [ 1282.314072] mkiss: ax0: crc mode is auto. [ 1282.346493] IPv6: Can't replace route, no match found [ 1282.356442] audit: type=1804 audit(1625170416.957:930): pid=1049 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2731/bus" dev="sda1" ino=14051 res=1 [ 1282.383482] Bluetooth: Invalid header checksum 20:13:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x8d010000}, 0x0) [ 1282.406256] Bluetooth: Invalid header checksum [ 1282.422264] Bluetooth: Invalid header checksum [ 1282.427117] Bluetooth: Invalid header checksum 20:13:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x103402, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800010000000000000000000a000000000000000000000008000600", @ANYRES32=0x0, @ANYBLOB="a2"], 0x24}}, 0x0) 20:13:37 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1282.479952] mkiss: ax0: crc mode is auto. [ 1282.493160] Bluetooth: Invalid header checksum [ 1282.511215] Bluetooth: Invalid header checksum [ 1282.521887] Bluetooth: Invalid header checksum 20:13:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5450, &(0x7f0000000000)) [ 1282.601119] Bluetooth: Invalid header checksum 20:13:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) readahead(r1, 0x2, 0x5) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) [ 1282.622574] Bluetooth: Invalid header checksum [ 1282.631202] Bluetooth: Invalid header checksum [ 1282.642527] audit: type=1804 audit(1625170417.257:931): pid=1085 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2732/bus" dev="sda1" ino=13961 res=1 [ 1282.711584] Bluetooth: Invalid header checksum [ 1282.717488] IPv6: Can't replace route, no match found [ 1282.741571] Bluetooth: Invalid header checksum [ 1282.741594] Bluetooth: Invalid header checksum [ 1282.776965] mkiss: ax0: crc mode is auto. [ 1282.778632] IPv6: Can't replace route, no match found [ 1282.821460] Bluetooth: Invalid header checksum [ 1282.843729] mkiss: ax0: crc mode is auto. [ 1282.843969] Bluetooth: Invalid header checksum [ 1282.853568] Bluetooth: Invalid header checksum [ 1282.931342] Bluetooth: Invalid header checksum [ 1282.951195] Bluetooth: Invalid header checksum [ 1282.961663] Bluetooth: Invalid header checksum [ 1283.047478] Bluetooth: Invalid header checksum [ 1283.070364] Bluetooth: Invalid header checksum [ 1283.075605] Bluetooth: Invalid header checksum [ 1283.157274] Bluetooth: Invalid header checksum 20:13:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x9b030000}, 0x0) 20:13:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x2) 20:13:37 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) preadv(r2, &(0x7f0000000280), 0x0, 0x32fa, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010000000000000000000a0000000084000000000000140005000000000000000041102e1ac26731094f2d0000000100000000000000"], 0x30}}, 0x0) 20:13:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5451, &(0x7f0000000000)) [ 1283.181331] Bluetooth: Invalid header checksum [ 1283.245330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1283.252000] IPv6: NLM_F_CREATE should be set when creating new route [ 1283.265218] Bluetooth: Invalid header checksum [ 1283.281191] Bluetooth: Invalid header checksum [ 1283.297742] mkiss: ax0: crc mode is auto. 20:13:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) [ 1283.330104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1283.363050] Bluetooth: Invalid header checksum [ 1283.371059] Bluetooth: Invalid header checksum [ 1283.371130] Bluetooth: Invalid header checksum 20:13:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x28e280, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x600000, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000040)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x16) ioctl$KDADDIO(r0, 0x400455c8, 0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1283.391269] Bluetooth: Invalid header checksum 20:13:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5452, &(0x7f0000000000)) [ 1283.481548] Bluetooth: Invalid header checksum [ 1283.481564] Bluetooth: Invalid header checksum [ 1283.501250] Bluetooth: Invalid header checksum 20:13:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x8a201) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x333, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1ecdb6e23aabf4b0}, 0xc, &(0x7f0000001600)={&(0x7f00000016c0)=ANY=[@ANYBLOB="d4000000250001002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1000fdff0d0006000500070008000d0041360100840008801c0001001e000900070000000200000006000000050000000a00000018000200fcfffb0a00000600ff003808c0000100080000021c000100ff40070008000000020000000500000004000000030000000a00020000108000000400001c000100000a00008b00000000000000071e26d242000000ffffff7f010000000600020005000000090001007072696f0000000018a0bd00008000001f2263b4e20e961bedc8ccce93cd59d3"], 0xd4}, 0x1, 0x0, 0x0, 0x2404c000}, 0x4080) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) preadv(r1, &(0x7f0000001340)=[{&(0x7f0000000100)=""/37, 0x25}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/204, 0xcc}], 0x3, 0x73, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r4, 0x4}, 0x20) r5 = socket$inet6(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=@getchain={0x34, 0x66, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff2}, {0xffff, 0x1}, {0x7, 0xfff8}}, [{0x8}, {0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40044) r6 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001680), 0x2c00, 0x0) mmap(&(0x7f0000434000/0x1000)=nil, 0x1000, 0x1, 0x810, r6, 0x95c6d000) sendmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) fcntl$dupfd(r5, 0x0, r1) 20:13:38 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xa1000000}, 0x0) [ 1283.558469] mkiss: ax0: crc mode is auto. [ 1283.591834] Bluetooth: Invalid header checksum [ 1283.596516] Bluetooth: Invalid header checksum [ 1283.611278] Bluetooth: Invalid header checksum [ 1283.629118] IPv6: Can't replace route, no match found [ 1283.662549] IPv6: Can't replace route, no match found [ 1283.708880] Bluetooth: Invalid header checksum [ 1283.711050] Bluetooth: Invalid header checksum [ 1283.724792] Bluetooth: Invalid header checksum [ 1283.730366] IPv6: Can't replace route, no match found 20:13:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xac010000}, 0x0) [ 1283.761748] IPv6: Can't replace route, no match found [ 1283.806429] audit: type=1804 audit(1625170418.417:932): pid=1186 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2733/bus" dev="sda1" ino=14026 res=1 [ 1283.831754] Bluetooth: Invalid header checksum [ 1283.835963] Bluetooth: Invalid header checksum [ 1283.836672] Bluetooth: Invalid header checksum [ 1283.849557] validate_nla: 17 callbacks suppressed [ 1283.849567] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1283.898588] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1283.941809] Bluetooth: Invalid header checksum [ 1283.952176] Bluetooth: Invalid header checksum [ 1283.952180] Bluetooth: Invalid header checksum [ 1284.051649] Bluetooth: Invalid header checksum [ 1284.061958] Bluetooth: Invalid header checksum [ 1284.061962] Bluetooth: Invalid header checksum 20:13:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x545d, &(0x7f0000000000)) 20:13:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x10}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) 20:13:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xae010000}, 0x0) [ 1284.161443] Bluetooth: Invalid header checksum [ 1284.172599] Bluetooth: Invalid header checksum 20:13:38 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5402000048e78e418fe85531b120ca61bd201862819103981bb2772ff755b227064d206d14d7a406852bafee3fdc7ddcef13e2bca465c58dd1bed6dad8218aa18e650f996792ec3ede6261da2fb23fb61e9039669e53cc17af8a0962380ef5a2ae08495220207d8d365e2ee016912abdfe8b8e", @ANYRES16=r0, @ANYBLOB="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"], 0x254}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x1f, 0x8c, 0x53, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x700, 0x8, 0x3}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x208, r0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4040011}, 0x4000000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r5, 0x400455c8, 0x2) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x1b) [ 1284.257894] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1284.273051] Bluetooth: Invalid header checksum [ 1284.286079] Bluetooth: Invalid header checksum [ 1284.290382] mkiss: ax0: crc mode is auto. 20:13:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) uselib(&(0x7f0000000040)='./file0\x00') sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) [ 1284.326340] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1284.371202] Bluetooth: Invalid header checksum [ 1284.376158] Bluetooth: Invalid header checksum [ 1284.382986] Bluetooth: Invalid header checksum [ 1284.392594] Bluetooth: Invalid header checksum 20:13:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xc8010000}, 0x0) [ 1284.429948] mkiss: ax0: crc mode is auto. [ 1284.481446] Bluetooth: Invalid header checksum [ 1284.501318] Bluetooth: Invalid header checksum [ 1284.506445] Bluetooth: Invalid header checksum 20:13:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5460, &(0x7f0000000000)) 20:13:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x8, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006a0000022909400500dbdf2502001a65fc668700010000d26e0962e2b11e7317979b00000000000000000002942714221ad72f"], 0x20}, 0x1, 0x0, 0x0, 0x24000010}, 0x40000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) [ 1284.580694] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1284.595160] Bluetooth: Invalid header checksum [ 1284.602705] Bluetooth: Invalid header checksum [ 1284.625246] Bluetooth: Invalid header checksum [ 1284.701190] Bluetooth: Invalid header checksum [ 1284.711917] Bluetooth: Invalid header checksum [ 1284.721391] Bluetooth: Invalid header checksum [ 1284.732429] mkiss: ax0: crc mode is auto. 20:13:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xe0030000}, 0x0) 20:13:39 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1284.798023] mkiss: ax0: crc mode is auto. [ 1284.811194] Bluetooth: Invalid header checksum [ 1284.822970] Bluetooth: Invalid header checksum [ 1284.832581] Bluetooth: Invalid header checksum [ 1284.883746] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1284.921252] Bluetooth: Invalid header checksum [ 1284.931344] Bluetooth: Invalid header checksum [ 1284.941341] Bluetooth: Invalid header checksum [ 1285.001901] Bluetooth: Invalid header checksum [ 1285.007618] Bluetooth: Invalid header checksum [ 1285.009994] Bluetooth: Invalid header checksum [ 1285.031347] Bluetooth: Invalid header checksum [ 1285.041260] Bluetooth: Invalid header checksum [ 1285.060920] Bluetooth: Invalid header checksum [ 1285.082468] audit: type=1804 audit(1625170419.697:933): pid=1275 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2734/bus" dev="sda1" ino=14026 res=1 [ 1285.111585] Bluetooth: Invalid header checksum 20:13:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setresuid(0xffffffffffffffff, r1, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) preadv(r3, &(0x7f0000000580), 0x100000000000003b, 0x7, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x29, 0x3, 0x80, 0x9, 0x60, @dev={0xfe, 0x80, '\x00', 0x14}, @mcast2, 0x7, 0x10, 0x5, 0x99d6}}) sendmsg$nl_route_sched(r2, &(0x7f00000019c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001980)={&(0x7f0000000300)=@newchain={0x1680, 0x64, 0x0, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffe0}, {0xf, 0xffe0}, {0xb}}, [@TCA_RATE={0x6, 0x5, {0x82, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffa}, @filter_kind_options=@f_cgroup={{0xb}, {0x1638, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}, @TCA_CGROUP_POLICE={0x458, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xffffffff, 0x7f, 0x85592c98, 0x2a55, 0x191, 0x401, 0x5, 0xffffffff, 0x7, 0x3, 0x3, 0x1f, 0x5, 0x5, 0x10000, 0x7, 0x101, 0x6bd, 0x200, 0x9, 0x2, 0x1, 0x0, 0xffff8e3d, 0x1, 0x0, 0x2, 0x3, 0x10000, 0x8, 0x0, 0x80000001, 0x7, 0x0, 0x4, 0x3, 0x3, 0x1, 0x8, 0xfffff9e9, 0x3345, 0x6, 0x9d2b, 0x1, 0xfffffff9, 0x0, 0xfffffffe, 0x7, 0x3, 0x6, 0x10001, 0x7, 0x3ff, 0x100, 0x8ac, 0x6d43, 0x5, 0x2, 0x1, 0x1ff, 0x9, 0x1, 0x606, 0x568, 0x4, 0x3, 0x476, 0x1000, 0xa245, 0x9, 0x3f, 0x1000, 0x8, 0x2, 0x5, 0x7, 0x0, 0x7, 0xfffffffb, 0x4, 0x400, 0x0, 0x1ff, 0x0, 0x10000000, 0x80, 0x9, 0x7a, 0x3, 0x1, 0x5, 0x1, 0x400, 0x9, 0x6, 0x400, 0x2, 0x3, 0x6, 0x2c7, 0x2e5f, 0x401, 0x7, 0xab, 0x7, 0x3, 0x5, 0x2, 0xfff, 0x42c4, 0x2, 0x1, 0x79, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1ff, 0xfff, 0x1, 0x0, 0x8, 0x7, 0x9, 0x1, 0x7, 0x5, 0xc000, 0x7, 0x800, 0x0, 0xfff, 0x1, 0x59f, 0x6, 0x8001, 0x2, 0x8, 0x7fff, 0x40, 0x330, 0x3, 0x10001, 0x69, 0xf0b1, 0x8, 0x7, 0x80, 0x7, 0x3, 0xbb, 0x800, 0x1, 0x2, 0x4, 0x2, 0xc5, 0x3, 0x334, 0xfffffe00, 0xfffffffa, 0xa21, 0x2, 0x38000000, 0x8, 0xb4, 0x4, 0x2, 0x5, 0x7, 0x8, 0x80, 0x7, 0x1, 0x6, 0x401, 0x100, 0x20, 0x2, 0xfff, 0x401, 0x1, 0x80, 0x5, 0x7, 0x0, 0xe0, 0x4, 0x7fff, 0x2, 0x2, 0x401, 0x8, 0x7ff, 0x9983, 0xffffff80, 0x92e, 0x3, 0x4, 0x8, 0x8, 0x4, 0xffffff7d, 0x3f, 0x1, 0x3, 0x41, 0x200, 0x500, 0xc9e2, 0x3, 0x9, 0x1, 0x7f80, 0xabc, 0x9, 0x401, 0x3, 0x9, 0x20, 0x7ff, 0x5, 0x3f, 0x742c, 0x8, 0x3, 0xb2, 0x6, 0x5, 0x0, 0xffffbb86, 0x2, 0x900, 0xa29, 0x3f, 0xc63, 0x8, 0x9, 0x0, 0x1, 0xffffffff, 0x401, 0x2, 0x1, 0x4, 0x1, 0x80000000, 0x7, 0x2b5c, 0x10001, 0x8, 0xd3, 0x8000, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000001}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfab5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x800}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000}]}, @TCA_CGROUP_EMATCHES={0x940, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x9, 0x2}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0x7}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}, @TCA_EMATCH_TREE_LIST={0x2e4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x44, 0x3, 0x0, 0x0, {{0x400}, [@TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="1bde15cc", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="0c63e1", @TCF_META_TYPE_VAR='&~', @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x90f, 0x1, 0x1}, {0x200, 0x54, 0x2}}}]}}, @TCF_EM_CONTAINER={0x98, 0x3, 0x0, 0x0, {{0x800, 0x0, 0x7}, "6dfa0a7dbf626c68d4078d49a5ea064efe8ee2378875124a92beb1d97fe1b243aed23ad10a5feb080f8e991ebdb9479f558ce688c081c9512b1eae2f06530402d7b30b7efb0535b4ad44934000413527863c342e5982d875bcce0a1c0efc514df48f84253998f6a99aa36b98443bd29f3e06c6083a9930511d3cae09ef3f4ee210b9398408cca0ad2f0c13"}}, @TCF_EM_CONTAINER={0x104, 0x1, 0x0, 0x0, {{0x4, 0x0, 0x800}, "af8e3e0f424408cfa4107ef5649a76155e6679216cc7488472a6d2be3574fb6e47c515cbe12497d9051f62e352ff0e8c84a66050eb214212e34cad5f39282484748c54fe497229b2210e6fc42e57c679ea7847363cd9c4ce99c2fd1aa212c294d72e932d9d997a68e41f9bbf019ac92eb1ec191e856210fe36f01d6750eb325f178914403e16da1a0436cd32a06997267f67882bf87c6c518b9140e43bfe3679d72c66b6a5c16b6c8602497a26a1dd55dc134c2115fa7b5382e7422decad8ce86ef9084cb980e4b26282ffb4b31225673195100a6ad3193e6cc445e60dd7732eec82d136787c812221e195c550aaafe4388fd84c1a"}}, @TCF_EM_META={0xf0, 0x3, 0x0, 0x0, {{0x2, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x20}, {0x1, 0xff, 0x2}}}, @TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="024786d2a1", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="e8", @TCF_META_TYPE_VAR='l', @TCF_META_TYPE_VAR="1d4a666e"]}, @TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR='\\', @TCF_META_TYPE_VAR="b2", @TCF_META_TYPE_VAR="558ab507ce88", @TCF_META_TYPE_VAR="99c440", @TCF_META_TYPE_VAR="5d62397d17b8", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x2e, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="a1029f70f573e3a7d8", @TCF_META_TYPE_VAR="ac2d0015744252", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="8ade", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x81, 0x1}, {0x2, 0x20, 0x2}}}, @TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_VAR="099378fc231f7b2d97", @TCF_META_TYPE_VAR="f4", @TCF_META_TYPE_VAR="44098bd9baabd71e2d"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x101, 0x40, 0x1}, {0x400, 0x0, 0x2}}}, @TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_VAR="1d98b605f0f6da291d", @TCF_META_TYPE_VAR="ffe3fc6a61740c", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="5350e81ac8b468", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="60271b21"]}, @TCA_EM_META_LVALUE={0x7, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="e47928"]}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x5, 0x8, 0x47}, {0x0, 0x3, 0x3}}}]}, @TCA_EMATCH_TREE_LIST={0x16c, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0xc1a2, 0x4, 0x137}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x400, 0x3, 0x9}, {0x6, 0x3f, 0x8}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0xf001, 0x2, 0x8001}, {0xfffffffc, 0x8, 0x2, "4412143f8114facb"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x401}, {{0x2, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_IPT={0xd8, 0x3, 0x0, 0x0, {{0x1000, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_DATA={0xc9, 0x5, "8c7b331111d5b990db493491c9ca7d72f63a0ded52f47cf7ab7ca7ee8ee561c611c031ca2e96ac753571759c08a62f9d7b023c0e3f796b496c8bfa26e0dc268941eb5da5b69dde735cda637adc91d53f8597c1987f07b648eb661ea78103c9273bdfea94ad5e7fd6106b48f2cd36b15d250a7a68c3b5587e52a7ccc5cc99b08c8967fb74b62d4a53a69ae08493aa68d21107a04e324f1bb1a2e4071f17cc0e4bfd1b38dd5497fb9358df31b3ed8900e5d428c11e14f85bc55540769404aab271bcf817d496"}]}}, @TCF_EM_CONTAINER={0x1c, 0x1, 0x0, 0x0, {{0xe503, 0x0, 0x3ff}, "b603803a8eec19a82dc030e469d72bfb"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0x3ff}, {0x5, 0x800, 0x1f, 0x475}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x148, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x6}, {0x4, 0x80000001, 0x0, 0x1, 0x6, 0x0, 0x2}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x2, 0x4, 0x2}}}, @TCF_EM_CONTAINER={0xf0, 0x3, 0x0, 0x0, {{0x3, 0x0, 0x7f}, "a9763bba0617b336c434e19bae48aca88bf3517be22a1cb1dbbafbe6adcbb7a92907d83709032948cda2697bf4d674f3da0c1e376438b90f34ebc003ae2faaa62a8e50538a3e00e59fc813e1019a698605b5891e63e1fafc14bc61143c304cbffd1b4b2e015dbb42ffb2f863a352afa308113f690159f3ba202d27e26befda4bac8dc26d16f9f8ec86f32155407420624e97dd9780b0c179a17ef90cd4025d2afb4d987cdade0edf6ac3701df964c622510eff7f54e00eda9d7e0ba296a1cf8f5c1be3b5ed35ca34e67e74b08d3c68dec9832e8c67cc1043e07d75eb798196d43b2c"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xff05, 0x3, 0x5063}, {0x81, 0x7, 0x1, 0x8}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x3}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x360, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 0xe0f}, {0x2, 0x5, 0x200, 0x2, 0x1}}}, @TCF_EM_IPT={0x330, 0x2, 0x0, 0x0, {{0x91, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_DATA={0xb7, 0x5, "c896bf01f503694d44c11b1c8b05de648a39b225089f3fc4d39b9c18c727a26ede51f413dfb486d495e0a5eb463736a6d840f99c10cbaa9665f59391bce6f49e4a5451ea165623d6887293f5d135005d512d6e539b5e7d2c0f5f2f420ef601995772fceb0593aa44d4017e8c3b402ee0ddd4be3b5e0b5f530c70353951bb663daddb53e5fb4f2fc353d6fa448d71d19192745e0bcf5830e3de6be06ad2ad699e17de1886337ea2faa662b57d8dda6c53886bbe"}, @TCA_EM_IPT_MATCH_DATA={0xea, 0x5, "451fdef246066a358b2e488a53ad9e994d7efcdcdc757889227cbb5a2c89c344f78565aa39f1502b8e04800c37b45d914fcf90f7ab24178794b5eeb6153890ebe0d36e61a7f05cd576af6457f70f4bc57b27f6c228bb2a3de6faa1fcf21726ae59fe4c694a03f9b0b93b0fe04a9ef1bc373eeec76a2fb3ad47524e0699d5b4fb784b94c692e3c3684557f394fc529db7ba3607b11f358b7be2d501ac8ff7a1cf94479652fb314df6ce074d617bc8409c2c59940831471098d7c7ddfae03028507798205bcb9c49c493c1f40693f1ddc8bcfe71a13084ea6b3a4220f53f2fac393e4f7bda62ad"}, @TCA_EM_IPT_MATCH_DATA={0x8f, 0x5, "de1343a015895584d674de752420c6936dc3871be2e0fd8fa246b86499d0a9eb8bc578938d71a29d4a9c0bbbd3c010f113c9f76a3c82ac4c40ceedd2f945dfe94005a05d2a73e090e2b92bc34cb7dbbae7dda70a7633871cc41d51cb7391e6c01fb2f7e3a75838cb56a0c184064dcc4ec1afc11b78ab5be0476063c4ce24764e053b28fe484c8e14b29d5a"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0xd6, 0x5, "d38c0464445852abc4b2d93a2f4c5b941706e88f9c696317aeecc31314d8be25d3fd223be3cb0415dc3c63ebb1d29b305fbb87a8f310eca03f9bdc394520bbaa9f25618deba69280b4c509f663de579272748abe2fd2bfb12957d35b4dbb5896cecf3fbc2558761915b71fcd3321b1dbc0ff2bab2efb4f090a23a3cf57984b8570cc50711025593db298889a6e1c3ebd83238c22d52fb44bdfd1e9c8c7c25d048749e60eb9bc6020d71ccd6580101d1ed26061300415371923e40c3d94458ef980d10adcd3eb5a5de2840abff3c1618917a6"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x401, 0x9, 0x8000}, [@TCA_EM_IPT_NFPROTO={0x5}]}}]}]}, @TCA_CGROUP_POLICE={0x46c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8000, 0x7, 0x41b4, 0x20000000, 0x2, 0x0, 0x38, 0x4099, 0x8985, 0xc9d0, 0x1000, 0x4eba, 0xffff, 0x800, 0x6, 0x8, 0x578, 0x1, 0x100000, 0x101, 0x800, 0x6, 0x401, 0x3f, 0x5, 0x101, 0x3, 0x40, 0x6, 0xffffa2f3, 0x6e, 0x5, 0x3, 0x1, 0x0, 0x7, 0xfffffffa, 0x2, 0x3f, 0x6, 0x7b90, 0x25, 0x7fff, 0x1ff, 0x4275, 0x7, 0x3f, 0xfff, 0xe2a, 0x0, 0x100, 0x6, 0x2, 0x44e, 0x7, 0x7fff, 0x8, 0x58, 0xc1, 0x69, 0x5, 0x7, 0x7ff, 0x1f, 0xdf, 0x8af8, 0x1, 0xc1, 0x1, 0x8000, 0x1, 0x1, 0x5, 0x6, 0xae2, 0x13354525, 0x2, 0x7, 0x101, 0x5, 0x2, 0x0, 0x5, 0x401, 0x80000000, 0xffff7fff, 0x4, 0x0, 0x7ff, 0x1000, 0x3, 0x6, 0x0, 0x80000001, 0x3, 0x6, 0xffffff53, 0x5, 0x5, 0xffffffff, 0x400, 0x393, 0x8, 0x1, 0x1, 0x3f, 0x0, 0x80000001, 0x4, 0x7, 0x18000000, 0x100, 0x7d552b95, 0x0, 0x4, 0x0, 0x5, 0x5b, 0x80000000, 0x6, 0x97, 0x0, 0xf1, 0x1a, 0xfffffffe, 0x6, 0x4d, 0xff7, 0xfff, 0x1, 0x7f, 0x5, 0x680c72c2, 0x0, 0x6, 0x2, 0x9, 0x2c52, 0x0, 0x3f, 0x6d, 0xdb5, 0x5, 0x5, 0xdf0, 0x7, 0x6, 0x1, 0xffff, 0x1, 0x81, 0xfff, 0x5, 0x7fff, 0x5, 0x101, 0x20, 0x4, 0x7, 0x9, 0x7fff, 0xdc24, 0x6, 0x6, 0x6, 0x9, 0x8, 0x5, 0x5, 0x6, 0x4f, 0x5c, 0x9d2, 0xff, 0xa2f6, 0x3, 0x2a1, 0x800, 0xffffffff, 0x7, 0x3, 0x1f, 0xfffffffe, 0xffff1279, 0x5, 0x81, 0x9, 0xffff, 0x9, 0x1, 0x1f, 0x1b10, 0x7f, 0x10000, 0xc1, 0x20, 0x8, 0x1000, 0x0, 0x80000001, 0x400, 0xc9a, 0x1, 0x4, 0x100, 0x9, 0x7fff, 0x6, 0x80000001, 0x6, 0x3, 0x1, 0x5, 0x1, 0xfffffffc, 0x4, 0x100, 0x7000000, 0x0, 0x2, 0x5, 0x2, 0xfffffffb, 0x800, 0x196, 0x80000001, 0x9, 0x7, 0x400, 0x5000, 0x7, 0x4ae, 0xcc0d, 0x80000000, 0x1f, 0x1, 0xc7b1, 0xfffffff9, 0x7fff, 0x80000000, 0x810, 0x205, 0x6, 0x6, 0x3, 0x13800000, 0x7, 0xff, 0x9, 0x20, 0x9, 0x80000000, 0x7, 0x40, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8d78, 0x0, 0x6b, 0x9, 0x8, {0x5, 0x0, 0x9, 0x6e, 0x1, 0x5}, {0x7, 0x1, 0x0, 0xffff, 0x0, 0x4}, 0x1, 0x14, 0x3}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe77f}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]}, @TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_POLICE={0x420, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x40}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xffffffff, 0x8, 0x1, 0x6, 0x6, 0x7ff, 0x3, 0xfffffff8, 0x10001, 0x200, 0xc9, 0xfff, 0x6, 0x80000001, 0x400, 0x2, 0x40, 0x4, 0x8001, 0x4c06, 0x7b2, 0x1, 0x7, 0x7f, 0xb4, 0x1, 0x3, 0x80000001, 0x80000001, 0x400, 0xda51, 0x7, 0x1, 0xfffffeaf, 0xc6, 0x0, 0x7fff, 0x9, 0x5045, 0xffff, 0x6, 0xffffffab, 0x6, 0x2bad, 0xffffffff, 0xaa, 0x800, 0xc6e, 0x9, 0x0, 0x6, 0x81, 0x400, 0x8, 0x8805, 0x2, 0x4, 0x4, 0x101, 0xfffffe00, 0x800, 0x80000001, 0x2, 0x10000, 0x2d2, 0xffffff64, 0x2, 0x8000, 0x1, 0x0, 0x3ff, 0x3, 0x3, 0x5, 0x7, 0x8, 0x5, 0x553d, 0x1f, 0x2, 0xef, 0x8, 0x3ff, 0xffffeb64, 0x7, 0xffff, 0xa2f, 0x5, 0x73, 0x7, 0xe5, 0x2, 0xbde, 0x8000, 0x7ff, 0x20, 0x7, 0x5, 0x5, 0x1, 0x8000, 0x6, 0x0, 0x5, 0x1, 0x5, 0x4000, 0x1f, 0xfffffffc, 0x9, 0x6, 0x7fffffff, 0x6dce, 0x9, 0x3, 0x7f, 0x7d, 0x4, 0xfffffd9b, 0x7, 0x6293dc1f, 0x0, 0x10000, 0xf65, 0x0, 0xfff, 0x100, 0x7fffffff, 0x2, 0x200, 0x2, 0x80000001, 0x10000, 0xfffff594, 0x800, 0x40, 0x10000, 0x0, 0x7fffffff, 0x9, 0x2, 0x9, 0x2, 0x2, 0x6304a211, 0x7, 0x1f, 0x9, 0x6, 0x4, 0x9, 0x3, 0xfffff9a4, 0x5, 0x6, 0x1f, 0x80000000, 0x1, 0x7f, 0xfc5, 0x0, 0x1ff, 0x4, 0x0, 0x9, 0x8000, 0x5, 0x3, 0x7f, 0x3, 0x1, 0x6, 0x401, 0xffcd, 0x1, 0x4, 0x9, 0x1, 0x5, 0x799, 0x10001, 0xfff, 0x50, 0x84, 0x200, 0x4, 0x9, 0x8f8a, 0x2, 0x35e6, 0x6, 0x9, 0x4, 0x0, 0x8, 0xa47c, 0x1, 0x80, 0x3, 0x3, 0x1, 0x200, 0x7, 0x5, 0x8, 0x4, 0x3f, 0x2, 0x40, 0x10000, 0x9, 0x20, 0x1, 0x2685, 0x8, 0x100, 0x6, 0x2, 0x3, 0x8da, 0x2, 0x3, 0x4e9, 0x70, 0x2a98, 0xfffffc00, 0x80, 0x7, 0x0, 0x81, 0x0, 0x6, 0x410760cd, 0x1, 0x6, 0x713, 0x3, 0x4, 0x9e5e, 0x3, 0x3, 0x6, 0xffffffff, 0x8, 0x4, 0x2, 0x1, 0x6, 0x7, 0x20, 0x6, 0xfff, 0x1, 0x1, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}]}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x1}}]}, 0x1680}, 0x1, 0x0, 0x0, 0x4008000}, 0x8044) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001e87a646c1bd70ffdbdf77f6d6cad2bdb6fc696a1c9891574500b15b0b5a609650c1e5a9a47c257c554a23e1e0172b7c465c8a41f587465b010dbedf1d4e41639a0a76fcc8e68bd263b2e29b448611254d1e88f5e8fe0d78c01027283c9c5dd632be00"], 0x14}}, 0x801) 20:13:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x40049409, &(0x7f0000000000)) [ 1285.152025] Bluetooth: Invalid header checksum [ 1285.161514] Bluetooth: Invalid header checksum 20:13:39 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xe3000000}, 0x0) [ 1285.221126] Bluetooth: Invalid header checksum [ 1285.258402] mkiss: ax0: crc mode is auto. [ 1285.263545] Bluetooth: Invalid header checksum [ 1285.272472] Bluetooth: Invalid header checksum [ 1285.287654] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1285.299540] audit: type=1804 audit(1625170419.907:934): pid=1289 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2735/bus" dev="sda1" ino=14161 res=1 [ 1285.331625] Bluetooth: Invalid header checksum [ 1285.348409] Bluetooth: Invalid header checksum [ 1285.361746] Bluetooth: Invalid header checksum [ 1285.368935] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1285.377075] Bluetooth: Invalid header checksum 20:13:40 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x185880, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000100)={0xa, {0x5, 0x3}}, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) [ 1285.416299] Bluetooth: Invalid header checksum 20:13:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x4020940d, &(0x7f0000000000)) [ 1285.448105] Bluetooth: Invalid header checksum [ 1285.454317] Bluetooth: Invalid header checksum [ 1285.486159] Bluetooth: Invalid header checksum 20:13:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) [ 1285.502603] Bluetooth: Invalid header checksum [ 1285.538876] audit: type=1804 audit(1625170420.147:935): pid=1308 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2736/bus" dev="sda1" ino=14129 res=1 [ 1285.566588] Bluetooth: Invalid header checksum [ 1285.571558] Bluetooth: Invalid header checksum 20:13:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=ANY=[@ANYBLOB="2400000018000200f4ff0000000000000a000000000000000000000025fd0600", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) [ 1285.591159] Bluetooth: Invalid header checksum [ 1285.599416] mkiss: ax0: crc mode is auto. [ 1285.611337] Bluetooth: Invalid header checksum [ 1285.623366] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1285.671087] Bluetooth: Invalid header checksum [ 1285.675953] Bluetooth: Invalid header checksum [ 1285.701461] Bluetooth: Invalid header checksum [ 1285.731400] Bluetooth: Invalid header checksum 20:13:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xfc000000}, 0x0) [ 1285.781501] Bluetooth: Invalid header checksum [ 1285.815201] Bluetooth: Invalid header checksum [ 1285.831063] Bluetooth: Invalid header checksum [ 1285.847589] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1285.899924] Bluetooth: Invalid header checksum [ 1285.923246] Bluetooth: Invalid header checksum [ 1285.941080] Bluetooth: Invalid header checksum [ 1285.981172] Bluetooth: Invalid header checksum [ 1285.989834] Bluetooth: Invalid header checksum [ 1286.001317] Bluetooth: Invalid header checksum [ 1286.005413] Bluetooth: Invalid header checksum [ 1286.031324] Bluetooth: Invalid header checksum [ 1286.061178] Bluetooth: Invalid header checksum 20:13:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:40 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x80045432, &(0x7f0000000000)) 20:13:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="6bffffff1808011000000000000000000a001b007f1f123069cc62028f3474fe0000ff0b"], 0x24}}, 0x0) 20:13:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xfc030000}, 0x0) [ 1286.100953] Bluetooth: Invalid header checksum [ 1286.146369] Bluetooth: Invalid header checksum [ 1286.171154] Bluetooth: Invalid header checksum [ 1286.193742] audit: type=1804 audit(1625170420.807:936): pid=1357 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2737/bus" dev="sda1" ino=14177 res=1 [ 1286.221179] Bluetooth: Invalid header checksum [ 1286.251536] Bluetooth: Invalid header checksum [ 1286.281506] Bluetooth: Invalid header checksum 20:13:40 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x80045440, &(0x7f0000000000)) 20:13:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xfe800000}, 0x0) [ 1286.345435] Bluetooth: Invalid header checksum [ 1286.350112] Bluetooth: Invalid header checksum [ 1286.355069] Bluetooth: Invalid header checksum [ 1286.362117] Bluetooth: Invalid header checksum 20:13:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f00000003c0)=r1, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001, 0x10, r4, 0x6b4d2000) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)="c210f7c29998f14a85d3590315c5138a4314e34e5b713738c9f77493af774a6660436aa212e843fa8352586bbd", 0x2d, 0xc8f8235967d2f527) r5 = socket$inet6(0xa, 0x800, 0x2) preadv(r5, &(0x7f0000000380)=[{&(0x7f0000000180)=""/200, 0xc8}, {&(0x7f0000000280)=""/4, 0x4}, {&(0x7f00000002c0)=""/154, 0x9a}], 0x3, 0xd5f, 0x6) [ 1286.391261] Bluetooth: Invalid header checksum [ 1286.416259] audit: type=1804 audit(1625170421.027:937): pid=1377 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2738/bus" dev="sda1" ino=14076 res=1 [ 1286.431969] mkiss: ax0: crc mode is auto. [ 1286.444938] Bluetooth: Invalid header checksum [ 1286.449748] Bluetooth: Invalid header checksum [ 1286.473488] Bluetooth: Invalid header checksum 20:13:41 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1286.503542] Bluetooth: Invalid header checksum [ 1286.561311] Bluetooth: Invalid header checksum [ 1286.561342] Bluetooth: Invalid header checksum [ 1286.581271] Bluetooth: Invalid header checksum [ 1286.609801] audit: type=1804 audit(1625170421.217:938): pid=1396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2739/bus" dev="sda1" ino=14001 res=1 [ 1286.634518] Bluetooth: Invalid header checksum [ 1286.672684] Bluetooth: Invalid header checksum [ 1286.677409] Bluetooth: Invalid header checksum [ 1286.691621] Bluetooth: Invalid header checksum 20:13:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f0000000000)) [ 1286.741399] Bluetooth: Invalid header checksum [ 1286.781265] Bluetooth: Invalid header checksum [ 1286.801607] Bluetooth: Invalid header checksum [ 1286.837665] mkiss: ax0: crc mode is auto. [ 1286.854836] Bluetooth: Invalid header checksum [ 1286.893734] mkiss: ax0: crc mode is auto. [ 1286.898849] Bluetooth: Invalid header checksum [ 1286.911432] Bluetooth: Invalid header checksum [ 1286.916279] Bluetooth: Invalid header checksum [ 1286.923808] Bluetooth: Invalid header checksum [ 1286.938930] Bluetooth: Invalid header checksum [ 1286.962268] Bluetooth: Invalid header checksum [ 1287.003792] Bluetooth: Invalid header checksum 20:13:41 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') ftruncate(0xffffffffffffffff, 0x1) lseek(0xffffffffffffffff, 0x1200, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xfec00000}, 0x0) 20:13:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xc, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1700}, [@RTA_GATEWAY={0x14, 0x5, @local}]}, 0x30}}, 0x0) 20:13:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r3, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f0000000000)) [ 1287.026189] Bluetooth: Invalid header checksum [ 1287.026921] Bluetooth: Invalid header checksum [ 1287.080901] Bluetooth: Invalid header checksum [ 1287.124521] mkiss: ax0: crc mode is auto. [ 1287.131365] Bluetooth: Invalid header checksum [ 1287.131445] Bluetooth: Invalid header checksum 20:13:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/241, 0xec}, {&(0x7f00000002c0)=""/108, 0xade17ded33d9a89d}], 0x2, 0x3, 0x8100008) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) [ 1287.181425] Bluetooth: Invalid header checksum 20:13:41 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') ftruncate(0xffffffffffffffff, 0x1) lseek(0xffffffffffffffff, 0x1200, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xff000000}, 0x0) [ 1287.206402] mkiss: ax0: crc mode is auto. [ 1287.243019] Bluetooth: Invalid header checksum [ 1287.243406] Bluetooth: Invalid header checksum [ 1287.281589] Bluetooth: Invalid header checksum 20:13:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0xc0189436, &(0x7f0000000000)) [ 1287.291641] Bluetooth: Invalid header checksum [ 1287.305697] Bluetooth: Invalid header checksum 20:13:41 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') ftruncate(0xffffffffffffffff, 0x1) lseek(0xffffffffffffffff, 0x1200, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1287.358113] Bluetooth: Invalid header checksum [ 1287.361032] Bluetooth: Invalid header checksum [ 1287.391087] Bluetooth: Invalid header checksum [ 1287.401926] Bluetooth: Invalid header checksum [ 1287.430641] mkiss: ax0: crc mode is auto. [ 1287.461305] Bluetooth: Invalid header checksum [ 1287.464342] Bluetooth: Invalid header checksum [ 1287.489332] mkiss: ax0: crc mode is auto. [ 1287.503059] Bluetooth: Invalid header checksum [ 1287.524657] Bluetooth: Invalid header checksum [ 1287.584052] Bluetooth: Invalid header checksum [ 1287.584057] Bluetooth: Invalid header checksum [ 1287.613819] Bluetooth: Invalid header checksum [ 1287.642264] Bluetooth: Invalid header checksum 20:13:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xff1c0000}, 0x0) 20:13:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/89, 0x59}], 0x1, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) 20:13:42 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0xc020660b, &(0x7f0000000000)) [ 1287.686887] Bluetooth: Invalid header checksum [ 1287.726104] Bluetooth: Invalid header checksum [ 1287.751311] Bluetooth: Invalid header checksum [ 1287.783486] mkiss: ax0: crc mode is auto. [ 1287.785659] audit: type=1804 audit(1625170422.397:939): pid=1519 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2743/bus" dev="sda1" ino=14417 res=1 [ 1287.814877] Bluetooth: Invalid header checksum [ 1287.831373] Bluetooth: Invalid header checksum [ 1287.861317] Bluetooth: Invalid header checksum [ 1287.869140] mkiss: ax0: crc mode is auto. [ 1287.902499] Bluetooth: Invalid header checksum [ 1287.907359] Bluetooth: Invalid header checksum [ 1287.921602] Bluetooth: Invalid header checksum [ 1287.941375] Bluetooth: Invalid header checksum [ 1287.971221] Bluetooth: Invalid header checksum [ 1288.011609] Bluetooth: Invalid header checksum 20:13:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r3, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101801, 0x1c4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/9}, {&(0x7f0000000100)=""/185}, {&(0x7f00000001c0)=""/202}, {&(0x7f0000000300)=""/159}, {&(0x7f00000003c0)=""/213}, {&(0x7f00000004c0)=""/8}, {&(0x7f0000000500)=""/46}, {&(0x7f0000000540)=""/149}], 0x1000000000000042, 0xd9f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, r3, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 20:13:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffa888}, 0x0) 20:13:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r2, 0xc01064c1, &(0x7f0000000240)={0x0, 0x1, r1}) dup2(r3, r4) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x0, 0x9}, {0x7}, {0x8000, 0x550b}, {0x80, 0x80}]}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000200)={0x9, 0x7, 0x3, 0x7, 0x0, 0x598}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1288.031796] Bluetooth: Invalid header checksum [ 1288.081937] Bluetooth: Invalid header checksum 20:13:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x280000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) [ 1288.105615] mkiss: ax0: crc mode is auto. [ 1288.121173] Bluetooth: Invalid header checksum [ 1288.141543] Bluetooth: Invalid header checksum [ 1288.178317] mkiss: ax0: crc mode is auto. 20:13:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) [ 1288.199689] Bluetooth: Invalid header checksum [ 1288.231120] Bluetooth: Invalid header checksum [ 1288.243078] Bluetooth: Invalid header checksum [ 1288.251379] Bluetooth: Invalid header checksum [ 1288.279105] Bluetooth: Invalid header checksum 20:13:42 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000100)={0x79, 0x8, 0x4, 0x5, 0x9, [{0x97, 0x1f, 0x4, '\x00', 0x1b00}, {0x3, 0x1f, 0x1, '\x00', 0x408}, {0xfffffffffffffff8, 0x3, 0x10001, '\x00', 0x4}, {0xffffffffffff0000, 0x101, 0x9e}, {0x7a6, 0x3, 0x7, '\x00', 0x2}, {0x0, 0x9, 0x4, '\x00', 0x801}, {0x96, 0x5, 0x5, '\x00', 0x204}, {0x80000001, 0x7, 0x7, '\x00', 0x2}, {0x8, 0x7, 0x800, '\x00', 0x800}]}) preadv(r0, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0xf11c, 0x0, 0x0, 0xfffffff7, 0xe, "0440afcf80d82249766080fe5c7f8f88938020"}) [ 1288.301412] Bluetooth: Invalid header checksum [ 1288.341654] Bluetooth: Invalid header checksum [ 1288.351820] Bluetooth: Invalid header checksum [ 1288.361528] Bluetooth: Invalid header checksum [ 1288.411262] Bluetooth: Invalid header checksum [ 1288.451740] Bluetooth: Invalid header checksum [ 1288.463073] Bluetooth: Invalid header checksum [ 1288.471960] Bluetooth: Invalid header checksum [ 1288.521695] Bluetooth: Invalid header checksum [ 1288.561664] Bluetooth: Invalid header checksum [ 1288.573360] Bluetooth: Invalid header checksum [ 1288.587914] Bluetooth: Invalid header checksum 20:13:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 20:13:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd29}, 0x1c}}, 0x0) [ 1288.642898] Bluetooth: Invalid header checksum 20:13:43 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xa8) [ 1288.682256] Bluetooth: Invalid header checksum [ 1288.692743] Bluetooth: Invalid header checksum [ 1288.754487] Bluetooth: Invalid header checksum [ 1288.791236] Bluetooth: Invalid header checksum [ 1288.796723] mkiss: ax0: crc mode is auto. [ 1288.802907] Bluetooth: Invalid header checksum [ 1288.876863] Bluetooth: Invalid header checksum [ 1288.888544] Bluetooth: Invalid header checksum [ 1288.895336] Bluetooth: Invalid header checksum [ 1288.903653] Bluetooth: Invalid header checksum [ 1288.911104] Bluetooth: Invalid header checksum [ 1288.916532] mkiss: ax0: crc mode is auto. [ 1288.923919] audit: type=1804 audit(1625170423.537:940): pid=1629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2744/bus" dev="sda1" ino=14061 res=1 [ 1288.975910] Bluetooth: Invalid header checksum [ 1288.983138] Bluetooth: Invalid header checksum [ 1289.021175] Bluetooth: Invalid header checksum 20:13:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r3, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:43 executing program 5: clock_gettime(0x0, &(0x7f0000003080)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000180)=""/85, 0x55}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/69, 0x45}, {&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000001280)=""/91, 0x5b}, {&(0x7f0000001300)=""/244, 0xf4}, {&(0x7f0000001480)=""/125, 0x7d}], 0x7, &(0x7f0000001580)=""/163, 0xa3}, 0x1}, {{&(0x7f0000001640)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000001400)=[{&(0x7f00000016c0)=""/240, 0xf0}, {&(0x7f00000017c0)=""/127, 0x7f}], 0x2, &(0x7f0000001840)=""/120, 0x78}, 0x1}, {{&(0x7f00000018c0)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/141, 0x8d}, {&(0x7f0000002a00)=""/227, 0xe3}, {&(0x7f0000002b00)=""/203, 0xcb}], 0x4, &(0x7f0000002c40)=""/119, 0x77}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002cc0)=""/62, 0x3e}], 0x1, &(0x7f0000002d40)=""/93, 0x5d}, 0xc9fb}, {{&(0x7f0000002dc0)=@l2tp, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002e40)=""/132, 0x84}], 0x1}, 0x5}], 0x5, 0x0, &(0x7f00000030c0)={r0, r1+60000000}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) 20:13:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 20:13:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0xff27, 0x8001, 0x2}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000140)={0x0, 0x100000000, @status={[0x9, 0x3, 0x7fff, 0x800000000000000, 0x6, 0x7]}, [0x52, 0xe0, 0x0, 0x8, 0x4e, 0x5, 0x4, 0x9, 0x1, 0x63b9, 0x7, 0xffff, 0x20, 0x100000000, 0x4, 0x20, 0x1, 0x1, 0xffffffff, 0x5, 0x6, 0x1, 0x5, 0x5, 0xd0e, 0x292, 0x6c6, 0x40, 0x6, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x81, 0x10001, 0x1f, 0x2, 0x8, 0x0, 0x5, 0x4, 0xffffffffffff3ec7, 0x54, 0x7fff, 0x9df, 0x0, 0x8000000000000, 0x13b5664, 0x7, 0x7, 0xffffffffffffffff, 0x9, 0x40, 0x7f, 0x0, 0x1, 0x0, 0x800, 0x6, 0x4, 0x1, 0x446, 0x82a, 0x401]}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x81) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 1289.081368] Bluetooth: Invalid header checksum [ 1289.091576] Bluetooth: Invalid header checksum [ 1289.127888] validate_nla: 16 callbacks suppressed [ 1289.128004] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1289.140620] Bluetooth: Invalid header checksum 20:13:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@gettaction={0x168, 0x32, 0x200, 0x70bd25, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}]}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9959}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7c}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x73222677}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2a2}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$nl_route_sched(r2, &(0x7f0000000c00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000700)=@newtclass={0x49c, 0x28, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {0x6, 0x5}, {0x13, 0x7}}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0xffffffc0, 0xffffffe0, 0x8, 0x2b2a, 0x7, 0x101, 0x9, 0x8, 0xd0c, 0x3, 0x2, 0x6e3c, 0x6, 0x6, 0xf0b, 0xfff, 0x0, 0x7, 0x48, 0x7, 0x3f, 0x5, 0xa7e, 0x4, 0x6, 0x0, 0x0, 0x2, 0x5, 0xfffffff7, 0x1ff, 0x8, 0x6853, 0x80000000, 0x55a1, 0x1000, 0x0, 0x0, 0x9, 0x6, 0x1, 0x80, 0x5, 0x2, 0x8, 0x7, 0x20, 0x10000, 0x3f, 0x1f, 0x69, 0x80000000, 0x9, 0x362, 0x7, 0x9, 0x5, 0x49b, 0x2, 0x0, 0x200, 0xe, 0x5, 0x101, 0x346d, 0x8000, 0x63, 0xc9fa, 0x7, 0x9, 0x20, 0x5, 0xfffffcbd, 0x80, 0x46748f03, 0xdf, 0x1, 0x3, 0x0, 0x8000, 0x7f, 0x3, 0xff, 0xfffffffb, 0x1, 0x1, 0x7a7d, 0x7, 0x3ff, 0x9, 0x4, 0xaa44, 0x3f, 0x500000, 0x240000, 0x5, 0x2, 0x4, 0x80000001, 0x2, 0x4, 0x2, 0x100, 0x2, 0x3, 0x7fff, 0x549, 0xd3, 0x80000000, 0x800, 0x7fffffff, 0x3, 0x200000, 0x2, 0x4, 0x0, 0xc0b4, 0x6, 0x1, 0x5, 0x400, 0x5, 0xe8f, 0x7f, 0x7ff, 0xfffffc01, 0x7, 0x5, 0x0, 0x8000, 0x2, 0x2, 0x1, 0x9, 0x81, 0x80000000, 0x1000, 0x1, 0x2, 0xffff7fff, 0x5, 0x0, 0x10001, 0x7f, 0x1, 0x7, 0x1, 0x0, 0x7fff, 0x5, 0x0, 0x2, 0x8, 0x195, 0x99, 0x10001, 0x2, 0x5, 0xffff, 0x1, 0x0, 0x2, 0x2, 0x9, 0x385, 0x9, 0x200, 0x10001, 0x3, 0x6, 0x1ff, 0x1f, 0x3, 0x0, 0x3, 0x4, 0x7fffffff, 0xfffffff7, 0x2, 0x80, 0x0, 0x5, 0x7fffffff, 0x8, 0x2, 0x1, 0x0, 0x40000000, 0x1ff, 0x4, 0x1ff, 0x7, 0x5, 0x8, 0x8001, 0x4, 0x80, 0x0, 0x6, 0xcb49, 0x800, 0xe0000000, 0xd9, 0x8, 0x1c2, 0x2, 0x81, 0x80000000, 0x400, 0x20, 0x8, 0x57c0, 0xa624, 0x3, 0x7, 0xa6, 0x4, 0x3, 0x8, 0x97e, 0x8, 0x1, 0x800, 0x7, 0x1, 0x40, 0x7fff, 0xa2e, 0x4, 0xfff, 0x5, 0x8, 0x7, 0x6e, 0x6, 0xdbc1, 0x80000000, 0x401, 0x3f, 0x2, 0x81, 0x2d0e, 0x6, 0x4, 0x7, 0x10000, 0x1, 0x5, 0x7, 0x4, 0x6f, 0x77, 0x0, 0x7, 0x4834, 0x9]}]}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x8, 0x80}}, @tclass_kind_options=@c_cbq={{0x8}, {0x44, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0xb, 0x1, 0x3, 0x81, 0x8, 0x14a, 0x2, 0x80}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfff3, 0xd}, 0x100, 0x9}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3d, 0x0, 0x1a, 0xff, 0xbf, 0xfff, 0x8000, 0x1000}}]}}]}, 0x49c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) [ 1289.184925] mkiss: ax0: crc mode is auto. [ 1289.191515] Bluetooth: Invalid header checksum [ 1289.202396] Bluetooth: Invalid header checksum 20:13:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) [ 1289.237046] IPv6: Can't replace route, no match found [ 1289.242635] Bluetooth: Invalid header checksum [ 1289.261427] Bluetooth: Invalid header checksum [ 1289.266514] Bluetooth: Invalid header checksum [ 1289.277053] Bluetooth: Invalid header checksum [ 1289.311683] Bluetooth: Invalid header checksum [ 1289.313714] Bluetooth: Invalid header checksum [ 1289.345008] mkiss: ax0: crc mode is auto. [ 1289.351841] Bluetooth: Invalid header checksum [ 1289.354771] IPv6: Can't replace route, no match found 20:13:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x200080, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipmr_delroute={0x30, 0x19, 0x100, 0x70bd2c, 0x25dfdbff, {0x80, 0x10, 0x20, 0x4, 0x0, 0x2, 0xfe, 0x5, 0x2200}, [@RTA_MULTIPATH={0xc, 0x9, {0x3, 0x2, 0xf7, r5}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x20000805) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000040)=""/35, 0x23}, {&(0x7f0000000100)=""/32, 0x20}, {&(0x7f0000000140)=""/58, 0x3a}, {&(0x7f0000000180)=""/98, 0x62}], 0x4, 0x1, 0x6) dup2(r0, r0) [ 1289.366206] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1289.375929] Bluetooth: Invalid header checksum [ 1289.405698] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1289.421525] Bluetooth: Invalid header checksum [ 1289.424834] Bluetooth: Invalid header checksum [ 1289.471391] Bluetooth: Invalid header checksum [ 1289.492363] Bluetooth: Invalid header checksum [ 1289.532996] Bluetooth: Invalid header checksum [ 1289.538198] Bluetooth: Invalid header checksum [ 1289.575150] Bluetooth: Invalid header checksum [ 1289.604473] Bluetooth: Invalid header checksum 20:13:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00006ce000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) 20:13:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1a) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x80, 0x3, 0x0, 0x2, 0x11, "a84d0d5ecdae4ee4233f5929e895f454117fb0"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1289.651133] Bluetooth: Invalid header checksum [ 1289.685537] Bluetooth: Invalid header checksum [ 1289.713246] Bluetooth: Invalid header checksum [ 1289.716407] mkiss: ax0: crc mode is auto. [ 1289.755428] Bluetooth: Invalid header checksum [ 1289.791182] Bluetooth: Invalid header checksum 20:13:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 20:13:44 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1289.821134] Bluetooth: Invalid header checksum [ 1289.860549] Bluetooth: Invalid header checksum [ 1289.877828] Bluetooth: Invalid header checksum [ 1289.887288] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1289.887345] mkiss: ax0: crc mode is auto. [ 1289.902349] Bluetooth: Invalid header checksum [ 1289.908218] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1289.916374] Bluetooth: Invalid header checksum [ 1289.941204] Bluetooth: Invalid header checksum [ 1289.961143] Bluetooth: Invalid header checksum [ 1289.971653] Bluetooth: Invalid header checksum 20:13:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setsig(r1, 0xa, 0x36) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) 20:13:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x2) 20:13:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000100)={0x8, "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"}) [ 1290.050438] Bluetooth: Invalid header checksum [ 1290.061403] audit: type=1804 audit(1625170424.677:941): pid=1722 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2745/bus" dev="sda1" ino=14060 res=1 [ 1290.088913] Bluetooth: Invalid header checksum [ 1290.094225] Bluetooth: Invalid header checksum [ 1290.157295] Bluetooth: Invalid header checksum [ 1290.191472] Bluetooth: Invalid header checksum [ 1290.202557] Bluetooth: Invalid header checksum [ 1290.215525] mkiss: ax0: crc mode is auto. [ 1290.216306] netlink: 'syz-executor.1': attribute type 20 has an invalid length. 20:13:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000000000a000000000000000000000008000600", @ANYRES32=0x0, @ANYBLOB="69c47320e053306195cb3ee98002e0a602c44a5a573a755e9537a873ae327cc73f242e335d6a0c73ea071d17070281ce993dbe1020be537c126b7d0d5a5cfb8507bb"], 0x24}}, 0x0) [ 1290.261096] Bluetooth: Invalid header checksum [ 1290.268564] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1290.301521] Bluetooth: Invalid header checksum [ 1290.311783] Bluetooth: Invalid header checksum [ 1290.334672] mkiss: ax0: crc mode is auto. 20:13:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x3) [ 1290.351195] Bluetooth: Invalid header checksum [ 1290.356175] Bluetooth: Invalid header checksum [ 1290.372702] Bluetooth: Invalid header checksum [ 1290.411093] Bluetooth: Invalid header checksum [ 1290.421893] Bluetooth: Invalid header checksum 20:13:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1290.461266] Bluetooth: Invalid header checksum [ 1290.481161] Bluetooth: Invalid header checksum [ 1290.523266] Bluetooth: Invalid header checksum [ 1290.537057] Bluetooth: Invalid header checksum 20:13:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x6, 0x20480) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x210c00, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0xd) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_MASTER={0x8, 0x4, r9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@mpls_getroute={0xdc, 0x1a, 0x410, 0x70bd27, 0x25dfdbfb, {0x1c, 0x0, 0x14, 0x7, 0x82, 0x1, 0xff, 0x0, 0x400}, [@RTA_NEWDST={0x84, 0x13, [{0x3, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x9}, {0x61}, {0x6}, {0x5, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x5}, {0xf34f4, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x6}, {0x2, 0x0, 0x1}, {0x1}, {0x7f}, {0x40}, {0x40}, {0x60, 0x0, 0x1}, {}, {0x5, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xe5e, 0x0, 0x1}, {0x1}, {0x400}, {0x5, 0x0, 0x1}, {0x3}, {0x1}, {0x8000}, {}, {0x2, 0x0, 0x1}, {0xc0, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x2, 0x0, 0x1}]}, @RTA_VIA={0x14, 0x12, {0x2, "4cb3ecfd16bb23cb5a9d216997e0"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x36}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x10, 0xad, r6}}, @RTA_MULTIPATH={0xc, 0x9, {0x3ff, 0x4, 0x7, r9}}, @RTA_DST={0x8, 0x1, {0xe4da}}]}, 0xdc}}, 0x2000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) 20:13:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x4) [ 1290.571159] Bluetooth: Invalid header checksum [ 1290.576238] IPv6: Can't replace route, no match found [ 1290.594756] Bluetooth: Invalid header checksum [ 1290.617027] mkiss: ax0: crc mode is auto. [ 1290.649463] Bluetooth: Invalid header checksum [ 1290.682367] Bluetooth: Invalid header checksum [ 1290.701710] Bluetooth: Invalid header checksum [ 1290.725157] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1290.762137] Bluetooth: Invalid header checksum [ 1290.772119] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1290.803934] mkiss: ax0: crc mode is auto. [ 1290.803982] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1290.821749] Bluetooth: Invalid header checksum [ 1290.827033] Bluetooth: Invalid header checksum [ 1290.873861] netlink: 'syz-executor.1': attribute type 20 has an invalid length. 20:13:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x6) [ 1291.148854] Bluetooth: Invalid header checksum [ 1291.155153] Bluetooth: Invalid header checksum [ 1291.164762] Bluetooth: Invalid header checksum [ 1291.165681] Bluetooth: Invalid header checksum [ 1291.169626] Bluetooth: Invalid header checksum [ 1291.181488] Bluetooth: Invalid header checksum [ 1291.188746] Bluetooth: Invalid header checksum [ 1291.192689] Bluetooth: Invalid header checksum [ 1291.201852] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1291.216116] Bluetooth: Invalid header checksum [ 1291.224265] Bluetooth: Invalid header checksum [ 1291.242440] Bluetooth: Invalid header checksum 20:13:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) 20:13:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1291.249007] audit: type=1804 audit(1625170425.857:942): pid=1803 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2746/bus" dev="sda1" ino=14063 res=1 [ 1291.284226] Bluetooth: Invalid header checksum 20:13:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x7) [ 1291.307656] Bluetooth: Invalid header checksum [ 1291.322521] Bluetooth: Invalid header checksum 20:13:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000040)={{&(0x7f00000003c0)={'KERNEL\x00', {&(0x7f00000001c0)=@adf_str={@bank={'Bank', '0', 'CoreAffinity\x00'}, {"c1a8b3be03834154f2d416753234bc1fcdfe06cf63ce2a5b5f286e17d189614ef60d16aeb5026171e4ca8fb309288b72e795b9afa1708a3345a1841a0b8f23a7"}, {&(0x7f0000000100)=@adf_dec={@normal='NumberDcInstances\x00', {0x1}}}}}, {&(0x7f0000000340)={'Accelerator0\x00', {&(0x7f0000000280)=@adf_dec={@format={'Cy', '5', 'BankNumber\x00'}, {0x101}}}}}}}, 0x1}) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) mmap(&(0x7f00006d9000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r1, 0x8ba26000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001800010000000000000000000a000000000000000000000008000600", @ANYRES32=0x0, @ANYBLOB="2d3cd54304085cb2fb2d63b372096acc13ecfb638bee9cbe9bd5286585cf662bb4c1dd9a9949844ed05709fc7692f91a5a2c73ffb5fc0ab736590fb5030fcb15b23c7b698855dd9da489ace6e5d5ba86cfef196e22666e591c9c1681d9ee41950d9bb520d7b0c0a75f9f63b8edaf9395b67a7bb224e446c19a490836b4efb718fcbb99c78b878ad361c3992a1ef97cdfa3b69f215d4def765c426a56a1f2a184d053f303ce8f1dd964e33a323391d8e5c802b10c050b0605501db786aa95861d2d6419ee83658327056114a9b974b9c801700f4f6872d6b1901cdc842c441c32362c9222b9a284ffae9e4ba6f7dbfc1fcf7a160000"], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_MASTER={0x8, 0x4, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_MASTER={0x8, 0x4, r8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000ac0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f00000005c0)=@deltfilter={0x4ac, 0x2d, 0x800, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xa, 0x4}, {0xfff2}, {0xd, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x15}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xe1}, @TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8001}]}, @TCA_ROUTE4_POLICE={0x14, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0xffff}}]}}, @filter_kind_options=@f_flow={{0x9}, {0x404, 0x2, [@TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x6}, @TCA_FLOW_MASK={0x8, 0x6, 0x81}, @TCA_FLOW_MASK={0x8, 0x6, 0x8}, @TCA_FLOW_ACT={0x380, 0x9, 0x0, 0x1, [@m_bpf={0x154, 0x17, 0x0, 0x0, {{0x8}, {0x84, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x401, 0x0, 0x2}, {0x3, 0x2, 0x1, 0x100}, {0x0, 0xff, 0x3, 0x2a}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7fff, 0x64, 0x7, 0x9, 0xfff}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x7, 0x80, 0x20, 0x81}, {0x80, 0x2f, 0x9, 0x8c}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}]}, {0xac, 0x6, "ab32b1f96dc419492c6f26202121312e8e7946c902ede269a630b7d45cde247d1c6740e1e5b28c71507e5ea0a07f320f431bc4fc687e038b858387bf07108afd9785f4aefaf503042d63388fdd8a73f3f3745b347a1d4ba7c6bc582fdd9334660bd47d2010740fb0962aef2b4b78b25613adfb98aa96affa4f3744bc1cbc1e79cd776bffd2bba7032ffb198e92c62f1033bf7e60cb3c4b911d430b9ce61c19f8f171ea1df25e62a0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x104, 0x19, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x700, 0x80000000, 0x7, 0x100, 0x9}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, {0x8c, 0x6, "3d09b62d8e0df4258881c373384d6f6e60cdccdcf848bec25a07d73d9e5588ac4524be55285c41a32d5174d51a92f787894774e158ef229a49c1e6ceb33d07c7ba65f9c951327a25f55603a577c8966334b2818918b357252c93847bacc600ace430823b884bca059f1b7a23cab7d5e238ae5e016de1c34e62da7f0e72e49efb35bb88089cfe206b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0x7c, 0x1d, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfff, 0x0, 0x4, 0x8, 0x7}}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x800, 0x2, 0x8, 0x7}}]}, {0x24, 0x6, "2a921f106ab504e0e19dbee325d0a7084f9790b22a572a6520015df5cc92c8fd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4}}}}, @m_skbedit={0xa8, 0x13, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x200}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0x5a, 0x6, "cdf369a65fbc47dd824461cbdcb3a0b5f4dbd2ba3d34e6fe5f593f3e79f29ca90ee269993c6ab307edb267377202f33d7a9f1715cfcbe5c3a42e7270fdc1cc9ddbbda3b153c7d69da3f65d532a6d2f29001e886dd152"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x3}}}}]}, @TCA_FLOW_EMATCHES={0x48, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8ae, 0x7, 0x401}, {{0x3, 0x1, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPT={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x9, 0x1}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}]}]}, @TCA_FLOW_POLICE={0x18, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) [ 1291.379048] mkiss: ax0: crc mode is auto. [ 1291.381115] Bluetooth: Invalid header checksum [ 1291.394606] Bluetooth: Invalid header checksum [ 1291.431773] Bluetooth: Invalid header checksum 20:13:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x8) [ 1291.461985] IPv6: Can't replace route, no match found [ 1291.476129] IPv6: Can't replace route, no match found [ 1291.491921] Bluetooth: Invalid header checksum [ 1291.492933] Bluetooth: Invalid header checksum [ 1291.502489] Bluetooth: Invalid header checksum [ 1291.503640] Bluetooth: Invalid header checksum [ 1291.522170] mkiss: ax0: crc mode is auto. [ 1291.544837] Bluetooth: Invalid header checksum 20:13:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) r2 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000100)) 20:13:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1291.601813] Bluetooth: Invalid header checksum [ 1291.602450] Bluetooth: Invalid header checksum 20:13:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xa) 20:13:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x81, 0xff, 0x1dbe, 0x4, 0x1, 0x5}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1291.651134] Bluetooth: Invalid header checksum [ 1291.712362] Bluetooth: Invalid header checksum [ 1291.714144] Bluetooth: Invalid header checksum [ 1291.761265] Bluetooth: Invalid header checksum [ 1291.797860] mkiss: ax0: crc mode is auto. [ 1291.821083] Bluetooth: Invalid header checksum [ 1291.825727] Bluetooth: Invalid header checksum [ 1291.843108] Bluetooth: Invalid header checksum [ 1291.847914] Bluetooth: Invalid header checksum 20:13:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xb) [ 1291.868511] mkiss: ax0: crc mode is auto. [ 1291.882129] Bluetooth: Invalid header checksum [ 1291.931452] Bluetooth: Invalid header checksum [ 1291.941538] Bluetooth: Invalid header checksum [ 1291.967469] Bluetooth: Invalid header checksum [ 1291.991931] Bluetooth: Invalid header checksum [ 1292.041160] Bluetooth: Invalid header checksum [ 1292.051288] Bluetooth: Invalid header checksum [ 1292.081514] Bluetooth: Invalid header checksum [ 1292.101112] Bluetooth: Invalid header checksum 20:13:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x615500, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xc) [ 1292.151245] Bluetooth: Invalid header checksum [ 1292.166717] Bluetooth: Invalid header checksum [ 1292.194311] Bluetooth: Invalid header checksum [ 1292.216784] Bluetooth: Invalid header checksum 20:13:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1292.271131] Bluetooth: Invalid header checksum [ 1292.301572] Bluetooth: Invalid header checksum 20:13:46 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000100)=r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) 20:13:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xe) [ 1292.322206] Bluetooth: Invalid header checksum [ 1292.341361] audit: type=1804 audit(1625170426.957:943): pid=1893 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2747/bus" dev="sda1" ino=14091 res=1 [ 1292.371243] Bluetooth: Invalid header checksum [ 1292.411596] Bluetooth: Invalid header checksum [ 1292.431336] Bluetooth: Invalid header checksum [ 1292.439015] mkiss: ax0: crc mode is auto. 20:13:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xf) [ 1292.510008] Bluetooth: Invalid header checksum [ 1292.518251] Bluetooth: Invalid header checksum [ 1292.524891] Bluetooth: Invalid header checksum [ 1292.542272] Bluetooth: Invalid header checksum [ 1292.557491] Bluetooth: Invalid header checksum [ 1292.562644] mkiss: ax0: crc mode is auto. 20:13:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1292.601465] Bluetooth: Invalid header checksum [ 1292.602178] Bluetooth: Invalid header checksum [ 1292.651187] Bluetooth: Invalid header checksum 20:13:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000100)={0x3, 0x2, 0x2, 0x6a, 0x3, "223a7d396039e9de"}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) fcntl$setstatus(r3, 0x4, 0x40400) 20:13:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x10) [ 1292.712084] Bluetooth: Invalid header checksum [ 1292.712089] Bluetooth: Invalid header checksum [ 1292.761125] Bluetooth: Invalid header checksum [ 1292.805656] mkiss: ax0: crc mode is auto. [ 1292.823334] Bluetooth: Invalid header checksum [ 1292.838568] Bluetooth: Invalid header checksum [ 1292.843816] Bluetooth: Invalid header checksum [ 1292.848736] Bluetooth: Invalid header checksum [ 1292.871396] Bluetooth: Invalid header checksum 20:13:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x19) [ 1292.906850] mkiss: ax0: crc mode is auto. [ 1292.931255] Bluetooth: Invalid header checksum [ 1292.936035] Bluetooth: Invalid header checksum [ 1292.951456] Bluetooth: Invalid header checksum 20:13:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x12100, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x6) [ 1293.001955] Bluetooth: Invalid header checksum [ 1293.041412] Bluetooth: Invalid header checksum [ 1293.046308] Bluetooth: Invalid header checksum [ 1293.072992] Bluetooth: Invalid header checksum [ 1293.101322] Bluetooth: Invalid header checksum [ 1293.152966] Bluetooth: Invalid header checksum [ 1293.157749] Bluetooth: Invalid header checksum [ 1293.182021] Bluetooth: Invalid header checksum 20:13:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x23) 20:13:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1a) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x181, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1293.214626] Bluetooth: Invalid header checksum 20:13:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1293.261119] Bluetooth: Invalid header checksum [ 1293.291409] Bluetooth: Invalid header checksum 20:13:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x2f) [ 1293.321272] Bluetooth: Invalid header checksum [ 1293.371408] Bluetooth: Invalid header checksum [ 1293.401402] Bluetooth: Invalid header checksum [ 1293.431306] Bluetooth: Invalid header checksum 20:13:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x49) [ 1293.481258] Bluetooth: Invalid header checksum [ 1293.493600] audit: type=1804 audit(1625170428.107:944): pid=2015 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2748/bus" dev="sda1" ino=14063 res=1 20:13:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1293.548672] Bluetooth: Invalid header checksum [ 1293.591652] Bluetooth: Invalid header checksum 20:13:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1293.661254] Bluetooth: Invalid header checksum [ 1293.703030] Bluetooth: Invalid header checksum 20:13:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x52) [ 1293.771151] Bluetooth: Invalid header checksum [ 1293.811338] Bluetooth: Invalid header checksum [ 1293.831694] Bluetooth: Invalid header checksum [ 1293.836535] Bluetooth: Invalid header checksum [ 1293.846555] Bluetooth: Invalid header checksum [ 1293.885420] Bluetooth: Invalid header checksum 20:13:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1293.921085] Bluetooth: Invalid header checksum [ 1293.951821] Bluetooth: Invalid header checksum [ 1293.991188] Bluetooth: Invalid header checksum 20:13:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x60) [ 1294.033022] Bluetooth: Invalid header checksum [ 1294.052360] Bluetooth: Invalid header checksum [ 1294.101436] Bluetooth: Invalid header checksum [ 1294.142455] Bluetooth: Invalid header checksum [ 1294.149652] validate_nla: 12 callbacks suppressed [ 1294.149660] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1294.166343] Bluetooth: Invalid header checksum [ 1294.181967] Bluetooth: Invalid header checksum [ 1294.190313] Bluetooth: Invalid header checksum [ 1294.211228] Bluetooth: Invalid header checksum [ 1294.217795] Bluetooth: Invalid header checksum [ 1294.252129] Bluetooth: Invalid header checksum [ 1294.271187] Bluetooth: Invalid header checksum [ 1294.292931] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1294.293116] Bluetooth: Invalid header checksum [ 1294.321914] Bluetooth: Invalid header checksum [ 1294.363308] Bluetooth: Invalid header checksum [ 1294.381447] Bluetooth: Invalid header checksum [ 1294.411414] Bluetooth: Invalid header checksum [ 1294.431977] Bluetooth: Invalid header checksum [ 1294.471211] Bluetooth: Invalid header checksum 20:13:49 executing program 3: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xa1) [ 1294.522034] Bluetooth: Invalid header checksum [ 1294.541064] Bluetooth: Invalid header checksum [ 1294.581527] Bluetooth: Invalid header checksum [ 1294.632076] Bluetooth: Invalid header checksum [ 1294.655556] Bluetooth: Invalid header checksum [ 1294.672874] audit: type=1804 audit(1625170429.287:945): pid=2207 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2749/bus" dev="sda1" ino=14059 res=1 [ 1294.692186] Bluetooth: Invalid header checksum [ 1294.741167] Bluetooth: Invalid header checksum [ 1294.770194] Bluetooth: Invalid header checksum [ 1294.801770] Bluetooth: Invalid header checksum [ 1294.881471] Bluetooth: Invalid header checksum [ 1294.911371] Bluetooth: Invalid header checksum [ 1294.991120] Bluetooth: Invalid header checksum [ 1295.021116] Bluetooth: Invalid header checksum [ 1295.115560] Bluetooth: Invalid header checksum [ 1295.131904] Bluetooth: Invalid header checksum [ 1295.212449] Bluetooth: Invalid header checksum [ 1295.241101] Bluetooth: Invalid header checksum [ 1295.321287] Bluetooth: Invalid header checksum [ 1295.351806] Bluetooth: Invalid header checksum 20:13:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x7650c1, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x201b) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xe3) 20:13:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1295.432307] Bluetooth: Invalid header checksum [ 1295.465174] Bluetooth: Invalid header checksum 20:13:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xf0) [ 1295.541289] Bluetooth: Invalid header checksum 20:13:50 executing program 3: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1295.571421] Bluetooth: Invalid header checksum [ 1295.591631] Bluetooth: Invalid header checksum [ 1295.591924] Bluetooth: Invalid header checksum [ 1295.596435] Bluetooth: Invalid header checksum [ 1295.620753] Bluetooth: Invalid header checksum [ 1295.636650] Bluetooth: Invalid header checksum 20:13:50 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/173, 0xad}, {&(0x7f00000002c0)=""/9, 0x9}, {&(0x7f0000000300)=""/46, 0x2e}, {&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f0000000640)=""/153, 0x99}, {&(0x7f00000004c0)=""/193, 0xc1}], 0x6, 0x0, 0xffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x45) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x20a00, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x500, 0x58) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x17) r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) r3 = dup3(r0, r2, 0x80000) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) ftruncate(r4, 0x6d) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x9) [ 1295.651153] Bluetooth: Invalid header checksum [ 1295.679266] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1295.690129] Bluetooth: Invalid header checksum [ 1295.703668] Bluetooth: Invalid header checksum [ 1295.704096] Bluetooth: Invalid header checksum [ 1295.738302] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1295.763227] Bluetooth: Invalid header checksum [ 1295.763841] IPv6: Can't replace route, no match found [ 1295.775809] audit: type=1804 audit(1625170430.387:946): pid=2339 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2750/bus" dev="sda1" ino=14141 res=1 [ 1295.808574] Bluetooth: Invalid header checksum [ 1295.814247] Bluetooth: Invalid header checksum [ 1295.818959] Bluetooth: Invalid header checksum 20:13:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xfc) [ 1295.835301] IPv6: Can't replace route, no match found [ 1295.864968] IPv6: Can't replace route, no match found [ 1295.871591] Bluetooth: Invalid header checksum [ 1295.901153] Bluetooth: Invalid header checksum 20:13:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_pts(r0, 0x10001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$KDADDIO(r0, 0x4b34, 0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=r2) [ 1295.918861] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1295.927431] Bluetooth: Invalid header checksum [ 1295.934242] Bluetooth: Invalid header checksum [ 1295.977305] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1295.985854] Bluetooth: Invalid header checksum [ 1296.011117] Bluetooth: Invalid header checksum [ 1296.028815] mkiss: ax0: crc mode is auto. [ 1296.043814] Bluetooth: Invalid header checksum [ 1296.043915] Bluetooth: Invalid header checksum 20:13:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x13b) [ 1296.091325] Bluetooth: Invalid header checksum [ 1296.121149] Bluetooth: Invalid header checksum [ 1296.127716] mkiss: ax0: crc mode is auto. [ 1296.151564] Bluetooth: Invalid header checksum [ 1296.151644] Bluetooth: Invalid header checksum [ 1296.201136] Bluetooth: Invalid header checksum 20:13:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x10b080, 0x0) syz_open_pts(r1, 0x401) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x148) [ 1296.231327] Bluetooth: Invalid header checksum [ 1296.269964] Bluetooth: Invalid header checksum [ 1296.270057] Bluetooth: Invalid header checksum [ 1296.295424] mkiss: ax0: crc mode is auto. [ 1296.296570] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1296.318881] Bluetooth: Invalid header checksum [ 1296.341785] Bluetooth: Invalid header checksum 20:13:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1296.422926] Bluetooth: Invalid header checksum [ 1296.452133] Bluetooth: Invalid header checksum [ 1296.486968] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1296.523268] mkiss: ax0: crc mode is auto. [ 1296.532086] Bluetooth: Invalid header checksum 20:13:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x18d) [ 1296.562930] Bluetooth: Invalid header checksum [ 1296.651220] Bluetooth: Invalid header checksum [ 1296.656171] Bluetooth: Invalid header checksum [ 1296.660376] Bluetooth: Invalid header checksum [ 1296.668780] Bluetooth: Invalid header checksum [ 1296.673818] Bluetooth: Invalid header checksum [ 1296.676227] Bluetooth: Invalid header checksum [ 1296.695593] Bluetooth: Invalid header checksum 20:13:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x12) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x21) 20:13:51 executing program 3: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x1ac) [ 1296.761565] Bluetooth: Invalid header checksum [ 1296.771891] Bluetooth: Invalid header checksum [ 1296.776809] Bluetooth: Invalid header checksum [ 1296.783102] Bluetooth: Invalid header checksum [ 1296.871224] Bluetooth: Invalid header checksum [ 1296.871231] Bluetooth: Invalid header checksum [ 1296.871288] Bluetooth: Invalid header checksum [ 1296.891448] Bluetooth: Invalid header checksum [ 1296.898872] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1296.937669] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1296.981456] Bluetooth: Invalid header checksum [ 1296.982273] Bluetooth: Invalid header checksum [ 1296.986100] Bluetooth: Invalid header checksum [ 1297.005553] Bluetooth: Invalid header checksum 20:13:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x1ae) [ 1297.013737] audit: type=1804 audit(1625170431.627:947): pid=2421 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2751/bus" dev="sda1" ino=13999 res=1 20:13:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xfc) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0xfffffffd, 0x7, 0xffffffff, 0x5, 0x11, "d79d8d79247de7bcb96f39616ea9510b56fa78"}) [ 1297.092856] Bluetooth: Invalid header checksum [ 1297.092860] Bluetooth: Invalid header checksum [ 1297.092920] Bluetooth: Invalid header checksum [ 1297.115489] Bluetooth: Invalid header checksum 20:13:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x1c8) [ 1297.201362] Bluetooth: Invalid header checksum [ 1297.201479] Bluetooth: Invalid header checksum [ 1297.211088] Bluetooth: Invalid header checksum [ 1297.223993] Bluetooth: Invalid header checksum [ 1297.226256] mkiss: ax0: crc mode is auto. 20:13:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x20c) [ 1297.311416] Bluetooth: Invalid header checksum [ 1297.316180] Bluetooth: Invalid header checksum [ 1297.316191] Bluetooth: Invalid header checksum [ 1297.334382] Bluetooth: Invalid header checksum [ 1297.352453] mkiss: ax0: crc mode is auto. 20:13:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1297.421234] Bluetooth: Invalid header checksum [ 1297.441681] Bluetooth: Invalid header checksum 20:13:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/113, 0x71}], 0x1, 0xa3, 0x9) [ 1297.531311] Bluetooth: Invalid header checksum [ 1297.551815] Bluetooth: Invalid header checksum 20:13:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x248) [ 1297.641204] Bluetooth: Invalid header checksum [ 1297.652488] Bluetooth: Invalid header checksum [ 1297.657471] Bluetooth: Invalid header checksum [ 1297.664412] Bluetooth: Invalid header checksum [ 1297.671931] Bluetooth: Invalid header checksum [ 1297.676818] Bluetooth: Invalid header checksum 20:13:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x28c) [ 1297.751444] Bluetooth: Invalid header checksum [ 1297.765522] Bluetooth: Invalid header checksum [ 1297.771417] Bluetooth: Invalid header checksum [ 1297.783979] Bluetooth: Too short H5 packet [ 1297.799952] Bluetooth: Invalid header checksum 20:13:52 executing program 2: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "bdb14b05611ed713", "74de40935b83190dd7d47ff06e285982", "4eea8171", "80332b1056919a05"}, 0x28) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) [ 1297.861331] Bluetooth: Invalid header checksum [ 1297.872361] Bluetooth: Invalid header checksum [ 1297.881946] Bluetooth: Invalid header checksum [ 1297.891967] Bluetooth: Invalid header checksum 20:13:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x300) 20:13:52 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1297.923600] IPv6: Can't replace route, no match found [ 1297.971499] Bluetooth: Invalid header checksum [ 1297.982242] Bluetooth: Invalid header checksum [ 1297.991998] Bluetooth: Invalid header checksum [ 1298.001460] Bluetooth: Invalid header checksum [ 1298.015249] mkiss: ax0: crc mode is auto. 20:13:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x32c) [ 1298.081473] Bluetooth: Invalid header checksum [ 1298.081745] IPv6: Can't replace route, no match found [ 1298.093312] Bluetooth: Invalid header checksum [ 1298.101850] Bluetooth: Invalid header checksum [ 1298.111095] Bluetooth: Invalid header checksum [ 1298.140671] mkiss: ax0: crc mode is auto. [ 1298.191572] Bluetooth: Invalid header checksum [ 1298.201572] Bluetooth: Invalid header checksum [ 1298.211427] Bluetooth: Invalid header checksum [ 1298.222364] Bluetooth: Invalid header checksum 20:13:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x39b) [ 1298.245090] audit: type=1804 audit(1625170432.857:948): pid=2512 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2752/bus" dev="sda1" ino=14140 res=1 20:13:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000100)={0x1, 0xbd, 0x9}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0xa34a, 0xb3a, 0x800, 0x3, 0xa, "78e279ed1c9eca83ed088155cb46972d26bd5c"}) [ 1298.302115] Bluetooth: Invalid header checksum [ 1298.311931] Bluetooth: Invalid header checksum [ 1298.321487] Bluetooth: Invalid header checksum [ 1298.335752] Bluetooth: Invalid header checksum 20:13:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x3e0) 20:13:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1298.411941] Bluetooth: Invalid header checksum [ 1298.431481] Bluetooth: Invalid header checksum [ 1298.437637] mkiss: ax0: crc mode is auto. [ 1298.521521] Bluetooth: Invalid header checksum [ 1298.541313] Bluetooth: Invalid header checksum [ 1298.548444] mkiss: ax0: crc mode is auto. 20:13:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x3fc) [ 1298.631632] Bluetooth: Invalid header checksum [ 1298.651747] Bluetooth: Invalid header checksum [ 1298.671716] Bluetooth: Invalid header checksum [ 1298.676383] Bluetooth: Invalid header checksum 20:13:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000040)={0xd0, 0x17, &(0x7f0000000100)="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"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) [ 1298.681841] Bluetooth: Invalid header checksum [ 1298.686623] Bluetooth: Invalid header checksum [ 1298.700711] Bluetooth: Invalid header checksum [ 1298.741302] Bluetooth: Invalid header checksum [ 1298.761449] Bluetooth: Invalid header checksum [ 1298.781152] Bluetooth: Invalid header checksum [ 1298.792310] Bluetooth: Invalid header checksum [ 1298.823336] mkiss: ax0: crc mode is auto. 20:13:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x600) [ 1298.861718] Bluetooth: Invalid header checksum [ 1298.872500] Bluetooth: Invalid header checksum [ 1298.891826] Bluetooth: Invalid header checksum [ 1298.901452] Bluetooth: Invalid header checksum [ 1298.961176] Bluetooth: Invalid header checksum [ 1298.981093] Bluetooth: Invalid header checksum 20:13:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x700) [ 1299.001481] Bluetooth: Invalid header checksum [ 1299.011248] Bluetooth: Invalid header checksum 20:13:53 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1299.085170] Bluetooth: Invalid header checksum [ 1299.094389] Bluetooth: Invalid header checksum [ 1299.111888] Bluetooth: Invalid header checksum [ 1299.121668] Bluetooth: Invalid header checksum [ 1299.163333] validate_nla: 19 callbacks suppressed [ 1299.163407] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1299.191308] Bluetooth: Invalid header checksum [ 1299.196567] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1299.205455] Bluetooth: Invalid header checksum [ 1299.221428] Bluetooth: Invalid header checksum [ 1299.232383] Bluetooth: Invalid header checksum 20:13:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xa00) [ 1299.301542] Bluetooth: Invalid header checksum [ 1299.312231] Bluetooth: Invalid header checksum [ 1299.317004] audit: type=1804 audit(1625170433.927:949): pid=2578 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2753/bus" dev="sda1" ino=14140 res=1 [ 1299.327032] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1299.342206] Bluetooth: Invalid header checksum [ 1299.349564] Bluetooth: Invalid header checksum [ 1299.411816] Bluetooth: Invalid header checksum 20:13:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1299.431968] Bluetooth: Invalid header checksum [ 1299.440233] netlink: 'syz-executor.1': attribute type 20 has an invalid length. 20:13:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xb00) [ 1299.526529] Bluetooth: Invalid header checksum [ 1299.534922] Bluetooth: Invalid header checksum [ 1299.631187] Bluetooth: Invalid header checksum [ 1299.655195] Bluetooth: Invalid header checksum [ 1299.666530] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1299.681672] Bluetooth: Invalid header checksum [ 1299.686490] Bluetooth: Invalid header checksum [ 1299.691415] Bluetooth: Invalid header checksum [ 1299.710200] Bluetooth: Invalid header checksum [ 1299.725697] Bluetooth: Invalid header checksum [ 1299.743652] Bluetooth: Invalid header checksum [ 1299.752407] Bluetooth: Invalid header checksum 20:13:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xc00) [ 1299.791650] Bluetooth: Invalid header checksum [ 1299.792842] Bluetooth: Invalid header checksum [ 1299.853863] Bluetooth: Invalid header checksum [ 1299.867706] Bluetooth: Invalid header checksum [ 1299.894974] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1299.903138] Bluetooth: Invalid header checksum [ 1299.903390] Bluetooth: Invalid header checksum [ 1299.952635] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1299.961369] Bluetooth: Invalid header checksum [ 1299.972627] Bluetooth: Invalid header checksum [ 1300.011422] Bluetooth: Invalid header checksum [ 1300.015910] Bluetooth: Invalid header checksum 20:13:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xc02) [ 1300.071384] Bluetooth: Invalid header checksum [ 1300.081629] Bluetooth: Invalid header checksum [ 1300.121428] Bluetooth: Invalid header checksum [ 1300.123973] Bluetooth: Invalid header checksum [ 1300.130716] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1300.173775] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1300.182001] Bluetooth: Invalid header checksum [ 1300.192864] Bluetooth: Invalid header checksum 20:13:54 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1300.231429] Bluetooth: Invalid header checksum [ 1300.236194] Bluetooth: Invalid header checksum 20:13:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xe00) [ 1300.291349] Bluetooth: Invalid header checksum [ 1300.301811] Bluetooth: Invalid header checksum [ 1300.341661] Bluetooth: Invalid header checksum [ 1300.346434] Bluetooth: Invalid header checksum [ 1300.352311] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1300.401424] Bluetooth: Invalid header checksum [ 1300.411946] Bluetooth: Invalid header checksum [ 1300.515937] audit: type=1804 audit(1625170435.127:950): pid=2621 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2754/bus" dev="sda1" ino=14030 res=1 [ 1300.533094] Bluetooth: Invalid header checksum [ 1300.541359] Bluetooth: Invalid header checksum [ 1300.641184] Bluetooth: Invalid header checksum [ 1300.646291] Bluetooth: Invalid header checksum [ 1300.748535] Bluetooth: Invalid header checksum [ 1300.753379] Bluetooth: Invalid header checksum [ 1300.859629] Bluetooth: Invalid header checksum [ 1300.865030] Bluetooth: Invalid header checksum [ 1300.961189] Bluetooth: Invalid header checksum [ 1300.972512] Bluetooth: Invalid header checksum [ 1301.073004] Bluetooth: Invalid header checksum [ 1301.085734] Bluetooth: Invalid header checksum [ 1301.173504] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.179135] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.191214] Bluetooth: Invalid header checksum [ 1301.191319] Bluetooth: Invalid header checksum [ 1301.303159] Bluetooth: Invalid header checksum [ 1301.307957] Bluetooth: Invalid header checksum [ 1301.411250] Bluetooth: Invalid header checksum [ 1301.415926] Bluetooth: Invalid header checksum [ 1301.523027] Bluetooth: Invalid header checksum [ 1301.527725] Bluetooth: Invalid header checksum [ 1301.633685] Bluetooth: Invalid header checksum [ 1301.638974] Bluetooth: Invalid header checksum 20:13:56 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x6a0000, 0x0) timerfd_gettime(r0, &(0x7f0000000140)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000180)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 20:13:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r1, 0x0, r3, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xf00) 20:13:56 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(0x0, 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1301.747518] Bluetooth: Invalid header checksum [ 1301.747949] Bluetooth: Invalid header checksum 20:13:56 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(0x0, 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1301.851484] Bluetooth: Invalid header checksum [ 1301.865699] Bluetooth: Invalid header checksum 20:13:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x1900) 20:13:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x2) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1) ioctl$TIOCSBRK(r0, 0x5427) 20:13:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x1cff) [ 1301.961251] Bluetooth: Invalid header checksum [ 1301.961255] Bluetooth: Invalid header checksum [ 1301.961294] Bluetooth: Invalid header checksum [ 1301.978913] Bluetooth: Invalid header checksum [ 1301.981256] Bluetooth: Invalid header checksum [ 1301.991267] Bluetooth: Invalid header checksum [ 1301.996088] Bluetooth: Invalid header checksum 20:13:56 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(0x0, 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1302.071446] Bluetooth: Invalid header checksum [ 1302.076233] Bluetooth: Invalid header checksum [ 1302.081759] Bluetooth: Invalid header checksum [ 1302.101175] Bluetooth: Invalid header checksum [ 1302.136864] mkiss: ax0: crc mode is auto. 20:13:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x2300) 20:13:56 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1302.181179] Bluetooth: Invalid header checksum [ 1302.186009] Bluetooth: Invalid header checksum [ 1302.191114] Bluetooth: Invalid header checksum [ 1302.208550] mkiss: ax0: crc mode is auto. [ 1302.224298] Bluetooth: Invalid header checksum [ 1302.291599] Bluetooth: Invalid header checksum [ 1302.296381] Bluetooth: Invalid header checksum [ 1302.303111] Bluetooth: Invalid header checksum [ 1302.331530] Bluetooth: Invalid header checksum 20:13:56 executing program 2: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='comm\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0xc0, &(0x7f0000000200)="e9c16c54ee124ba32bcc0a80cfba221649df914b412a87ac175deb765341430d8b91544fbdeda0181532bb9258d0acef37da8a807193", 0x36) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x22c443, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000240)=""/91, 0x5b}, {&(0x7f00000002c0)=""/144, 0x90}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000480)=""/132, 0x84}], 0x4, 0x0, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f00000001c0)={0x0, 0x40, 0x8, 0x1, 0x0, "0c12ca6d418df76d"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000040)={0x2000401, 0xd4, 0x7, 0x100, 0x2, "4817fe65172d141a4cb90e22b02d99a13d5eaf"}) [ 1302.353206] audit: type=1804 audit(1625170436.967:951): pid=2726 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2758/bus" dev="sda1" ino=14030 res=1 [ 1302.401252] Bluetooth: Invalid header checksum [ 1302.406015] Bluetooth: Invalid header checksum [ 1302.411937] Bluetooth: Invalid header checksum [ 1302.415645] IPv6: Can't replace route, no match found [ 1302.441748] Bluetooth: Invalid header checksum [ 1302.453400] IPv6: Can't replace route, no match found [ 1302.512741] Bluetooth: Invalid header checksum [ 1302.517481] Bluetooth: Invalid header checksum [ 1302.523282] Bluetooth: Invalid header checksum [ 1302.553118] Bluetooth: Invalid header checksum [ 1302.621249] Bluetooth: Invalid header checksum [ 1302.626007] Bluetooth: Invalid header checksum [ 1302.632127] Bluetooth: Invalid header checksum 20:13:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r1, 0x0, r3, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x2c03) 20:13:57 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x2) [ 1302.735066] Bluetooth: Invalid header checksum [ 1302.744707] Bluetooth: Invalid header checksum 20:13:57 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1302.811927] mkiss: ax0: crc mode is auto. [ 1302.823202] audit: type=1804 audit(1625170437.437:952): pid=2754 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2759/bus" dev="sda1" ino=14158 res=1 [ 1302.847762] Bluetooth: Invalid header checksum 20:13:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1302.862239] Bluetooth: Invalid header checksum 20:13:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x2f00) [ 1302.911173] mkiss: ax0: crc mode is auto. [ 1302.951891] Bluetooth: Invalid header checksum 20:13:57 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x0) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1302.973973] Bluetooth: Invalid header checksum [ 1302.978632] audit: type=1804 audit(1625170437.577:953): pid=2773 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2760/bus" dev="sda1" ino=14154 res=1 [ 1303.012281] Bluetooth: Invalid header checksum [ 1303.017109] Bluetooth: Invalid header checksum [ 1303.061526] Bluetooth: Invalid header checksum 20:13:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x444080, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1303.102386] audit: type=1804 audit(1625170437.717:954): pid=2785 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2761/bus" dev="sda1" ino=14158 res=1 [ 1303.137168] Bluetooth: Invalid header checksum 20:13:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x3b01) [ 1303.159473] Bluetooth: Invalid header checksum [ 1303.177691] Bluetooth: Invalid header checksum [ 1303.201412] Bluetooth: Invalid header checksum [ 1303.232063] Bluetooth: Invalid header checksum [ 1303.299906] Bluetooth: Invalid header checksum [ 1303.312205] Bluetooth: Invalid header checksum [ 1303.341236] Bluetooth: Invalid header checksum [ 1303.393189] Bluetooth: Invalid header checksum [ 1303.425066] Bluetooth: Invalid header checksum [ 1303.454028] Bluetooth: Invalid header checksum [ 1303.501313] Bluetooth: Invalid header checksum [ 1303.537162] Bluetooth: Invalid header checksum [ 1303.561388] Bluetooth: Invalid header checksum [ 1303.611083] Bluetooth: Invalid header checksum [ 1303.641176] Bluetooth: Invalid header checksum 20:13:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r1, 0x0, r3, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:58 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x0) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:13:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2d0083, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x4801) [ 1303.734812] Bluetooth: Invalid header checksum [ 1303.746707] audit: type=1804 audit(1625170438.357:955): pid=2822 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2762/bus" dev="sda1" ino=14433 res=1 [ 1303.771460] Bluetooth: Invalid header checksum 20:13:58 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x0) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1303.831641] Bluetooth: Invalid header checksum 20:13:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x3f) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x80000001, 0x5, 0x4, 0xbb44, 0x18, "31dd321e9b84f29f35c13222d7f6f3cdcab7d3"}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x3ff, 0x7f, 0x3, 0x0, 0x17, "540bf7292f0fd8e45c09ca62196bc2743e459f"}) ioctl$KDADDIO(r0, 0x4b34, 0x400) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000100)) 20:13:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x4802) [ 1303.881880] Bluetooth: Invalid header checksum [ 1303.886693] Bluetooth: Invalid header checksum [ 1303.894522] Bluetooth: Invalid header checksum [ 1303.899188] Bluetooth: Invalid header checksum [ 1303.912276] Bluetooth: Invalid header checksum [ 1303.913257] Bluetooth: Invalid header checksum [ 1303.941137] Bluetooth: Invalid header checksum [ 1303.947990] audit: type=1804 audit(1625170438.557:956): pid=2847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2763/bus" dev="sda1" ino=14202 res=1 [ 1303.991328] Bluetooth: Invalid header checksum [ 1303.996070] Bluetooth: Invalid header checksum [ 1304.014113] Bluetooth: Invalid header checksum 20:13:58 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(0xffffffffffffffff, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1304.051903] Bluetooth: Invalid header checksum [ 1304.101443] Bluetooth: Invalid header checksum [ 1304.101459] Bluetooth: Invalid header checksum [ 1304.121260] Bluetooth: Invalid header checksum 20:13:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x4900) [ 1304.161070] Bluetooth: Invalid header checksum [ 1304.177184] audit: type=1804 audit(1625170438.787:957): pid=2858 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2764/bus" dev="sda1" ino=14171 res=1 [ 1304.202581] validate_nla: 11 callbacks suppressed 20:13:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='net/raw\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) ioctl$TIOCSBRK(r2, 0x5427) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000040)=""/56, 0x38}, {&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000180)=""/112, 0x70}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000280)=""/89, 0x59}], 0x5, 0x20, 0x5) r3 = open(&(0x7f0000000380)='./file0\x00', 0x40000, 0x80) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1304.202590] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1304.219681] Bluetooth: Invalid header checksum [ 1304.220591] Bluetooth: Invalid header checksum [ 1304.233028] Bluetooth: Invalid header checksum [ 1304.276317] Bluetooth: Invalid header checksum 20:13:58 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(0xffffffffffffffff, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1304.308913] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1304.322426] Bluetooth: Invalid header checksum [ 1304.327286] Bluetooth: Invalid header checksum [ 1304.343184] Bluetooth: Invalid header checksum [ 1304.382494] Bluetooth: Invalid header checksum [ 1304.393220] mkiss: ax0: crc mode is auto. [ 1304.418849] IPv6: Can't replace route, no match found [ 1304.429032] audit: type=1804 audit(1625170439.037:958): pid=2873 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2765/bus" dev="sda1" ino=14175 res=1 [ 1304.464790] Bluetooth: Invalid header checksum [ 1304.469472] Bluetooth: Invalid header checksum [ 1304.474804] Bluetooth: Invalid header checksum [ 1304.491385] Bluetooth: Invalid header checksum [ 1304.565037] mkiss: ax0: crc mode is auto. [ 1304.565126] IPv6: Can't replace route, no match found [ 1304.581993] Bluetooth: Invalid header checksum [ 1304.583664] Bluetooth: Invalid header checksum [ 1304.602017] Bluetooth: Invalid header checksum 20:13:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x5200) [ 1304.691148] Bluetooth: Invalid header checksum 20:13:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:13:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x357f80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = dup3(r0, r0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000080)) 20:13:59 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(0xffffffffffffffff, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1304.711770] Bluetooth: Invalid header checksum [ 1304.723606] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1304.776428] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1304.801327] Bluetooth: Invalid header checksum [ 1304.820107] audit: type=1804 audit(1625170439.427:959): pid=2921 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2766/bus" dev="sda1" ino=14433 res=1 [ 1304.845651] Bluetooth: Invalid header checksum 20:13:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x5865) 20:13:59 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1304.941070] Bluetooth: Invalid header checksum [ 1304.941966] Bluetooth: Invalid header checksum [ 1304.950300] Bluetooth: Invalid header checksum [ 1304.958572] Bluetooth: Invalid header checksum 20:13:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x6000) [ 1305.025482] Bluetooth: Invalid header checksum [ 1305.030155] Bluetooth: Invalid header checksum [ 1305.061183] Bluetooth: Invalid header checksum [ 1305.100407] audit: type=1804 audit(1625170439.707:960): pid=2930 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2767/bus" dev="sda1" ino=14202 res=1 [ 1305.110717] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1305.144247] Bluetooth: Invalid header checksum 20:13:59 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000428bd97369d050000f7bca2c5607ac273d71e8358c7251f000096af002100610000000649aee64f4b4edb3904b0e00fc1c1f0a7f17d08a1ccdff0eb264d3a9c1df06b9c0000000000000000000000020000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r3 = open(&(0x7f0000000100)='./file0\x00', 0x4102, 0x0) preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) io_setup(0x2, &(0x7f0000000280)=0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f00000004c0)='net_prio.prioidx\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x333, 0x0, 0x0) r8 = openat$cgroup_ro(r2, &(0x7f0000000640)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r9, &(0x7f00000017c0), 0x333, 0x0, 0x0) r10 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) io_submit(r4, 0x9, &(0x7f0000001ac0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x101, 0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0xfff8, r5, &(0x7f0000000380)="f53e47b34838eee67f40609b1b79142fb5e2ecb21f5630faa9902524a721cf4fc505048be9df156b3b51a35bfa9044d5921fbe04e63d9328169ee70f194d9aca9d0a24d11cb1d33811ca0eb86559273e5a8ae845142fd22653f09f3233564d5a321d2b035f0f8a80a8ca547709e698a8ad679e87d24b7de6da86a5304cd325cb858e1120a0150377394d86cb46d8e7e31f0036962fb34b5551aaf0c243817286abb3fb56c330f5f7619ffca690e1793bf434e32264f0cabc1b3aff99a410ffe194069d2a44f9e912e52235791985efc7e6f01d5537df92", 0xd7, 0x1, 0x0, 0x7, r2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x9, r6, &(0x7f0000000500)="d149a7534195ce4bcfcdb2d771c917bf43f24f7486ce0bb41870cbc51845954bb89d86982a1e7c7c019658ae22a85d76eecd5a42fda0ad9bb8ca162f3522567719190d20d4742677624a92d01ebc18bd19e0f47bf934279c5deecf935283b2043486791a2d8d898beef5b96dab93514e0b5a29b77d5987e7aa", 0x79, 0xa1e, 0x0, 0x1, r7}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0xbdc6, r2, &(0x7f00000005c0)="3e48f496cfd24d9ea6abd6130e7979b0b25ce552fb89351888f7d5cf8e284c6043ef975ba2d9d0ca580dc5a8b481789ed840b42ceaa7da5adb980ddff44e214ee7afaa747256731eb9d8a50a29ff5a7b4e841237ed1baa044404bf604646faba3b516a", 0x63, 0x50, 0x0, 0x2, r8}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x93, r1, &(0x7f00000006c0)="69c073d111ceac4bc8d6c4fbbd9989787cc299e2a45aafd679c734efb8143522eb30f761e2b37847d879e0c2bcba9e00a520a125d2bbbad417eb5eab29a119b291e0f245370ee3", 0x47, 0x5, 0x0, 0x1, r9}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x7, 0x5, r3, &(0x7f0000000780)="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", 0x1000, 0xfff, 0x0, 0x3}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x3, 0xfffa, r3, &(0x7f00000017c0)="a779375ee6d0632274d03ca6198ea36df4eb7e9399407ee256435103c6b429de90b15a2960ab6b891497248d63df21465e3aa15702c07f12aeb946b324642827d6a8153af5006f83ba8df5399a37e18da4f4366875d6", 0x56, 0x4f, 0x0, 0x3, r3}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0xe, 0xfff9, r2, &(0x7f0000001880)="4bfb45de1c575b0cf0ace4a1567ff38399eee97e520de5f75c98c05e122a30fda5fc91babab6982d754a8f8e15e16b606fec08f32837e13d8748440fddcb5749f06cdac78dc0748b5144a5c82e08f491eb23d56c6df8e6dc3514d36e71c5fe5fb92a2e5950102a2995d84e38c8b55e5a2ad239b831d5c4f770cd6a07831967a9c2b34165e2cac61f87b9126e212b012e64dde0a90bf3da6a6c3c870a8a6d7936ea9bd69d1c7ee39514b2dcad", 0xac, 0x0, 0x0, 0x3, r3}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x3, 0x6, r3, &(0x7f0000001980)="ebf4ca7f23b1d0abc1a8639b519b7fac47e680ff1c6cb9391e69667415388de5ce616e6201c6f1fd972155db7883ae7bfaa6a93764f155678b9cd8a5f2de3e8cc65b58cd6e4ebbbcc05a148fbecd264ecc5c8c72b6fd0c645fbc4aaef5adc9a0c06f02cea1a70b483f8c5f6f8a06f992c83184b01cb7a8e840edbe0c3d15b34bda4792fecc7eff22715f806403b16802d149fa0ae318b77bd7f4476cf2980687ec2f87b19b7379d2b122ca73490fc4bc037292e56330cb07b85b8e1e7f28afd4584f5bda3ca06843130ff0e53e79b67aab61e9c12e4bb63a1858000818", 0xdd, 0x0, 0x0, 0x0, r3}]) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000040)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 20:13:59 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1305.149210] Bluetooth: Invalid header checksum [ 1305.175580] Bluetooth: Invalid header checksum [ 1305.227137] mkiss: ax0: crc mode is auto. [ 1305.241124] Bluetooth: Invalid header checksum [ 1305.246637] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1305.258821] Bluetooth: Invalid header checksum 20:13:59 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1305.281109] Bluetooth: Invalid header checksum [ 1305.300375] IPv6: Can't replace route, no match found 20:14:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x6558) [ 1305.354909] Bluetooth: Invalid header checksum [ 1305.361798] Bluetooth: Invalid header checksum [ 1305.381942] mkiss: ax0: crc mode is auto. [ 1305.391166] Bluetooth: Invalid header checksum [ 1305.413943] IPv6: Can't replace route, no match found [ 1305.462981] Bluetooth: Invalid header checksum [ 1305.471117] Bluetooth: Invalid header checksum [ 1305.478959] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1305.502783] Bluetooth: Invalid header checksum 20:14:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:00 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1305.572027] Bluetooth: Invalid header checksum [ 1305.582390] Bluetooth: Invalid header checksum [ 1305.587446] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1305.611158] Bluetooth: Invalid header checksum 20:14:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:00 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) [ 1305.691086] Bluetooth: Invalid header checksum [ 1305.721140] Bluetooth: Invalid header checksum 20:14:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x80fe) [ 1305.801467] Bluetooth: Invalid header checksum [ 1305.831599] Bluetooth: Invalid header checksum 20:14:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0140, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) [ 1305.882848] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1305.911265] Bluetooth: Invalid header checksum [ 1305.922459] Bluetooth: Invalid header checksum [ 1305.927365] Bluetooth: Invalid header checksum [ 1305.941668] Bluetooth: Invalid header checksum [ 1305.950883] netlink: 'syz-executor.1': attribute type 20 has an invalid length. 20:14:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x8100) [ 1306.022123] Bluetooth: Invalid header checksum [ 1306.032552] Bluetooth: Invalid header checksum [ 1306.052005] Bluetooth: Invalid header checksum [ 1306.131242] Bluetooth: Invalid header checksum [ 1306.142654] Bluetooth: Invalid header checksum [ 1306.161328] Bluetooth: Invalid header checksum 20:14:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x8c02) [ 1306.251424] Bluetooth: Invalid header checksum [ 1306.253604] Bluetooth: Invalid header checksum [ 1306.271214] Bluetooth: Invalid header checksum 20:14:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x8d01) [ 1306.361437] Bluetooth: Invalid header checksum [ 1306.366225] Bluetooth: Invalid header checksum [ 1306.383693] Bluetooth: Invalid header checksum 20:14:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x9b03) [ 1306.471284] Bluetooth: Invalid header checksum [ 1306.471834] Bluetooth: Invalid header checksum [ 1306.491996] Bluetooth: Invalid header checksum 20:14:01 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:14:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xa100) [ 1306.581147] Bluetooth: Invalid header checksum [ 1306.586007] Bluetooth: Invalid header checksum [ 1306.601303] Bluetooth: Invalid header checksum [ 1306.691507] Bluetooth: Invalid header checksum 20:14:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1306.715431] Bluetooth: Invalid header checksum 20:14:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xac01) [ 1306.801567] Bluetooth: Invalid header checksum [ 1306.821253] Bluetooth: Invalid header checksum [ 1306.891781] Bluetooth: Invalid header checksum [ 1306.896625] Bluetooth: Invalid header checksum [ 1306.911182] Bluetooth: Invalid header checksum 20:14:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xae01) [ 1306.933170] Bluetooth: Invalid header checksum 20:14:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xc0fe) [ 1307.001505] Bluetooth: Invalid header checksum [ 1307.021121] Bluetooth: Invalid header checksum [ 1307.041340] Bluetooth: Invalid header checksum [ 1307.115722] Bluetooth: Invalid header checksum [ 1307.132371] Bluetooth: Invalid header checksum 20:14:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xc801) [ 1307.156506] Bluetooth: Invalid header checksum [ 1307.223929] Bluetooth: Invalid header checksum [ 1307.243586] Bluetooth: Invalid header checksum [ 1307.262102] Bluetooth: Invalid header checksum 20:14:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = fork() r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x4}, [{}], {0x4, 0x4}, [{0x8, 0x4, r3}, {0x8, 0x0, r3}, {0x8, 0x1}], {0x10, 0x1}}, 0x44, 0x1) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) r5 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000009cc0)={&(0x7f0000009c80)=[0x51eb, 0x2, 0x1000, 0x80, 0x2ab, 0x6, 0x80, 0xa, 0xc39c, 0x0], 0xa, 0x0, 0x0, 0xffffffffffffffff}) r7 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) r8 = inotify_init1(0x800) r9 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) r10 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000000180)="1501a5c97c60e8874f1441fc83894e6dddaa9385748fca19b307a8e494197698c479be44f01cd81e92569f26ec32c8c0aa75e9daa74b5c77809665d9bf77ac43e1abbe0ec914597c7c599ae6a8474b2269fc8999211de09d931a5ade6a4606dd3ea1c0b32c0619", 0x67}, {&(0x7f0000000200)="8b65166fba1f5cf0933b1bf0b7fd5278411d7defd3de06fe7f09149dfae78003ac7c1a361b8849e7d710dbe83adfdd9dac61e91c1529d6da11a9a15c8a9781ca7c35bac6af0281a6ab811fe4aa18fa5c9302089c417b8d2f8928094b5261f01bb2ccf2052c87c33e5f1df0ef166a590494e9ac2f74a25be714fdbcda9a334526266539811acd74faa2ff367eeca7401b7d4d3211f49e9511ed73130351b4a7cd08d8ffc8dabefd87039088fbba496af578ce60e9e27b038c861259d8956579658eb60c1853de2b629019fdf452da018fb847f37c8e31091281b1808a9a871d9cfb45dcd78270a40631", 0xe9}, {&(0x7f0000000300)="593b32938b9342110b5249a33a1b5715aed550e5f12a46433e3c6f0d9ad05f5e1e0606fd1040c91727d8401175d3029f50661526ce5365532b13441b7e3f3df6353472a3f91e6fa50fcf3d508340a26ca88a186853ea9b7169f640f900a3f73f57544954d693df0bdc", 0x69}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="12d2ddc3cbae3d46c2ef8d00e970fddf63b32a017c2d4e9ec73d1a13d7c9d6e37348c2aff064e6c64feb1a0f2babd503ffdd62bac42473cf7877a29efd62378a596aa8d86745456067b38e2a92edb544b4eb127718e07da4e34a063506b929c73c9d25d37a8c57edd011b0e81dc44b914a770bf541b3b82f09eb58592819768107d6e36ded2d4762fe98c0cfae8f8194dc4aea1d06", 0x95}, {&(0x7f0000001440)="a1805cd4471212acfa68f421e4ae42c50a882f3453b1e70b49e565c3d0d1240a9657457fd101310ac3cb4a949606a8c55a68a926d9ae50655bed2eef17c9b3041b3ec9dd08c6ac802a7eeea8e8f9a356", 0x50}, {&(0x7f00000014c0)="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", 0x1000}], 0x7, 0x0, 0x0, 0x480d4}, {&(0x7f0000002540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000025c0)="5fcb9c06d8582a557e5270c9a9a49202aaec6d9e71193dccbb4ea17614cc89f2fc159565553fce3a1c4474945a27c5e9a87b6ee2fd7d45d154a8bbfafd5c917a98d9f3d89d834e0733960264dba3a3bdd337b4cadf82052862192e0bf22ff3cee29b4c0c1033196c0308fd80cbc93d12964ba039ee6199893b9d4026d5f9d4a5375b6de3fe3d24", 0x87}], 0x1, &(0x7f0000003900)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}], 0x80, 0x4004}, {&(0x7f0000003980)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004cc0)=[{&(0x7f0000003a00)="6a612dd91021440633a81acb8786a1", 0xf}, {&(0x7f0000003a40)="146488a8287d7af8ab894c58eadf68687427af5a2ee90e427c8a7c8a48bfb7e3f9bf19f20971147ed77c1009b15c6f268760ff0e41c86aaf189da778e7327b5984dcf65c81f33c53a678e9c2a89bed028ccea9666d28b5ba2e85594e612dd9e327d09c1717eaa16eca7477ca46d418e35ddd87008be38d1c3e009fcdaecda1fdfac13d7d62149d4fbb4b72c26f8622a49b84bc7d06fa3913386e4dd064b42bc0780f5194532db203cd089838a8b58a16", 0xb0}, {&(0x7f0000003b00)="f757c6c663a64cacea4434994b0ca37d53d9ea819eb1fb9ae4ddb68c1747d6610a3a9c28eecf402de14d87", 0x2b}, {&(0x7f0000003b40)="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", 0x1000}, {&(0x7f0000004b40)="8d9ac0d7703777b1cc85e35e67546dd49dc0eadda65d74ce0b661c356b89e45362a66bf16ac167995f8791638f1ddb951649de909752683a0944d6d435f833563a306fc315b00ecd7c528da44174ee9c86d7b96cccd8579c6b89adec74885183326a095249f459dbfa0de1e1dc1380b1099fa1374162fa8584fe7ba494efbc91af524888e088ce06a62b225c2e135581917c82afa4659b9b4d8668741b7b6b63cf3c7fe069fd3b120615957122aec70105267693ff9d23656bff4bc7f38fb7fc37bbc7008d91bf3a4e2f6370f72e9e44194b45ff4bf82615bd8d2ae59ef7bbf1980f5a86a90c456fec7123", 0xeb}, {&(0x7f0000004c40)="38878e12b737ca1f741bcd1c32accd59ebced090c4d2e59ab9a53d5d515ca5afcabc6f97685be7b28a79548e6d3255ef86c1d85f99a06c3469ff04cf274a2dfece027da9192cbaadc0d81e2bd95f9ad9866afb3c0dda7e59add6886109ec6c51b1b04c0bcece5bf649d3e1335f991f3609c54ad71681602baf1e5b8f", 0x7c}], 0x6, &(0x7f0000004d40)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30, 0x4000000}, {&(0x7f0000004d80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000006280)=[{&(0x7f0000004e00)="712e884fec8427a13639d7c1e72b188a82468c22e8cf84629f1d1bbf20621cfcdf4bff969a7bfe6c5a4e788031db8ccc069862740af7468d4f151662ab6a4b340fa016db42d99c979ddb4ce39cb87f297e250137ec97d41b3911926c16266fc3eba7f3733d2b18df5746e0b8000edfd6c39dab25163acc9a78f937ddd8a2adbb813bb75220ead492e197c8fe4bc2fd08c8b2d6ad82f7e9630cf32178f8ffcac553507bd51a89ce03e614e617d6e06c85fcd45efa6e6f755735184d3d", 0xbc}, {&(0x7f0000004ec0)="7b5cc91e2efe1d49098fb0c35fdd1b1b4d55a19d5e710d91b84db9fdb1610a5b189c4ac3fde5fbce1e29c0af0d4e1f027019e8f47d6cb002bb46a96de0bc10d0a26365c8b3c6175ae9827974a3c22874fc75896ff4d45552276d4cd852b1d62b7122309644b7e7eabe2fcb30ef08929127a39cd6484cf5e74f9d165d7f0fccf469075d5b22f5089c836de14efeb270833d49372f19a414478fb5e2e1a2b3a13ea3f7f74fef9017147933749a0e62ac8d794d588a", 0xb4}, {0xffffffffffffffff}, {&(0x7f0000004f80)="5e298dcbc5bc2f641f9288cabd0d3daf93b2c28b5ea29ae04125293f52bfd9aaf7919292d306c0a5b5ab9067c3957d4d529573e1aca0db3758ec172005f9bc8b95f2f96a1bf86f44bf636347e8603a92d236d8128a11e85fa1849df04e9d11cee77f07617af18cb16d7b74b8e765aa0deb8c3ec59d645252c59b9974578e5fe48e00b50941058501b73b90eec2b8a7fbd90c4b417079490f0a6faab9d00c2bb4ab90cec6bcd6c5a8c05ad128daa1fe65f89845", 0xb3}, {&(0x7f0000005040)="8b272542b3805cda77d533539bedc3d75ddc42d51feb8d0e81acb78dd8cfc814eb7f7bcc77c6d6066b202fa66a9eb0362cf46cd1871c9eccb67ec98ca3c9cdcb2bc0e9831938be157ab3964f34ba707ea86cc54def242ca7a28301d6aabfa6518936fd810793c203", 0x68}, {&(0x7f00000050c0)="a9156ef6aad6a98158006c18ee56778544752f4a52303ecab7e37cff97b0b75ee50289081b63c6de4b60544c1ed914d175abfa79facf33e26a897a82b4fbb28c0a13b1b437cd699a58d6beda2230f265b07e532377fa55644429f7afd0c8b7010d0436c5672aa6a34070b3fe269245f874188be9ae8b81d61635fe5e3810dd142749d2fb24f5a6d9289ea9d71915ba656ef0abe1d8241a4a5db942356b5a4b1ff54aa752af802772e840987b2af8a096e360e90cc64776c537528b9c90c9c755256e94e0", 0xc4}, {&(0x7f00000051c0)="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", 0x1000}, {&(0x7f00000061c0)="9add36b25f78c195027b579e038e8cc72cd64b5f738cacdeb0233c5b76eef44b664624f5b7cb13c08518f730ca7e753c47edef76abed07c13c0ed148623e851fc9198459daa885b7d746a37b89f97dc32f2e7293b5d4cf33f0c68b7fd4937ba08c7a44c4c05161befd34e506e8e3e9fb5bb46fa959a33ffac9ce5a45b39f60a42bddbf2bb7a008c45e8cdf20a2bb7b95703054f3b16851a067d47ac1659c", 0x9e}], 0x8, &(0x7f0000006300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0x40, 0x20008015}, {&(0x7f0000006340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000063c0), 0x0, &(0x7f0000009100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r0, r0, r0]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158, 0x81}, {&(0x7f0000009280)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000009740)=[{&(0x7f0000009300)='M=', 0x2}, {&(0x7f0000002680)="27c8035e7917aa77a1ce635911a9cdd578e18bf79532d922f494d2665f1ebfda0440b6a90c24f23155eb6aa6e86bcf4efaea55ba778fa59a453672ffb2d5d80ce9a7b220e2555362ed6c12370fd0da4de567cfc6ef2cf633a709d6247b98cea821df161b0915125774c32da484d0ddaf192d88fd08fbe18dca93a9", 0x7b}, {&(0x7f00000093c0)="968f13533826f4c13e", 0x9}, {&(0x7f0000009400)="0ae878edc71792f2568934e6b76f244058c8132b8ac45816bada6935aca2780892d44a32b7fe0578b50e36504324ad0b43cc22a949fc6500eb7b0fd6894beb4de2e145b316e8bc2f78be188ac7bfc6b6169a21fe20e70c42b074fa2cff86e02ef769d03f79cc1d0f65e47dc1b852ec30d8", 0x71}, {&(0x7f0000009480)="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", 0xff}, {&(0x7f0000009580)="a95a58f6eae731ea81c27dba586bda3b1ea6937c7420c5a96f", 0x19}, {&(0x7f00000095c0)="79a1f7199d80fd0f5fc2c0c2b57f68", 0xf}, {&(0x7f0000009600)="a41151f8924baee2864736899ac9a35e00927a8e2dd2e55b01fe42c7b5", 0x1d}, {&(0x7f0000009640)="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", 0xfe}], 0x9, &(0x7f0000009a40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x50, 0x20040000}, {&(0x7f0000009ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000009c40)=[{&(0x7f0000009b40)="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", 0xfc}], 0x1, &(0x7f0000009d00)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r3}}}, @rights={{0x24, 0x1, 0x1, [r4, r5, r0, r6, r7]}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r8, r9, r0, r0, r0, r10, r0, r0]}}], 0xd8, 0x8000}, {&(0x7f0000009e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000009fc0)=[{&(0x7f0000009e80)="14bad6045e5e72ff309be24065c7f8b954240a8c4102fb8cf6ed316b49dbcf3a7788", 0x22}, {&(0x7f0000009ec0)="4334e45b27d8fc2be64f87e31d6e71118e57cc05a7ae61f10695b10c2e3d73dc740a9fe494196d6d961e9c02e541984dd3b03c6dd290be938956f86e51b933a64880652011f3650f927c01ceedca97a368ebc40a3ccf193f48a51ebb8a6c1fbb126aef3f2fd49d67a970cb26d017435c36a79f023283", 0x76}, {&(0x7f0000009f40)="b02e6c7cdf7504eaa54b37f499a3d7fb0df2402e50f99d33f85c9f9fd5eac1b9ddb73b34fa0b3aaba6da9fc21d6cbf595ef004d9932586fc0058b9b97bbabe528b773fe541ead1f2811bf0af", 0x4c}], 0x3, 0x0, 0x0, 0x20004041}], 0x8, 0x40000000) 20:14:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xe003) [ 1307.341347] Bluetooth: Invalid header checksum [ 1307.353198] Bluetooth: Invalid header checksum [ 1307.371273] Bluetooth: Invalid header checksum 20:14:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:02 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:14:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xe300) [ 1307.439404] mkiss: ax0: crc mode is auto. [ 1307.444505] Bluetooth: Invalid header checksum [ 1307.463459] Bluetooth: Invalid header checksum [ 1307.482316] Bluetooth: Invalid header checksum [ 1307.509932] IPv6: Can't replace route, no match found [ 1307.536038] IPv6: Can't replace route, no match found [ 1307.554420] Bluetooth: Invalid header checksum [ 1307.567769] IPv6: Can't replace route, no match found [ 1307.581966] Bluetooth: Invalid header checksum [ 1307.592185] Bluetooth: Invalid header checksum [ 1307.595216] IPv6: Can't replace route, no match found [ 1307.621021] IPv6: Can't replace route, no match found [ 1307.662743] mkiss: ax1: crc mode is auto. 20:14:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xf000) 20:14:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1307.703767] Bluetooth: Invalid header checksum [ 1307.708459] Bluetooth: Invalid header checksum [ 1307.750614] IPv6: Can't replace route, no match found [ 1307.776557] IPv6: Can't replace route, no match found [ 1307.782580] IPv6: Can't replace route, no match found [ 1307.788566] IPv6: Can't replace route, no match found [ 1307.811195] Bluetooth: Invalid header checksum [ 1307.816454] Bluetooth: Invalid header checksum [ 1307.827679] IPv6: Can't replace route, no match found [ 1307.845254] kauditd_printk_skb: 4 callbacks suppressed [ 1307.845268] audit: type=1804 audit(1625170442.457:965): pid=3116 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2772/bus" dev="sda1" ino=14187 res=1 20:14:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xfc00) [ 1307.911231] Bluetooth: Invalid header checksum [ 1307.915977] Bluetooth: Invalid header checksum [ 1307.921245] Bluetooth: Invalid header checksum [ 1307.928081] Bluetooth: Invalid header checksum 20:14:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x1, 0x6, 0x2, 0x101, 0xa, "5d2afea839c8ac6238f8a3bd9ff2e0734b9a3f"}) r2 = syz_open_dev$media(&(0x7f0000000140), 0x5, 0x4000) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000180)={{r1}, 0x0, 0x0, @unused=[0x400, 0x1000, 0x4, 0x10001], @subvolid=0xffff}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000001200)={0x1, 0x10000}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xc) r3 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000001180), &(0x7f00000011c0), 0x2, 0x2) [ 1308.021271] Bluetooth: Invalid header checksum [ 1308.031512] Bluetooth: Invalid header checksum [ 1308.036358] Bluetooth: Invalid header checksum [ 1308.067508] mkiss: ax2: crc mode is auto. 20:14:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xfc03) [ 1308.132454] Bluetooth: Invalid header checksum [ 1308.137882] IPv6: Can't replace route, no match found [ 1308.144615] Bluetooth: Invalid header checksum [ 1308.149722] Bluetooth: Invalid header checksum [ 1308.228613] mkiss: ax2: crc mode is auto. [ 1308.241285] Bluetooth: Invalid header checksum [ 1308.251466] Bluetooth: Invalid header checksum [ 1308.253062] Bluetooth: Invalid header checksum 20:14:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xfe80) [ 1308.293658] IPv6: Can't replace route, no match found [ 1308.351519] Bluetooth: Invalid header checksum 20:14:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1bf402, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1308.372398] Bluetooth: Invalid header checksum [ 1308.377241] Bluetooth: Invalid header checksum 20:14:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xfec0) [ 1308.461165] Bluetooth: Invalid header checksum [ 1308.472283] Bluetooth: Invalid header checksum [ 1308.481968] Bluetooth: Invalid header checksum [ 1308.571731] Bluetooth: Invalid header checksum [ 1308.582236] Bluetooth: Invalid header checksum [ 1308.591990] Bluetooth: Invalid header checksum 20:14:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$VT_RELDISP(r0, 0x5605) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:03 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:14:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xff00) 20:14:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1308.694304] Bluetooth: Invalid header checksum [ 1308.701260] Bluetooth: Invalid header checksum [ 1308.801246] Bluetooth: Invalid header checksum [ 1308.811941] Bluetooth: Invalid header checksum [ 1308.818500] mkiss: ax2: crc mode is auto. 20:14:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xff1c) [ 1308.877162] mkiss: ax2: crc mode is auto. [ 1308.901884] Bluetooth: Invalid header checksum [ 1308.911403] Bluetooth: Invalid header checksum [ 1308.911454] Bluetooth: Invalid header checksum [ 1308.923691] Bluetooth: Invalid header checksum [ 1308.995169] audit: type=1804 audit(1625170443.607:966): pid=3219 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2773/bus" dev="sda1" ino=14219 res=1 [ 1309.022272] Bluetooth: Invalid header checksum [ 1309.026984] Bluetooth: Invalid header checksum 20:14:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x34000) 20:14:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x8, 0x1000) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/130, 0x82}, {&(0x7f00000001c0)=""/236, 0xec}, {&(0x7f00000002c0)=""/87, 0x57}, {&(0x7f0000000340)=""/161, 0xa1}, {&(0x7f0000000440)=""/93, 0x5d}, {&(0x7f00000004c0)=""/148, 0x94}], 0x6, 0x8000, 0x101) [ 1309.041166] Bluetooth: Invalid header checksum [ 1309.131096] Bluetooth: Invalid header checksum [ 1309.136073] Bluetooth: Invalid header checksum [ 1309.152540] Bluetooth: Invalid header checksum 20:14:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x400300) [ 1309.182153] mkiss: ax2: crc mode is auto. [ 1309.241547] Bluetooth: Invalid header checksum [ 1309.243550] validate_nla: 22 callbacks suppressed [ 1309.243559] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1309.246227] Bluetooth: Invalid header checksum [ 1309.264236] Bluetooth: Invalid header checksum 20:14:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1309.309528] mkiss: ax2: crc mode is auto. [ 1309.322815] netlink: 'syz-executor.1': attribute type 20 has an invalid length. 20:14:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xf0ffff) [ 1309.351224] Bluetooth: Invalid header checksum [ 1309.351416] Bluetooth: Invalid header checksum [ 1309.371343] Bluetooth: Invalid header checksum 20:14:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1309.461186] Bluetooth: Invalid header checksum [ 1309.464120] Bluetooth: Invalid header checksum [ 1309.482275] Bluetooth: Invalid header checksum 20:14:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x1000000) [ 1309.572607] Bluetooth: Invalid header checksum [ 1309.572612] Bluetooth: Invalid header checksum [ 1309.593750] Bluetooth: Invalid header checksum [ 1309.681134] Bluetooth: Invalid header checksum 20:14:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1309.703298] Bluetooth: Invalid header checksum [ 1309.761565] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1309.791214] Bluetooth: Invalid header checksum [ 1309.811251] Bluetooth: Invalid header checksum 20:14:04 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1309.901169] Bluetooth: Invalid header checksum [ 1309.921394] Bluetooth: Invalid header checksum 20:14:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x2000000) [ 1309.944742] Bluetooth: Invalid header checksum [ 1309.949647] Bluetooth: Invalid header checksum [ 1310.011448] Bluetooth: Invalid header checksum [ 1310.041319] Bluetooth: Invalid header checksum [ 1310.052840] Bluetooth: Invalid header checksum [ 1310.063076] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1310.112812] audit: type=1804 audit(1625170444.727:967): pid=3362 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2774/bus" dev="sda1" ino=14207 res=1 [ 1310.138311] Bluetooth: Invalid header checksum [ 1310.153628] Bluetooth: Invalid header checksum [ 1310.163950] Bluetooth: Invalid header checksum 20:14:04 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r1, 0x0, r3, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) [ 1310.241153] Bluetooth: Invalid header checksum 20:14:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x3000000) [ 1310.261528] Bluetooth: Invalid header checksum [ 1310.273374] Bluetooth: Invalid header checksum [ 1310.349971] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1310.352252] Bluetooth: Invalid header checksum [ 1310.371568] Bluetooth: Invalid header checksum [ 1310.381755] Bluetooth: Invalid header checksum [ 1310.405052] mkiss: ax2: crc mode is auto. [ 1310.463212] Bluetooth: Invalid header checksum [ 1310.468070] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1310.491534] Bluetooth: Invalid header checksum [ 1310.493101] Bluetooth: Invalid header checksum [ 1310.571102] Bluetooth: Invalid header checksum 20:14:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x4000000) [ 1310.601523] Bluetooth: Invalid header checksum [ 1310.606642] Bluetooth: Invalid header checksum [ 1310.700748] Bluetooth: Invalid header checksum [ 1310.714740] Bluetooth: Invalid header checksum 20:14:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1310.749735] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1310.792291] Bluetooth: Invalid header checksum [ 1310.822042] Bluetooth: Invalid header checksum 20:14:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x6000000) [ 1310.905737] Bluetooth: Invalid header checksum [ 1310.931880] Bluetooth: Invalid header checksum [ 1310.963640] Bluetooth: Invalid header checksum [ 1310.968464] Bluetooth: Invalid header checksum [ 1311.012010] Bluetooth: Invalid header checksum [ 1311.014858] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1311.041301] Bluetooth: Invalid header checksum 20:14:05 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1311.074506] Bluetooth: Invalid header checksum [ 1311.122077] Bluetooth: Invalid header checksum 20:14:05 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r1, 0x0, r3, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) [ 1311.151266] Bluetooth: Invalid header checksum [ 1311.183728] Bluetooth: Invalid header checksum [ 1311.231215] Bluetooth: Invalid header checksum [ 1311.261633] Bluetooth: Invalid header checksum [ 1311.297231] Bluetooth: Invalid header checksum [ 1311.341254] Bluetooth: Invalid header checksum [ 1311.381441] Bluetooth: Invalid header checksum [ 1311.402730] Bluetooth: Invalid header checksum [ 1311.451170] Bluetooth: Invalid header checksum [ 1311.496479] Bluetooth: Invalid header checksum [ 1311.514828] Bluetooth: Invalid header checksum [ 1311.561152] Bluetooth: Invalid header checksum [ 1311.604730] Bluetooth: Invalid header checksum [ 1311.622327] Bluetooth: Invalid header checksum [ 1311.671607] Bluetooth: Invalid header checksum [ 1311.707828] audit: type=1804 audit(1625170446.317:968): pid=3715 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2775/bus" dev="sda1" ino=14220 res=1 [ 1311.740973] Bluetooth: Invalid header checksum [ 1311.781155] Bluetooth: Invalid header checksum [ 1311.841203] Bluetooth: Invalid header checksum 20:14:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xf5) 20:14:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x7000000) [ 1311.891782] Bluetooth: Invalid header checksum 20:14:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1311.951090] Bluetooth: Invalid header checksum [ 1312.001229] Bluetooth: Invalid header checksum [ 1312.011543] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1312.061483] Bluetooth: Invalid header checksum [ 1312.088414] mkiss: ax2: crc mode is auto. [ 1312.111159] Bluetooth: Invalid header checksum [ 1312.121056] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1312.132006] Bluetooth: Invalid header checksum [ 1312.138409] Bluetooth: Invalid header checksum [ 1312.151596] Bluetooth: Invalid header checksum [ 1312.182536] Bluetooth: Invalid header checksum 20:14:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x8000000) [ 1312.221216] Bluetooth: Invalid header checksum [ 1312.230539] mkiss: ax2: crc mode is auto. [ 1312.241942] Bluetooth: Invalid header checksum [ 1312.304598] Bluetooth: Invalid header checksum 20:14:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1312.336180] Bluetooth: Invalid header checksum [ 1312.351139] Bluetooth: Invalid header checksum 20:14:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xa000000) [ 1312.401210] Bluetooth: Invalid header checksum [ 1312.441199] Bluetooth: Invalid header checksum [ 1312.454606] mkiss: ax2: crc mode is auto. [ 1312.468145] Bluetooth: Invalid header checksum [ 1312.511451] Bluetooth: Invalid header checksum 20:14:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xb000000) 20:14:07 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:14:07 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r1, 0x0, r3, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) [ 1312.547601] mkiss: ax2: crc mode is auto. [ 1312.552421] Bluetooth: Invalid header checksum [ 1312.572708] Bluetooth: Invalid header checksum [ 1312.626414] Bluetooth: Invalid header checksum [ 1312.661716] Bluetooth: Invalid header checksum [ 1312.683050] Bluetooth: Invalid header checksum 20:14:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000002280)=0x7f) r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="c6e339512f186854e2eb655cdce5fb3763d216dd64bfafb35baf67bb0af5eee9a9313daa8a2df8d05f1e94ff5e6512423f12a5fdc09121b1ee1357f5f5477aa7daff59447a98dfab7501c2296d07de68533ce6ae290686c5b02e1207f66ca28d819d27871236ee743e9c9e4c6f96aeea00ee5a9194ff688dd4ff986722119ee7c55ab17e1e05ee526113bb66793752546db090f6f5aca92976452ade5737a7fe107fea393cf5df917eb9cd9c9f6066d2d37b2e72263004afaa99dded1f4e6d", 0xbf}, {&(0x7f00000001c0)="12963a624aadd14792b451b49600cd689b759506a32f9a811eb6af9039f0c3c3cc7b5068ed5c97c4c489bdef94ad4a790913467a45aea1e2933e9b9144f0cbf4615e6fdb19a4df2bf0b5a635e4c1a180fba6235671efd8d898ab9582b4231b9175b03841810cc6f97898f9f73c88431172f0ce7f36c7d65ce570ca477d76d5c153e688", 0x83}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="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", 0x1000}], 0x4, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) 20:14:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xc000000) [ 1312.731293] Bluetooth: Invalid header checksum [ 1312.772191] Bluetooth: Invalid header checksum [ 1312.784760] audit: type=1804 audit(1625170447.397:969): pid=3832 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2776/bus" dev="sda1" ino=14002 res=1 20:14:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1312.841171] Bluetooth: Invalid header checksum [ 1312.881490] Bluetooth: Invalid header checksum [ 1312.908865] mkiss: ax2: crc mode is auto. 20:14:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xc020000) [ 1312.951348] Bluetooth: Invalid header checksum [ 1312.966698] IPv6: Can't replace route, no match found [ 1312.991108] Bluetooth: Invalid header checksum [ 1313.052669] mkiss: ax2: crc mode is auto. [ 1313.061424] Bluetooth: Invalid header checksum 20:14:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xe000000) [ 1313.101348] Bluetooth: Invalid header checksum [ 1313.171675] Bluetooth: Invalid header checksum 20:14:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x52902, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x2, 0x3, 0x8, 0x5a, 0x57, "a6e9df2e69a93399658504669910511192d274"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) r2 = signalfd(r0, &(0x7f0000000040)={[0x10000]}, 0x8) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x9, 0x7}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1313.212524] Bluetooth: Invalid header checksum 20:14:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xf000000) [ 1313.281294] Bluetooth: Invalid header checksum [ 1313.321108] Bluetooth: Invalid header checksum [ 1313.339941] mkiss: ax2: crc mode is auto. [ 1313.391160] Bluetooth: Invalid header checksum 20:14:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x10000000) [ 1313.425056] mkiss: ax2: crc mode is auto. [ 1313.432274] Bluetooth: Invalid header checksum [ 1313.501597] Bluetooth: Invalid header checksum [ 1313.541293] Bluetooth: Invalid header checksum 20:14:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000003400), 0x201000, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000003440)={0x4, 0x7, 0x78b2, 0x2, 0x9, "21ac4b96ad89ba7c63a6c36f8e631e8e86efc2", 0x81, 0x9}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x6, 0x401) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r3, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002600)="365fa7b1248dfb2cd187728516ac2133065019e24d7da0e554fdc24fec76b6a0973cf1e98676e8242143e53b8affd084674b68dc2c8ead91eafffdc65ac7da4fb1a066bfb73febb8b0549e65b642508d97b1f593f8acb2bcaafadc265a4929e1cdf7a1c5117366c9e5b2120d0ffcec6110600bb7aab6aa4cffa101a6b75f18ab2a0f98df9cba3179226d5b132527308e46f8209a06ea1d8a5e97070194c84ff2c8bef5ac918ba710079f2006b848fd19e7740a014d3a1bdf5fbee9061d13a12619c2993f23c7ae5f9ef710fd1031d6629f822e4288c6ac4e1d880c556580c923ee2e776d625ec71046dda19fbe682b6969e707a220c9d2fa", 0xf8}, {&(0x7f0000002700)="a08a8360774e6d7a272d3f836a7b3d1f7f657ffeb88c51d05fbba900921487d1980c48f31b36ff6d2859eec46a90c629bdfb72db36c090e1b01de223cccbb618b7a3f6318b0bb8e47b5d693c694e7870fca8e811e34ab81df0239e2d6afd2f786b8e7a9f5a560166965e3a2ee7ad2427e7b4ab36ebfde2f0437454cb419e545f63194b390fb30cb3f1c74ea5e4", 0x8d}], 0x2, &(0x7f0000002800)=[{0x50, 0x11, 0x0, "48a19f3b8820f16e726fa59a6601bc56e79935ca42863e0acb6d1e6189b39a720ee4c79df9a728e678fb1940c25eafc3a778ea066a61311e3e782d866a"}, {0x90, 0x1, 0x42d3, "4dfd51fe3798e77f24e721a7bbbf43e54099827cfa964fe6602b4cdfa15d129d2a3343ab12989ccbe1464a65cec42862a41719740fa122c2186e80276615ddfe901202b208b25ba3489741063a98d88241a81ec568b2cb0b02836fcadb7c2064ea59fc0d022b4709e748742b6a7587c06406287b5887784474e04743f2"}, {0xc0, 0x117, 0x98f, "a5ab70e3b414ff1f82e46f74145e6a4bcd28eecc76b95c78ed848490e963e9d0a15a1be8df7f75df90e4568545555a653e56e6d71867354c96a01ea3fee3efc820d1e6016b1c585711fb997d42e35eab107ddfcfdde1842b6f66ad801de1b4fe0a08339d23b1c48dc100b0695ed703b19471c9feda325f008dff6a73d27a27563fb8f19a288c9bd75be905392dafce16b0df9c6851ce8c50a1229c004e97e47a13c1eaa3aa4db90a93019419b6b0"}, {0x18, 0xff, 0x9, "b510850d"}, {0xb8, 0x107, 0x6, "abde308abe5d18dc6d6c856f7ea7fb364951effb67077033366bed56d27e9ce937e5079f9aa2b6ca695e96e1a692a2c743ce82659ad8ecf7432d6d98135125eb7eb0de86c309c1d60acce4a418983da2d869b0480d2c70873aa10c5e099fea58dd2944a39d3c33df9575db5a3e974648bbde2d0855532d2d663db0f774d7fab695a04ac519893179824a1f22387d5fa54a3f0435238031ed1949a9f36d224432adc5c9c3"}, {0x38, 0x119, 0x1, "657157a9e681ea3ee97465b932abd2f1486f18ac80ca480b130d034747ad2b6040c2f39c"}, {0x20, 0x29, 0x401, "87b35840eb133081c8eb"}, {0x28, 0xff, 0x8, "ba56a90d04bc1ace397e4b773b6e5aa21315bdd804794d"}, {0x78, 0x112, 0xfffffffd, "23a6dc3cc48e13412fc18c3bd0cccde991b6eed05f834b8eb3e51cc71d7a901938376e9711b4c465a5cff447df5c439107bd9a0565c355d4aef150b5fd8163e6381eac0a6e4bd31e3df11b7e4bf62f19fad837720aa96ce8da2904d4b2d93646cfe5451a2809a045"}], 0x368}}, {{&(0x7f0000002cc0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @private=0xa010100}, 0x4, 0x2, 0x1, 0x2}}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002d40)="4e53af758238bd1eceff9aa4da51e88d3d062f9344daa3101982ea597dbcae4d9e6d47ef03d623192daf977d981a04982d2e1382cca302d2348a89eb0cdec7a698934e627cea9b93d696", 0x4a}, {&(0x7f0000002dc0)="79d1176bbf08e4076eaf3f037c26a99a6ee7a17e8990532ccf8c103ba84b86c1c3fce6e3a15156aa52746eb0aa8190198b71ef6aeae04ed24b724535315e32d5d2b07c2533eee8da9f71c0c3738dbf054b946cc99eb911328073c6ab7d4c95fb942e0c214450fa1976f3bb51c6382864cf3af196206a0c6edef8ff3e6677133bba", 0x81}, {&(0x7f0000002e80)="e985b0af79bfeb46d8728e9b79d04af45e7dc4dcd07b4794f387a1d4c95f1b55c43c7eabae0ccc0e29438f69c9761532a019bf183c46447a37a93cb9c9ef3de88a868f0af714175d6545e360b97ff1e291345df9828a9b84f07da1ee1d067366279fc0714df64552aa0f3dc8d81f3abbad60019b164df63f56cebb98d2a88a6caa2db77d3f9db24ffafcceef2a605302a9a97d49c1a05a11f4c495c146eeb1ea899c9e5674163a3c9ce90e795e58aeb782104848ffa72f19ba3234e85976841febb2ccdf5dee6c7e1bee4a42ed8c062632", 0xd1}, {&(0x7f0000002b80)="a9d8", 0x2}, {&(0x7f0000002f80)="aefc19a75faa2aa1a3325e8bca81eaa5a33836f972962fc8208cbea88a35eb135373f8319d23834d0e3b6cf22986b323833e30b64bd3b108571c", 0x3a}, {&(0x7f0000002fc0)="249115ccb96df8bc6252b1f9822a9f2550f585443c9f552c4653747046ecf6812b090044c1da5ff88f0f0bd88ccac1a92e1fa43c7eef93ff360dcdcfa1", 0x3d}, {&(0x7f0000003000)="5ae724bdf03144130581b029d76ba8022dfd3b46962283afc1ee0dc881e99943864c3e3b6e0295fc93e3f38cfb3a8287e5b523326f66321df6de1b1fafef3a5e6bb2ea9ed61fd7b89d5a323ced57edd2b9ddfc4d425270938c1f31789f757a8d44e9d31a82297df685ddcb05ddec4bd1dbbaa3a53e12af000f186e4d2fb77bf1c402dbb26fc41405f8c62f173e19b2e8db6c32e3496a0049", 0x98}], 0x7, &(0x7f0000003140)=[{0x90, 0x10a, 0x1, "1ecbdf33163ae06ca36cff6920070e639be186df375eb812555811e03370069ff132bc322400971fd4d105026586010bc22c029d66d1cd411a40d1cd614e8aa46f8abde0b2d3f24228a99114518fb07a17466ac2c1e79596b77738a90dd01f927d7f1a76ffde325ab25969028f0764fe7505a7e7ef972184dd1a60819e05862a"}, {0x48, 0xd3f00e73d5fb88fe, 0x7ff, "79aa2e34fdb2a43881c6021d5e60ec385670058164ab29a70451bbd1f8cdfe8f9ec99b2e8e8f366fe28957aa5b9d3c6059e3fab4bff2ea"}, {0xc8, 0x115, 0x80000001, "333dcca0f339411132885f3e10bb3a6cb94525cb6f542e40beffaaa299246707a16fac6000b90cf9d030c8a58f59b23367cf594b441824d8a31444a4c353e297d847c966cb876230f512a08bc675ee40f3c1307b3f754bb679a75d97459ee75aa33d4af4db9422303a451bee7864ac9028a43d21b7cd1f5076717a513943649016ab312e3248169de645b520da2f38d4dcbfb584389348740b18d5e82e847cbed976af3fe2589a91f4fe1320522664e1b9"}, {0x80, 0x101, 0xb7, "8cc8f17af671786ab2217051f351a8043008ba390c8a7c66e1afe5a759dd5080388c7dd35106623d3f5e39df8fe8fe43a3a44a4b5866fbde72108692f0f1bfbf101bd2077d41db842ff10c1e2b67137857dc9ba4bf3907227b1ff73565f7c6712eb21888d8f51505cdbfe02a5dd6ca"}], 0x220}}], 0x2, 0x4000) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000002bc0)={0x2, 0xffffffc0, 0x9, 0x800, r3}) sendmsg$netlink(r4, &(0x7f0000002c80)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfc, 0x240000}, 0xc, &(0x7f00000025c0)=[{&(0x7f0000000180)={0x1164, 0x2c, 0x1, 0x70bd25, 0x25dfdbfe, "", [@nested={0x56, 0x3b, 0x0, 0x1, [@generic="fc794f8ff8d07c05eaf7db6cc48460f079036f5c225a2a718e2247ea61bfafed2b178dc8", @typed={0x8, 0x88, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0xc, 0x0, 0x0, @u32=0xa6000000}, @generic="446fd1d3fc1b8167340a2148390c81b71b2ab9c4d6f7b7db12865d6f2c15"]}, @nested={0xf2, 0x7c, 0x0, 0x1, [@generic="fcbd9d3f2ebbcb237d1b3db4b5e2bc14e1a312ef5baf54d73bdbaffcb10384a1503487f06029ca6ca6f416fa2029ac99ee5eaa2c338ef27bb447879f861887ba42c98755a72b20c72832a8a6adfa0c74ae59c041d801df693b6aff32521b15bd33c234ff3a85bc295f0425c95de84933fd1bab4edb272240c7be9e383f82c6ee1867532941a89caa6df0c73445c3b8c37b0ce31481c23f984936a58b32a95c2967684d7a5a5635a040af1363efa4bd8474918a7ced8ee5cf9e0a566a7d820f7bf9265eaf211b6fcb2d121a2d06fd233364036b71f51c22417bab5c5872881d7f28eb37ca6d8610f2c440253ab33f"]}, @generic, @generic="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", @typed={0x8, 0x62, 0x0, 0x0, @fd=r2}]}, 0x1164}, {&(0x7f0000001300)={0xbc, 0x20, 0x2, 0x70bd2b, 0x1, "", [@generic="05f5138ff1d451c007f0f46e28c1836e6d2eb8f3dd020b9d67060f95c1b715f1aea897f61e15c26a464b59f7d30df276e755edb6f6bcd3a96d26e9fbbddfe92963c9b6abe99eecb5a44b87d85a04c02689c0ea15f650974a7f1b2145d1e4b583c0a006004996396ffa9f47c117013bd8d4c97b656fb0be1b04821660bee4b9c4485d42d6db76f0699bb6ff228a7582a812cc7970aca47ee7d17abcee4a6c39560dbcfea280d7de86cd"]}, 0xbc}, {&(0x7f00000013c0)={0x11e8, 0x33, 0x800, 0x70bd2d, 0x25dfdbfd, "", [@typed={0xe, 0x6a, 0x0, 0x0, @str='/dev/ptmx\x00'}, @generic="1279d9b8b7f91d617ed372d9b1fa1946c630d35bca604854e74978ce2d1c5c3ada22b366abfb6439147e051faf5cbbd772483eba18eae4bc5aa183ebd10e716f8b6dec02e05f1a", @typed={0xc, 0xe, 0x0, 0x0, @u64=0x1}, @nested={0x1154, 0x23, 0x0, 0x1, [@generic="d443fdd1e668c3a8dd7716dd50f1ac9eff4f4458b10df1825aac122f51dd17e91d81b940fd26798ba31ccb3da43813aef2cbf6e8574be04769eb6e12ec173bd8a132bec5eb0fc637067d4373096a6db0ed51e47f6468a87a9758aaeba51eebd9de0d6d26c2cd6acad4668845ab02fe2697f709855bd9fb423956e336494287a8620a2a", @typed={0x7, 0x5a, 0x0, 0x0, @str='-\\\x00'}, @typed={0x4, 0x3c}, @generic="f365c018a452cf8901a7aabdb69a5f6ea25d99692c2e288f440f1e1694caf0262b776495150eebf762420dbc9eed85e82148144f4ae0b06598d073637ba2d229f7bba9d8f5e01e0fadd664df1cc131dc0cd1203dffbd2c9a5929a4a4a2cc", @generic="ea7e30a0dcaf0e9bf5ee5bc7e641e14c27ae179ab293", @generic="2c03cdf9724e1a3bf1d44c8418d674974209c3e191b2b28cf5ba29c1578ac215fe1ab52792c3e2421fde8d232e8fe8b482beb8345d", @typed={0xe, 0x2c, 0x0, 0x0, @str='/dev/ptmx\x00'}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r4}, @generic="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"]}, @nested={0x20, 0x2b, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x14, 0x11, 0x0, 0x0, @ipv6=@empty}]}]}, 0x11e8}], 0x3, &(0x7f0000002c00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="0000000030000000000000000505000001000000", @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r3, @ANYRES32, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r7], 0x50, 0x20000004}, 0x20000000) ioctl$KDADDIO(r4, 0x4b34, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1313.613158] Bluetooth: Invalid header checksum 20:14:08 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:14:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x19000000) [ 1313.651241] Bluetooth: Invalid header checksum [ 1313.734997] Bluetooth: Invalid header checksum [ 1313.761494] Bluetooth: Invalid header checksum 20:14:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x23000000) [ 1313.841136] Bluetooth: Invalid header checksum [ 1313.871169] Bluetooth: Invalid header checksum 20:14:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x2c030000) [ 1313.948491] audit: type=1804 audit(1625170448.557:970): pid=3973 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2777/bus" dev="sda1" ino=14208 res=1 [ 1313.972958] Bluetooth: Invalid header checksum [ 1313.982824] Bluetooth: Invalid header checksum [ 1314.026841] mkiss: ax2: crc mode is auto. [ 1314.082272] Bluetooth: Invalid header checksum [ 1314.093407] Bluetooth: Invalid header checksum [ 1314.098882] mkiss: ax2: crc mode is auto. 20:14:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x2f000000) [ 1314.201784] Bluetooth: Invalid header checksum [ 1314.211199] Bluetooth: Invalid header checksum 20:14:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0xd8e1, 0x1, 0x82, 0x6, 0x13, "2610dbafce57462d57bf4e17455546ffded896"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1314.256832] validate_nla: 20 callbacks suppressed [ 1314.256841] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1314.311187] Bluetooth: Invalid header checksum [ 1314.316056] Bluetooth: Invalid header checksum 20:14:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x3b010000) [ 1314.358376] mkiss: ax2: crc mode is auto. [ 1314.422359] Bluetooth: Invalid header checksum [ 1314.427020] Bluetooth: Invalid header checksum [ 1314.431895] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1314.468845] mkiss: ax2: crc mode is auto. 20:14:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1314.507731] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1314.531362] Bluetooth: Invalid header checksum [ 1314.547038] Bluetooth: Invalid header checksum 20:14:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$KDDISABIO(r0, 0x4b37) 20:14:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x48010000) [ 1314.641977] Bluetooth: Invalid header checksum [ 1314.651373] Bluetooth: Invalid header checksum [ 1314.751142] Bluetooth: Invalid header checksum [ 1314.762539] Bluetooth: Invalid header checksum [ 1314.762855] mkiss: ax2: crc mode is auto. [ 1314.774041] netlink: 'syz-executor.1': attribute type 20 has an invalid length. 20:14:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:09 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1314.840718] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1314.861210] Bluetooth: Invalid header checksum [ 1314.871228] Bluetooth: Invalid header checksum [ 1314.900762] mkiss: ax2: crc mode is auto. 20:14:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x48020000) 20:14:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1a) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x10001) ioctl$KDADDIO(r1, 0x4b34, 0x4) [ 1314.976121] Bluetooth: Invalid header checksum [ 1314.991298] Bluetooth: Invalid header checksum [ 1315.015879] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1315.069760] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1315.082311] Bluetooth: Invalid header checksum [ 1315.096106] Bluetooth: Invalid header checksum [ 1315.108316] audit: type=1804 audit(1625170449.717:971): pid=4079 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2778/bus" dev="sda1" ino=14218 res=1 20:14:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x49000000) [ 1315.191127] Bluetooth: Invalid header checksum [ 1315.201692] Bluetooth: Invalid header checksum [ 1315.284379] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1315.301302] Bluetooth: Invalid header checksum [ 1315.314023] Bluetooth: Invalid header checksum [ 1315.354982] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1315.411292] Bluetooth: Invalid header checksum [ 1315.422279] Bluetooth: Invalid header checksum 20:14:10 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5) r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="7ef420398f4412b859249532370d5672aa9c40ceafe4b1297f6aa6cf114f5ea297600db5db8de0f2d92b7452935e1fa1ad44a6b4aa9cb96cfde1b8dfc711a9276d48721911ba591e98500e50d0d30877511a63d17633472f3564bb36ca2779b366be3278709bdaff7bc284fa0b1070a59df02df1bb62a28ee84560fe5aa2924a16b8aa5c91d97624eea831a81d5271ad5b1264f2c2ff1010d9269f84684c78a0fb29a1ff5c01b0939e347961e62364ca7e8fabeec7ecbc69dfd2b5c3db5d4fc4690f", 0xc2}, {&(0x7f0000000280)="34f68c5501abf66b3dafe1aa94db86bbb72f8077d1847f3c73b2e8f00d28639ebf74050baa5209f289f8613a8e6a96f5cfdd5c23196372eb80d9467fbb150a644921218ab68a755512", 0x49}], 0x2}, 0x0) r1 = dup2(r0, r0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = accept4$nfc_llcp(r1, &(0x7f0000000200), &(0x7f0000000300)=0x60, 0x800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000680)={'gre0\x00', 0x0, 0x7817, 0x80, 0x89, 0x9, {{0x1d, 0x4, 0x3, 0x9, 0x74, 0x65, 0x0, 0x78, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@lsrr={0x83, 0x13, 0x45, [@multicast2, @remote, @empty, @multicast1]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0x9b, [@dev={0xac, 0x14, 0x14, 0x12}, @remote, @rand_addr=0x64010100, @multicast2]}, @rr={0x7, 0x1b, 0xb6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2, @local, @private=0xa010100]}, @timestamp_addr={0x44, 0x14, 0x2b, 0x1, 0x2, [{@broadcast, 0xffff}, {@private=0xa010100, 0x1}]}, @ssrr={0x89, 0x7, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0xf, &(0x7f0000002d80)={@local, 0x0}, &(0x7f0000002dc0)=0x14) sendmmsg$inet(r2, &(0x7f0000003140)=[{{&(0x7f0000000340)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000380)="52be9ed4f2775f1aa483812166b9e6d74a4b1ddf6acf5d10710f7ab2efa7df97f0e1221813ee0c50db4d4717f83edd39984c3025ec9dd32b0bc38e8b3954efd5997df63cd06bb5513b4b7005485804a311b1daf7562bad787252e2af2ea17725d91ab50430817b35205a374d151c265de979cd6feed6986d1806b7eefcd1bbf26e2c5e62f66044a08cad7555cd7f345f4697bb3e03e5c4f073e8b262192370633a9c4bda400dd9fc30fac280811281b7d178b63b1959857475ecaa8a32db0ce0b0febeba4d218f6c5e1d822b2c3856b07aa04e8df7b84818e75e0243cfbba00d0cfb6f83520f989d5172946249d38a", 0xef}, {&(0x7f0000000480)="cdc718c826a514cad20ee6c8426b30ba1e1f03390f1a807e8be536958fd4218accf5469d13a0e95368334ae5248da75b9b7b8202306ac54c9d5aa5c8d354e9833f41b9c033b20485ea0183f5209619605dda4d59e646441c7de8a9d1a5fd266950feb322851923b27fb7347ebdbfd9dcd853abbce9dff0e3edbcafaa64fb20e52a25aace71a926dbbcd9dcfd62865c431b5fba048e43caaadf2d12ea7aed9a8c7ed00f5273a8924fad8566a7a5d4e3afe333dfff0f", 0xb5}, {&(0x7f0000000540)="e963f5b758eac420c0afa4bf9c85ebf7e67fea60e4377badd60600826850c7be21a11687ddb7d71b3b6e9bf8b56bf21ad4b2aba30adb30b6140175e8c6707b861e7648da65f317ff8568e58d9e0234474272be6deded3e3835a60e97833cb07914f32f717ecde185cd5a08cce306e9b0cbaaa77cfec8bf2b174f0acd85beeb306c5f71ae304d96680ad869c1a384e8f460beb81df1bd3153063d251edf8d018f4a9b9c7092f94e13a117f647a0d58d1799ba52e8c1f7bcc43e4275133c2a9ca5d3e5711b56070bf6bc432308cc5bef6a", 0xd0}], 0x3, &(0x7f0000000780)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc0}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000880)="75b68540dfeb27fee57dba8f7c72c1dec76172ba88749b2a23945e1152f7486c6866a68f2fc26969fd172fa0d0bfa3c91b989bfc21f9fd971a11cca9d7c96bdcba2b36acbe08edbf14d762078e8442872a91c6edd549d7b4e600561ed417f6a1c8094291deeff2a302c04f117e85114475c5e375b2246978a06c3cfb73d168e4d4b74afc1acdacf32a4b060edc1332032b5bf71e879aedd85d2f7d0f2ef7cdc361f33b64bb158005d33cce6ed2ea8604933c39f015177f302776a8a529b78989746d6cc6cca2e1acbd4881c73b72340c4ad120c3", 0xd4}, {&(0x7f0000000980)="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", 0x1000}], 0x2, &(0x7f0000003280)=ANY=[@ANYBLOB="50000000000000000000000607000000442cdf908000000100003400000000060000007f00010006000000070000000600000000000000060000000583980f90ac1414aa7f0000016401010194040100001c00000000000008000000b9ec9ee197be2f96d32a0000fa70f1c5b21fdc8984fca00300000096c9c9df66621447c5f0", @ANYRES32=r6, @ANYBLOB="64010101e000000100000000"], 0x70}}, {{&(0x7f0000001a40)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000001a80)="c447d1f9ec3abc44a036d1b028a908e1bf45bdf55240bb54594ad2f92b46962a161b47745cf3d807514d551b3eed197f1282ab9b835855279e79db1162791225c31ea8576d3aac6abbaabc12efabb8f892287e3dc6217ace121914ca0f87ab3970eddc48957658bd55239d628bb6126bf7d05a040f5a5c0217460c4005b7364cdde5279f155bea0fe1293ae71942068659ca35913d0293c80cbedb643cee1073b1dd98ac5b159907db92adcfe4d26b5d70005bc30c414696b46f3cde1535f44cc1fa8310226cf5e9fa58cc927d074c7020b3524fae", 0xd5}], 0x1, &(0x7f0000001bc0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x3ff}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1f}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x2f, 0x1, 0x9, [{@loopback, 0x2}]}, @ssrr={0x89, 0xf, 0xd9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote]}, @ra={0x94, 0x4, 0x1}, @noop, @generic={0x83, 0x9, "c549b2d477a41e"}, @rr={0x7, 0x17, 0x30, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x23}, @broadcast, @rand_addr=0x64010100]}, @rr={0x7, 0x13, 0x8, [@rand_addr=0x64010101, @remote, @loopback, @multicast1]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x128}}, {{&(0x7f0000001d00)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000002d40)=[{&(0x7f0000001d40)="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", 0x1000}], 0x1, &(0x7f0000002e00)=[@ip_retopts={{0xe8, 0x0, 0x7, {[@cipso={0x86, 0x33, 0x1, [{0x3, 0xf, "94300c3bd9ce3aa1693f470581"}, {0x7, 0xb, "a44952158fa952dd12"}, {0x5, 0x9, "76703643dfd552"}, {0x1, 0xa, "a54d14dba23983bb"}]}, @end, @cipso={0x86, 0xf, 0xffffffffffffffff, [{0x7, 0x5, "cf53c4"}, {0x2, 0x4, '\aO'}]}, @timestamp={0x44, 0x14, 0x1c, 0x0, 0x1, [0xf1, 0x2, 0x0, 0x80000000]}, @timestamp_prespec={0x44, 0x54, 0xf9, 0x3, 0xf, [{@loopback, 0x3}, {@multicast2, 0x81}, {@broadcast, 0x2}, {@local, 0x9}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0x7fff}, {@loopback, 0x80000000}, {@multicast1, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x94, 0x3, 0xf, [{@local, 0xd07e}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x9}, {@multicast2, 0xff}, {@rand_addr=0x64010100}, {@rand_addr=0x64010102, 0x1}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffaac6}}], 0x170}}, {{&(0x7f0000002f80)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000003100)=[{&(0x7f0000002fc0)="afc6664957cfb8039b3359dee2cb56dd45a3114c15f88fc5943d854ef91ecdb741f67e2575426d59b74d907cc180217f960e4f857820c9fc2b52aea658ecbeec42c9388ef448400024b2ec7caae6cb0c0b01a497ff75daf584cdd86ee4f06b0e3aec48b5a7227d2783d31c9e6845a73ddf269f216c47cee48133c6d9f5b448ede58ac464c851f846c90bc3c89c281e4e65ce7af4db9c7a5a69fd5f1c836d4b49be7240dc4dd53bd292f7cad07f7a14a943e286370ece17a1d90b19a12a3b118baef7f4e15d7b8fd06dc24c6bdcca1566", 0xd0}, {&(0x7f00000030c0)="7b65b534a410b2e114d0513cc031a359a3f2d3363fee0a97ce400b3d43617db18ab864ba653d24867ff67537a5f96996e6868a2ade47c90928", 0x39}], 0x2}}], 0x5, 0x44) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 20:14:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x52000000) 20:14:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1315.521491] Bluetooth: Invalid header checksum [ 1315.532682] Bluetooth: Invalid header checksum [ 1315.546351] netlink: 'syz-executor.1': attribute type 20 has an invalid length. 20:14:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x60000000) 20:14:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000100)=""/185) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x8000, 0xfe, 0x3, 0x0, 0x15, "1aa183b6960f252b59388e9a41cab9746038bd"}) [ 1315.631242] Bluetooth: Invalid header checksum [ 1315.651282] Bluetooth: Invalid header checksum 20:14:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1315.741404] Bluetooth: Invalid header checksum [ 1315.761437] Bluetooth: Invalid header checksum [ 1315.790258] mkiss: ax2: crc mode is auto. 20:14:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x65580000) [ 1315.867622] mkiss: ax2: crc mode is auto. [ 1315.872203] Bluetooth: Invalid header checksum [ 1315.877152] Bluetooth: Invalid header checksum 20:14:10 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1315.961177] Bluetooth: Invalid header checksum [ 1315.981411] Bluetooth: Invalid header checksum 20:14:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5) 20:14:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x81000000) [ 1316.071247] Bluetooth: Invalid header checksum [ 1316.091439] Bluetooth: Invalid header checksum [ 1316.127981] mkiss: ax2: crc mode is auto. 20:14:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x88a8ffff) [ 1316.181241] Bluetooth: Invalid header checksum [ 1316.202673] Bluetooth: Invalid header checksum [ 1316.209554] audit: type=1804 audit(1625170450.817:972): pid=4189 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2779/bus" dev="sda1" ino=14131 res=1 [ 1316.249213] mkiss: ax2: crc mode is auto. [ 1316.291470] Bluetooth: Invalid header checksum [ 1316.311259] Bluetooth: Invalid header checksum 20:14:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x200400) ioctl$TIOCGPTPEER(r1, 0x5441, 0x81) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xfd) [ 1316.401243] Bluetooth: Invalid header checksum 20:14:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x8c020000) [ 1316.421772] Bluetooth: Invalid header checksum 20:14:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1316.511310] Bluetooth: Invalid header checksum [ 1316.531493] Bluetooth: Invalid header checksum [ 1316.621155] Bluetooth: Invalid header checksum 20:14:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x8d010000) [ 1316.642512] Bluetooth: Invalid header checksum 20:14:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x81) [ 1316.731160] Bluetooth: Invalid header checksum [ 1316.751311] Bluetooth: Invalid header checksum 20:14:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x9b030000) [ 1316.841655] Bluetooth: Invalid header checksum [ 1316.861466] Bluetooth: Invalid header checksum [ 1316.951386] Bluetooth: Invalid header checksum [ 1316.971140] Bluetooth: Invalid header checksum 20:14:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x9effffff) [ 1317.061181] Bluetooth: Invalid header checksum [ 1317.081201] Bluetooth: Invalid header checksum 20:14:11 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1317.171385] Bluetooth: Invalid header checksum [ 1317.191431] Bluetooth: Invalid header checksum 20:14:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xa1000000) [ 1317.281205] Bluetooth: Invalid header checksum [ 1317.301528] Bluetooth: Invalid header checksum [ 1317.336460] mkiss: ax2: crc mode is auto. 20:14:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xac010000) [ 1317.392309] Bluetooth: Invalid header checksum [ 1317.432869] Bluetooth: Invalid header checksum 20:14:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1317.476111] audit: type=1804 audit(1625170452.087:973): pid=4278 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2780/bus" dev="sda1" ino=14196 res=1 [ 1317.501332] Bluetooth: Invalid header checksum [ 1317.505212] mkiss: ax2: crc mode is auto. [ 1317.521155] Bluetooth: Invalid header checksum [ 1317.611241] Bluetooth: Invalid header checksum 20:14:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xae010000) [ 1317.642047] Bluetooth: Invalid header checksum [ 1317.721963] Bluetooth: Invalid header checksum [ 1317.741143] Bluetooth: Invalid header checksum 20:14:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b00)={'wpan0\x00'}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000004ee10900000005000700a28706c50c000600010000fb030000000500080011000000"], 0x30}, 0x1, 0x0, 0x0, 0x408c0}, 0x24000000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)) [ 1317.831245] Bluetooth: Invalid header checksum [ 1317.851503] Bluetooth: Invalid header checksum 20:14:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xc8010000) [ 1317.942007] Bluetooth: Invalid header checksum [ 1317.962116] Bluetooth: Invalid header checksum [ 1317.963912] mkiss: ax2: crc mode is auto. [ 1318.051708] Bluetooth: Invalid header checksum 20:14:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xe0030000) [ 1318.096577] Bluetooth: Invalid header checksum [ 1318.161156] Bluetooth: Invalid header checksum 20:14:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1318.181776] Bluetooth: Invalid header checksum 20:14:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xe3000000) [ 1318.271152] Bluetooth: Invalid header checksum [ 1318.291201] Bluetooth: Invalid header checksum 20:14:12 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1318.318735] mkiss: ax2: crc mode is auto. [ 1318.381242] Bluetooth: Invalid header checksum [ 1318.401379] Bluetooth: Invalid header checksum [ 1318.408390] mkiss: ax2: crc mode is auto. 20:14:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xf0ffffff) [ 1318.491730] Bluetooth: Invalid header checksum 20:14:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1318.513685] Bluetooth: Invalid header checksum 20:14:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000140)={0xa}) 20:14:13 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) [ 1318.601597] Bluetooth: Invalid header checksum [ 1318.621627] Bluetooth: Invalid header checksum [ 1318.633299] audit: type=1804 audit(1625170453.247:974): pid=4364 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2781/bus" dev="sda1" ino=14018 res=1 20:14:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xfc000000) [ 1318.711394] Bluetooth: Invalid header checksum [ 1318.731201] Bluetooth: Invalid header checksum [ 1318.822701] Bluetooth: Invalid header checksum [ 1318.841521] Bluetooth: Invalid header checksum 20:14:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) syz_open_dev$vcsu(&(0x7f0000000140), 0x80, 0x20a040) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0xd6000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0xf) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0xdc7d, 0x6, 0x7, 0x92b, 0x19, "a15fb0c742401ca0fbc6cb4fc2735c5d100e15"}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) dup2(r0, r2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1318.931325] Bluetooth: Invalid header checksum 20:14:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xfc030000) [ 1318.951612] Bluetooth: Invalid header checksum [ 1319.017799] mkiss: ax2: crc mode is auto. [ 1319.042624] Bluetooth: Invalid header checksum [ 1319.061396] Bluetooth: Invalid header checksum 20:14:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xfe800000) [ 1319.099841] mkiss: ax2: crc mode is auto. [ 1319.151332] Bluetooth: Invalid header checksum [ 1319.171577] Bluetooth: Invalid header checksum 20:14:13 executing program 2: getrlimit(0xd, &(0x7f0000000040)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x38) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1319.261143] Bluetooth: Invalid header checksum [ 1319.281429] Bluetooth: Invalid header checksum 20:14:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xfec00000) [ 1319.371935] Bluetooth: Invalid header checksum [ 1319.393183] mkiss: ax2: crc mode is auto. [ 1319.401612] Bluetooth: Invalid header checksum [ 1319.481315] Bluetooth: Invalid header checksum 20:14:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1319.501718] Bluetooth: Invalid header checksum [ 1319.518850] mkiss: ax2: crc mode is auto. 20:14:14 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1319.591285] Bluetooth: Invalid header checksum 20:14:14 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) [ 1319.611764] Bluetooth: Invalid header checksum 20:14:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xff000000) 20:14:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) r1 = socket$tipc(0x1e, 0x2, 0x0) dup2(r1, r0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1319.701256] Bluetooth: Invalid header checksum [ 1319.731292] Bluetooth: Invalid header checksum [ 1319.791519] mkiss: ax2: crc mode is auto. [ 1319.811531] Bluetooth: Invalid header checksum 20:14:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xff1c0000) [ 1319.841767] Bluetooth: Invalid header checksum [ 1319.863840] audit: type=1804 audit(1625170454.477:975): pid=4473 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2782/bus" dev="sda1" ino=14033 res=1 [ 1319.919735] mkiss: ax2: crc mode is auto. [ 1319.924427] Bluetooth: Invalid header checksum [ 1319.961286] Bluetooth: Invalid header checksum 20:14:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x10) 20:14:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xffffa888) [ 1320.031938] Bluetooth: Invalid header checksum [ 1320.074324] Bluetooth: Invalid header checksum [ 1320.141447] Bluetooth: Invalid header checksum 20:14:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xfffff000) [ 1320.181525] Bluetooth: Invalid header checksum [ 1320.251688] Bluetooth: Invalid header checksum 20:14:14 executing program 2: sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "1358282b04f55ed6ce0750d6e2"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e8d1a325fac08bc3660d612d32"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x5) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 1320.291392] Bluetooth: Invalid header checksum 20:14:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xffffff7f) [ 1320.362526] Bluetooth: Invalid header checksum [ 1320.401395] Bluetooth: Invalid header checksum [ 1320.410461] mkiss: ax2: crc mode is auto. 20:14:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1320.474811] Bluetooth: Invalid header checksum [ 1320.514890] Bluetooth: Invalid header checksum 20:14:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x2000, 0xffffffff, 0x2, 0xffffffff, 0x14, "ee0f14483e3cd62a7b57db34cf6618dc71f043"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1320.584588] Bluetooth: Invalid header checksum [ 1320.622077] Bluetooth: Invalid header checksum [ 1320.654476] mkiss: ax2: crc mode is auto. [ 1320.691648] Bluetooth: Invalid header checksum 20:14:15 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:14:15 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 20:14:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xffffff9e) [ 1320.718211] mkiss: ax2: crc mode is auto. [ 1320.731648] Bluetooth: Invalid header checksum 20:14:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) syz_open_pts(r0, 0x58200) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1320.801981] Bluetooth: Invalid header checksum [ 1320.842912] Bluetooth: Invalid header checksum [ 1320.883462] mkiss: ax2: crc mode is auto. 20:14:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xfffffff0) [ 1320.911440] Bluetooth: Invalid header checksum [ 1320.951274] Bluetooth: Invalid header checksum 20:14:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x6c4203, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) fchmod(r1, 0x0) [ 1321.007672] audit: type=1804 audit(1625170455.617:976): pid=4581 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2783/bus" dev="sda1" ino=14272 res=1 [ 1321.032006] Bluetooth: Invalid header checksum 20:14:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x40030000000000) [ 1321.065861] Bluetooth: Invalid header checksum [ 1321.123063] IPv6: Can't replace route, no match found [ 1321.133561] Bluetooth: Invalid header checksum [ 1321.143827] validate_nla: 5 callbacks suppressed [ 1321.143838] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1321.167893] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1321.179731] Bluetooth: Invalid header checksum [ 1321.188784] IPv6: Can't replace route, no match found 20:14:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xf0ffffffffffff) [ 1321.241160] Bluetooth: Invalid header checksum 20:14:15 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) [ 1321.281201] Bluetooth: Invalid header checksum [ 1321.351135] Bluetooth: Invalid header checksum 20:14:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1321.392146] Bluetooth: Invalid header checksum 20:14:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x100000000000000) 20:14:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000140)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) syz_open_dev$tty20(0xc, 0x4, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x14) [ 1321.463115] Bluetooth: Invalid header checksum [ 1321.506601] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1321.515264] Bluetooth: Invalid header checksum [ 1321.549751] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1321.571791] Bluetooth: Invalid header checksum [ 1321.611279] Bluetooth: Invalid header checksum [ 1321.681209] Bluetooth: Invalid header checksum [ 1321.721245] Bluetooth: Invalid header checksum [ 1321.791394] Bluetooth: Invalid header checksum [ 1321.831429] Bluetooth: Invalid header checksum 20:14:16 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:14:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x408402, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000080)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 20:14:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x200000000000000) [ 1321.901266] Bluetooth: Invalid header checksum [ 1321.931994] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1321.941284] Bluetooth: Invalid header checksum 20:14:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCCONS(r2, 0x541d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1321.972539] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1322.031132] Bluetooth: Invalid header checksum 20:14:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x300000000000000) [ 1322.061033] Bluetooth: Invalid header checksum [ 1322.088225] mkiss: ax2: crc mode is auto. [ 1322.101097] audit: type=1804 audit(1625170456.707:977): pid=4651 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2784/bus" dev="sda1" ino=14131 res=1 [ 1322.121221] Bluetooth: Invalid header checksum [ 1322.161147] Bluetooth: Invalid header checksum [ 1322.171031] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1322.191435] mkiss: ax2: crc mode is auto. [ 1322.211496] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1322.231161] Bluetooth: Invalid header checksum 20:14:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x400000000000000) 20:14:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101880, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1322.273243] Bluetooth: Invalid header checksum [ 1322.341439] Bluetooth: Invalid header checksum 20:14:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1322.383404] Bluetooth: Invalid header checksum [ 1322.401654] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1322.428019] mkiss: ax2: crc mode is auto. [ 1322.448337] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1322.451149] Bluetooth: Invalid header checksum 20:14:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x600000000000000) [ 1322.497110] mkiss: ax2: crc mode is auto. [ 1322.502868] Bluetooth: Invalid header checksum [ 1322.574959] Bluetooth: Invalid header checksum 20:14:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4b4a01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1322.601263] Bluetooth: Invalid header checksum 20:14:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x700000000000000) [ 1322.681807] Bluetooth: Invalid header checksum [ 1322.711503] Bluetooth: Invalid header checksum [ 1322.791108] Bluetooth: Invalid header checksum [ 1322.821148] Bluetooth: Invalid header checksum [ 1322.892258] Bluetooth: Invalid header checksum [ 1322.931175] Bluetooth: Invalid header checksum 20:14:17 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:14:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x800000000000000) [ 1323.001213] Bluetooth: Invalid header checksum [ 1323.041423] Bluetooth: Invalid header checksum [ 1323.111193] Bluetooth: Invalid header checksum 20:14:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xa00000000000000) [ 1323.151332] Bluetooth: Invalid header checksum [ 1323.190505] audit: type=1804 audit(1625170457.797:978): pid=4739 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2785/bus" dev="sda1" ino=14237 res=1 [ 1323.221126] Bluetooth: Invalid header checksum [ 1323.261760] Bluetooth: Invalid header checksum 20:14:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xb00000000000000) 20:14:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1323.366936] Bluetooth: Invalid header checksum [ 1323.385812] Bluetooth: Invalid header checksum [ 1323.441386] Bluetooth: Invalid header checksum 20:14:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xc00000000000000) [ 1323.493883] Bluetooth: Invalid header checksum [ 1323.551190] Bluetooth: Invalid header checksum 20:14:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xc02000000000000) [ 1323.602386] Bluetooth: Invalid header checksum [ 1323.663377] Bluetooth: Invalid header checksum [ 1323.711156] Bluetooth: Invalid header checksum 20:14:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xe00000000000000) [ 1323.771131] Bluetooth: Invalid header checksum [ 1323.831227] Bluetooth: Invalid header checksum 20:14:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1323.881168] Bluetooth: Invalid header checksum [ 1323.941158] Bluetooth: Invalid header checksum [ 1323.991174] Bluetooth: Invalid header checksum 20:14:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xf00000000000000) [ 1324.053824] Bluetooth: Invalid header checksum [ 1324.101581] Bluetooth: Invalid header checksum 20:14:18 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:14:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x1000000000000000) [ 1324.161191] Bluetooth: Invalid header checksum [ 1324.219993] Bluetooth: Invalid header checksum [ 1324.281247] Bluetooth: Invalid header checksum 20:14:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x1900000000000000) [ 1324.321170] Bluetooth: Invalid header checksum [ 1324.381240] Bluetooth: Invalid header checksum 20:14:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x2300000000000000) [ 1324.418414] audit: type=1804 audit(1625170459.027:979): pid=4796 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2786/bus" dev="sda1" ino=14284 res=1 [ 1324.443253] Bluetooth: Invalid header checksum [ 1324.491272] Bluetooth: Invalid header checksum [ 1324.552861] Bluetooth: Invalid header checksum 20:14:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x2c03000000000000) [ 1324.601398] Bluetooth: Invalid header checksum [ 1324.661304] Bluetooth: Invalid header checksum [ 1324.711150] Bluetooth: Invalid header checksum 20:14:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x2f00000000000000) [ 1324.777450] Bluetooth: Invalid header checksum [ 1324.821132] Bluetooth: Invalid header checksum 20:14:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1324.881882] Bluetooth: Invalid header checksum 20:14:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x3b01000000000000) [ 1324.934282] Bluetooth: Invalid header checksum [ 1324.991165] Bluetooth: Invalid header checksum [ 1325.051365] Bluetooth: Invalid header checksum 20:14:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x4801000000000000) [ 1325.101230] Bluetooth: Invalid header checksum [ 1325.161543] Bluetooth: Invalid header checksum [ 1325.211180] Bluetooth: Invalid header checksum 20:14:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x4802000000000000) 20:14:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1325.271323] Bluetooth: Invalid header checksum [ 1325.321132] Bluetooth: Invalid header checksum 20:14:20 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:14:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000007c0)={0x0, 0x200, 0x8, 0x1000, 0x17, "640cc285ca1b054ab616d215a2db0669705d6d"}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="e2ec80c9aff0cd62ecefee3e3c54cd0f7374b40d149928dd9ae8d3d91654c3939192d129af9c87eefda7893348f6c9096d284204471c736707b06232fca1699bc4ea3cea31a95a366ad03c89a722615bc42760fb6f13e94abb028edae14dba8763bdf18a46e42d7279724748eb0e7cd75a0725eb0a764750645061c21169325473e864adcea06c34e9d7583faa60149116e80e170bf05c4dba133f33be206aa94d937d130a78dd74a81cc3f45f29b823", 0xb0}], 0x1}}, {{&(0x7f0000000280)=@caif, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)="63248bcf7d041bd8ec915199048e3410e5dc8b1c047efe42f685ccc37651ed504d8b7b7f1ffb5ec2be67f1432e", 0x2d}, {&(0x7f0000000340)="cd46f88c0b8421b153789a3ade39ad3e393ade655f31cb88ae0d9c9f168de887471a55703b5eae46406e259c1698bfef5e79779f7cc0eb589cb31fcee36b3de932e272bb4a041c17caf64454927221b61070c57c92c9463aeca1f224b125209c5c721149cefbd79b333be7202f7370b804dcea6dc345ac3106d7f325adc5e839be28fbe78f445488c28f10b96ad89d324f00d4c69714a69d403cf819", 0x9c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="81675273bba0a41fb359d1b36117908ea7ae49b13cc26a25328e504bf0158c0a9d2a6a54e4b36766e31d613db2", 0x2d}, {&(0x7f0000000480)="32f18ca55c1b91bceb2b1ea3d0ad56910b9a2c26f2bfaee169356a5b96a1f1f8074b398e3309bb37fdb9e3f6486fcf304d83cfed9ab445c6b7154debae7a3522395353020925f39b71f19a614a26cbab990de3d5ea834d1ce9f06d7b45dad859f6c0e10526f7c8c99ce9c76daafc8c74963b53b80c2a903be8a49ddaab92049611e1da3c304bf8e76c6b53148301833c12f0bb9ecb5a447733928a6fe35a5e116cf9", 0xa2}], 0x2, &(0x7f0000000580)=[{0x28, 0x10d, 0x100, "d47cbe7a20d726b1712b97a8677f266597f69e"}, {0x28, 0x101, 0x4, "3b36a3af70971c2c3db0a5d24d7ae9c3a1efeabeb2f002"}, {0xe0, 0x10e, 0x7fff, "f7dac4248e28456ff94c935597d484fadecc1e094c94cb482507033c8f6f0492bec0c3600d148b9f8e4f4d9e1e41b3d64b520d9962219c4a15ac944b73f6367b2df09af6d1626aaebfbda42cbe6aafa3d95edb5c825dfb5ec81778c7a5c8c56fb19a289e29bcc17bd5e62077247e602265f55d75be23fcacc48c40eed617bb35770c93929a1676741bd46952ca39a7f28a90a196038c90a8e533c5a618914ebee0e99b43bb434cd9f6e38dc07b11b7feb0ce4ccba8f628c78a7f424d420bc1d86edfad78678f57145ee9"}, {0x48, 0x117, 0x80000001, "a11cf6c6bd09c91e90972b148967163e2a8b94ad0a90a1b498a8b4f93e93f4c770ec8df27ded5a7ba5cbd52b7635afa577e82b572cd56584"}], 0x178}}], 0x3, 0x4000001) r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001a40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000e40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYRESOCT, @ANYRES32=r4, @ANYRES32, @ANYRES64, @ANYRESHEX=r3], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000800)={0x1, 0xffff, @start={r5, 0x1, "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", "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"}, [0x1, 0x0, 0x4, 0x0, 0x9, 0x8001, 0x1, 0x2e, 0x2, 0x1ff, 0xf39, 0x3ff, 0x3, 0x6, 0x200000000000, 0x5, 0x8, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x200, 0xff, 0x2, 0xce0, 0x8, 0x6, 0x124, 0x2, 0x1, 0xffffffffffffffff, 0x1, 0x6, 0x40, 0xfffffffffffffe00, 0x400, 0x4b20, 0x4, 0x8e1, 0x1, 0x0, 0x6, 0x32, 0x4, 0x4, 0x428, 0x7, 0x9, 0x0, 0x40, 0x80, 0x6, 0x3, 0xa6, 0x80, 0x6, 0x4, 0x2, 0x4, 0x5a, 0xa8, 0xf1e0, 0x800, 0x10000]}) preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) [ 1325.391463] Bluetooth: Invalid header checksum 20:14:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x4900000000000000) [ 1325.431212] Bluetooth: Invalid header checksum [ 1325.469869] mkiss: ax2: crc mode is auto. [ 1325.502179] Bluetooth: Invalid header checksum [ 1325.512279] IPv6: Can't replace route, no match found [ 1325.541136] Bluetooth: Invalid header checksum 20:14:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x5200000000000000) [ 1325.611344] Bluetooth: Invalid header checksum [ 1325.651577] Bluetooth: Invalid header checksum [ 1325.660157] audit: type=1804 audit(1625170460.267:980): pid=4868 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2787/bus" dev="sda1" ino=14018 res=1 [ 1325.731367] Bluetooth: Invalid header checksum [ 1325.761397] Bluetooth: Invalid header checksum 20:14:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x6000000000000000) [ 1325.813519] mkiss: ax2: crc mode is auto. [ 1325.828528] IPv6: Can't replace route, no match found [ 1325.842555] Bluetooth: Invalid header checksum [ 1325.871508] Bluetooth: Invalid header checksum [ 1325.961656] Bluetooth: Invalid header checksum [ 1325.983374] Bluetooth: Invalid header checksum 20:14:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1326.071496] Bluetooth: Invalid header checksum 20:14:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x6558000000000000) [ 1326.101017] Bluetooth: Invalid header checksum [ 1326.173939] mkiss: ax2: crc mode is auto. [ 1326.182390] Bluetooth: Invalid header checksum [ 1326.211275] Bluetooth: Invalid header checksum [ 1326.214526] validate_nla: 35 callbacks suppressed 20:14:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1326.214535] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1326.291218] Bluetooth: Invalid header checksum [ 1326.307091] mkiss: ax2: crc mode is auto. [ 1326.312155] Bluetooth: Invalid header checksum [ 1326.328694] netlink: 'syz-executor.1': attribute type 20 has an invalid length. 20:14:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x8000000000000000) [ 1326.401576] Bluetooth: Invalid header checksum [ 1326.421287] Bluetooth: Invalid header checksum [ 1326.511462] Bluetooth: Invalid header checksum 20:14:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1326.531621] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1326.531831] Bluetooth: Invalid header checksum 20:14:21 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1326.584698] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1326.621444] Bluetooth: Invalid header checksum 20:14:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x8100000000000000) [ 1326.641294] Bluetooth: Invalid header checksum [ 1326.647219] mkiss: ax2: crc mode is auto. 20:14:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1326.731463] Bluetooth: Invalid header checksum [ 1326.750915] mkiss: ax2: crc mode is auto. [ 1326.755173] Bluetooth: Invalid header checksum [ 1326.768553] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1326.811948] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1326.848917] Bluetooth: Invalid header checksum [ 1326.861512] Bluetooth: Invalid header checksum [ 1326.887884] audit: type=1804 audit(1625170461.497:981): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2788/bus" dev="sda1" ino=14288 res=1 20:14:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) r1 = syz_open_pts(r0, 0x800) fstatfs(r1, &(0x7f0000000100)=""/111) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x88a8ffff00000000) [ 1326.951664] Bluetooth: Invalid header checksum [ 1326.984373] Bluetooth: Invalid header checksum [ 1327.024648] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1327.043862] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1327.064488] Bluetooth: Invalid header checksum [ 1327.067476] mkiss: ax2: crc mode is auto. [ 1327.082104] Bluetooth: Invalid header checksum 20:14:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x8c02000000000000) 20:14:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1327.172021] Bluetooth: Invalid header checksum [ 1327.191231] Bluetooth: Invalid header checksum [ 1327.196890] mkiss: ax2: crc mode is auto. [ 1327.228229] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1327.265612] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1327.283505] Bluetooth: Invalid header checksum [ 1327.301679] Bluetooth: Invalid header checksum 20:14:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x8d01000000000000) 20:14:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x8, @remote}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="ea75413fd531567a0f42efcef937789f1b2118a0b5117a549fe87d600d45d2e8e1a1a3eca67951eae0816749b674cd673561ccdbec3bb60081856bded320eb0849698dddd47ed4d45aac1ee0867d15a55801c5ed4c8063f2b8273ef88d8fda95339c0543daa4a5808ffa313e09b4746e03e2f7f45e888c428e27b395d769b47b392abd707f46b25ca6711f9fb67f6526265bc2dfd8ce754971f2f716bf3920eba923f672493cedecb4a814ced58f57fc2df8a08270bf64feff62484f1d3de2d5d9d818635605a9acdf5d46feba", 0xcd}, {&(0x7f0000000040)="60e4", 0x2}, {&(0x7f0000001280)="24d7d53030ab116a394017", 0xb}, {&(0x7f00000012c0)="64d01cc8c772ad438627a69f50a0d663380e9bb08426945325477b96ff5890fa137139fa15053be5f54819acb06324d6726063d4847e06f012054e50bc75d58a0bb5be3addeac0203788c356a15b66100eaa4f16ac29ea88f0e7b2ad938bb3e1cae72b23ad6d0e8ddbf3d21f601111e596cf69fa31c42a4eb65aa5f8b0b092e7ddb12525e02943b7acd0c551d11689c645d0fdec559f03aa1cf80f359f921f448d6a845ec29fa66318c8424596751d49", 0xb0}], 0x5}, 0x8000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) [ 1327.392382] Bluetooth: Invalid header checksum [ 1327.412512] Bluetooth: Invalid header checksum [ 1327.501861] Bluetooth: Invalid header checksum [ 1327.521539] Bluetooth: Invalid header checksum 20:14:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x9b03000000000000) [ 1327.550544] mkiss: ax2: crc mode is auto. [ 1327.613064] Bluetooth: Invalid header checksum [ 1327.631646] Bluetooth: Invalid header checksum [ 1327.645115] mkiss: ax2: crc mode is auto. 20:14:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1327.721256] Bluetooth: Invalid header checksum [ 1327.741346] Bluetooth: Invalid header checksum 20:14:22 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:14:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x9effffff00000000) 20:14:22 executing program 2: socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0xa00, 0x44, 0x0, 0x8, 0xc, "ee75b8e48f71cc7f2820658e4b9162fda2c7b7"}) [ 1327.835546] Bluetooth: Invalid header checksum [ 1327.851314] Bluetooth: Invalid header checksum 20:14:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xa100000000000000) [ 1327.935791] mkiss: ax2: crc mode is auto. [ 1327.949486] Bluetooth: Invalid header checksum [ 1327.961793] Bluetooth: Invalid header checksum [ 1328.016349] audit: type=1804 audit(1625170462.627:982): pid=5048 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2789/bus" dev="sda1" ino=14089 res=1 [ 1328.065806] Bluetooth: Invalid header checksum [ 1328.071559] Bluetooth: Invalid header checksum 20:14:22 executing program 2: getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000140)=0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) 20:14:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:22 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:14:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xac01000000000000) [ 1328.165455] Bluetooth: Invalid header checksum [ 1328.181536] Bluetooth: Invalid header checksum [ 1328.228362] mkiss: ax2: crc mode is auto. [ 1328.258850] audit: type=1804 audit(1625170462.867:983): pid=5070 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2790/bus" dev="sda1" ino=14302 res=1 20:14:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xae01000000000000) [ 1328.309043] Bluetooth: Invalid header checksum [ 1328.313950] Bluetooth: Invalid header checksum [ 1328.322781] Bluetooth: hci6: Frame reassembly failed (-84) [ 1328.343691] mkiss: ax2: crc mode is auto. 20:14:23 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1328.401401] Bluetooth: Invalid header checksum [ 1328.408104] Bluetooth: Invalid header checksum [ 1328.423594] Bluetooth: hci6: Frame reassembly failed (-84) 20:14:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x408200, 0x0) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000140)=""/42, 0x2a}, {&(0x7f0000000180)=""/222, 0xde}, {&(0x7f0000000280)=""/113, 0x71}, {&(0x7f0000000440)=""/242, 0xf2}], 0x4, 0x0, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000040)={0x1f, 0x8, 0x1, 0x6d2, 0x8}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSBRKP(r2, 0x5425, 0x4) [ 1328.511193] Bluetooth: Invalid header checksum [ 1328.516136] Bluetooth: Invalid header checksum [ 1328.544183] audit: type=1804 audit(1625170463.157:984): pid=5103 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2791/bus" dev="sda1" ino=14313 res=1 [ 1328.575530] mkiss: ax2: crc mode is auto. [ 1328.621242] Bluetooth: Invalid header checksum [ 1328.621258] Bluetooth: Invalid header checksum 20:14:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xc801000000000000) [ 1328.679022] mkiss: ax2: crc mode is auto. [ 1328.738945] Bluetooth: Invalid header checksum [ 1328.744157] Bluetooth: Invalid header checksum [ 1328.842137] Bluetooth: Invalid header checksum [ 1328.847017] Bluetooth: Invalid header checksum 20:14:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xe003000000000000) 20:14:23 executing program 2: request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='/dev/ptmx\x00', 0xfffffffffffffffb) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_pts(r0, 0x81) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1328.951258] Bluetooth: Invalid header checksum [ 1328.956114] Bluetooth: Invalid header checksum 20:14:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xe300000000000000) [ 1329.061876] Bluetooth: Invalid header checksum [ 1329.066698] Bluetooth: Invalid header checksum 20:14:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) pread64(r2, &(0x7f0000000180)=""/80, 0x50, 0x5) r3 = syz_open_pts(r1, 0x400200) signalfd(r3, &(0x7f0000000200)={[0x12b]}, 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000100)={0x7, 0x1000, 0x7, 0x9, 0xb, "db38d5ca7bb48124dc24fecf8bac04eb14878b"}) [ 1329.171341] Bluetooth: Invalid header checksum [ 1329.176317] Bluetooth: Invalid header checksum [ 1329.281228] Bluetooth: Invalid header checksum [ 1329.286161] Bluetooth: Invalid header checksum [ 1329.337427] mkiss: ax2: crc mode is auto. [ 1329.391324] Bluetooth: Invalid header checksum [ 1329.396105] Bluetooth: Invalid header checksum [ 1329.426461] mkiss: ax2: crc mode is auto. [ 1329.513234] Bluetooth: Invalid header checksum [ 1329.517932] Bluetooth: Invalid header checksum [ 1329.611270] Bluetooth: Invalid header checksum [ 1329.612567] Bluetooth: Invalid header checksum [ 1329.721413] Bluetooth: Invalid header checksum [ 1329.722200] Bluetooth: Invalid header checksum [ 1329.832422] Bluetooth: Invalid header checksum [ 1329.837204] Bluetooth: Invalid header checksum [ 1329.941305] Bluetooth: Invalid header checksum [ 1329.946392] Bluetooth: Invalid header checksum [ 1330.052420] Bluetooth: Invalid header checksum [ 1330.060260] Bluetooth: Invalid header checksum [ 1330.163068] Bluetooth: Invalid header checksum [ 1330.168426] Bluetooth: Invalid header checksum [ 1330.271183] Bluetooth: Invalid header checksum [ 1330.274913] Bluetooth: Invalid header checksum [ 1330.378053] Bluetooth: hci6: command 0x1003 tx timeout [ 1330.383814] Bluetooth: hci6: sending frame failed (-49) [ 1330.390537] Bluetooth: Invalid header checksum [ 1330.395829] Bluetooth: Invalid header checksum [ 1330.491191] Bluetooth: Invalid header checksum [ 1330.503696] Bluetooth: Invalid header checksum [ 1330.602924] Bluetooth: Invalid header checksum [ 1330.617858] Bluetooth: Invalid header checksum [ 1330.711229] Bluetooth: Invalid header checksum [ 1330.721958] Bluetooth: Invalid header checksum [ 1330.823031] Bluetooth: Invalid header checksum [ 1330.832618] Bluetooth: Invalid header checksum [ 1330.931326] Bluetooth: Invalid header checksum [ 1330.952963] Bluetooth: Invalid header checksum [ 1331.042856] Bluetooth: Invalid header checksum [ 1331.061541] Bluetooth: Invalid header checksum [ 1331.151395] Bluetooth: Invalid header checksum [ 1331.171210] Bluetooth: Invalid header checksum [ 1331.271899] Bluetooth: Invalid header checksum [ 1331.281548] Bluetooth: Invalid header checksum [ 1331.371628] Bluetooth: Invalid header checksum [ 1331.391174] Bluetooth: Invalid header checksum [ 1331.488183] Bluetooth: Invalid header checksum [ 1331.503067] Bluetooth: Invalid header checksum [ 1331.594098] Bluetooth: Invalid header checksum [ 1331.613032] Bluetooth: Invalid header checksum [ 1331.703311] Bluetooth: Invalid header checksum [ 1331.722982] Bluetooth: Invalid header checksum [ 1331.815021] Bluetooth: Invalid header checksum [ 1331.831324] Bluetooth: Invalid header checksum [ 1331.927830] Bluetooth: Invalid header checksum [ 1331.943567] Bluetooth: Invalid header checksum [ 1332.047585] Bluetooth: Invalid header checksum [ 1332.062372] Bluetooth: Invalid header checksum [ 1332.143206] Bluetooth: Invalid header checksum [ 1332.172483] Bluetooth: Invalid header checksum [ 1332.251399] Bluetooth: Invalid header checksum [ 1332.283194] Bluetooth: Invalid header checksum [ 1332.365972] Bluetooth: Invalid header checksum [ 1332.391152] Bluetooth: Invalid header checksum [ 1332.452834] Bluetooth: hci6: command 0x1001 tx timeout [ 1332.458246] Bluetooth: hci6: sending frame failed (-49) [ 1332.474759] Bluetooth: Invalid header checksum [ 1332.501176] Bluetooth: Invalid header checksum [ 1332.582167] Bluetooth: Invalid header checksum [ 1332.612773] Bluetooth: Invalid header checksum [ 1332.693185] Bluetooth: Invalid header checksum [ 1332.726307] Bluetooth: Invalid header checksum [ 1332.801977] Bluetooth: Invalid header checksum [ 1332.831377] Bluetooth: Invalid header checksum [ 1332.918574] Bluetooth: Invalid header checksum [ 1332.941379] Bluetooth: Invalid header checksum [ 1333.021151] Bluetooth: Invalid header checksum [ 1333.051843] Bluetooth: Invalid header checksum [ 1333.133192] Bluetooth: Invalid header checksum [ 1333.161778] Bluetooth: Invalid header checksum [ 1333.247784] Bluetooth: Invalid header checksum [ 1333.271184] Bluetooth: Invalid header checksum [ 1333.353126] Bluetooth: Invalid header checksum [ 1333.382213] Bluetooth: Invalid header checksum [ 1333.461145] Bluetooth: Invalid header checksum [ 1333.491211] Bluetooth: Invalid header checksum [ 1333.572076] Bluetooth: Invalid header checksum [ 1333.603147] Bluetooth: Invalid header checksum [ 1333.686371] Bluetooth: Invalid header checksum [ 1333.711642] Bluetooth: Invalid header checksum [ 1333.791207] Bluetooth: Invalid header checksum [ 1333.822908] Bluetooth: Invalid header checksum [ 1333.901394] Bluetooth: Invalid header checksum [ 1333.931199] Bluetooth: Invalid header checksum [ 1334.011199] Bluetooth: Invalid header checksum [ 1334.041097] Bluetooth: Invalid header checksum [ 1334.121158] Bluetooth: Invalid header checksum [ 1334.161251] Bluetooth: Invalid header checksum [ 1334.231121] Bluetooth: Invalid header checksum [ 1334.271285] Bluetooth: Invalid header checksum [ 1334.341171] Bluetooth: Invalid header checksum [ 1334.391370] Bluetooth: Invalid header checksum [ 1334.451232] Bluetooth: Invalid header checksum [ 1334.501145] Bluetooth: Invalid header checksum [ 1334.531013] Bluetooth: hci6: command 0x1009 tx timeout [ 1334.571209] Bluetooth: Invalid header checksum [ 1334.611299] Bluetooth: Invalid header checksum [ 1334.691468] Bluetooth: Invalid header checksum [ 1334.721147] Bluetooth: Invalid header checksum [ 1334.801514] Bluetooth: Invalid header checksum [ 1334.831225] Bluetooth: Invalid header checksum [ 1334.911207] Bluetooth: Invalid header checksum [ 1334.941228] Bluetooth: Invalid header checksum [ 1335.021153] Bluetooth: Invalid header checksum [ 1335.051188] Bluetooth: Invalid header checksum [ 1335.134582] Bluetooth: Invalid header checksum [ 1335.161208] Bluetooth: Invalid header checksum [ 1335.241176] Bluetooth: Invalid header checksum [ 1335.271389] Bluetooth: Invalid header checksum [ 1335.351210] Bluetooth: Invalid header checksum [ 1335.392004] Bluetooth: Invalid header checksum [ 1335.461184] Bluetooth: Invalid header checksum [ 1335.501340] Bluetooth: Invalid header checksum [ 1335.571307] Bluetooth: Invalid header checksum [ 1335.611260] Bluetooth: Invalid header checksum [ 1335.691258] Bluetooth: Invalid header checksum [ 1335.721323] Bluetooth: Invalid header checksum [ 1335.801237] Bluetooth: Invalid header checksum [ 1335.831155] Bluetooth: Invalid header checksum [ 1335.911194] Bluetooth: Invalid header checksum [ 1335.941233] Bluetooth: Invalid header checksum [ 1336.021230] Bluetooth: Invalid header checksum [ 1336.051290] Bluetooth: Invalid header checksum [ 1336.141327] Bluetooth: Invalid header checksum [ 1336.161197] Bluetooth: Invalid header checksum [ 1336.251289] Bluetooth: Invalid header checksum [ 1336.281242] Bluetooth: Invalid header checksum [ 1336.361189] Bluetooth: Invalid header checksum [ 1336.391240] Bluetooth: Invalid header checksum [ 1336.471152] Bluetooth: Invalid header checksum [ 1336.501256] Bluetooth: Invalid header checksum [ 1336.581763] Bluetooth: Invalid header checksum [ 1336.611142] Bluetooth: Invalid header checksum [ 1336.691305] Bluetooth: Invalid header checksum [ 1336.721880] Bluetooth: Invalid header checksum [ 1336.811268] Bluetooth: Invalid header checksum [ 1336.831129] Bluetooth: Invalid header checksum [ 1336.931221] Bluetooth: Invalid header checksum [ 1336.941616] Bluetooth: Invalid header checksum [ 1337.051469] Bluetooth: Invalid header checksum [ 1337.056290] Bluetooth: Invalid header checksum [ 1337.161245] Bluetooth: Invalid header checksum [ 1337.171964] Bluetooth: Invalid header checksum [ 1337.271415] Bluetooth: Invalid header checksum [ 1337.281640] Bluetooth: Invalid header checksum [ 1337.381428] Bluetooth: Invalid header checksum [ 1337.391870] Bluetooth: Invalid header checksum [ 1337.491253] Bluetooth: Invalid header checksum [ 1337.501521] Bluetooth: Invalid header checksum [ 1337.601206] Bluetooth: Invalid header checksum [ 1337.611787] Bluetooth: Invalid header checksum [ 1337.711269] Bluetooth: Invalid header checksum [ 1337.721519] Bluetooth: Invalid header checksum [ 1337.821178] Bluetooth: Invalid header checksum [ 1337.831831] Bluetooth: Invalid header checksum [ 1337.941323] Bluetooth: Invalid header checksum [ 1337.942191] Bluetooth: Invalid header checksum [ 1338.051210] Bluetooth: Invalid header checksum [ 1338.061927] Bluetooth: Invalid header checksum [ 1338.161227] Bluetooth: Invalid header checksum [ 1338.181665] Bluetooth: Invalid header checksum [ 1338.271254] Bluetooth: Invalid header checksum [ 1338.301429] Bluetooth: Invalid header checksum [ 1338.381303] Bluetooth: Invalid header checksum [ 1338.411264] Bluetooth: Invalid header checksum [ 1338.491490] Bluetooth: Invalid header checksum [ 1338.531494] Bluetooth: Invalid header checksum [ 1338.601275] Bluetooth: Invalid header checksum [ 1338.641280] Bluetooth: Invalid header checksum [ 1338.711289] Bluetooth: Invalid header checksum [ 1338.751164] Bluetooth: Invalid header checksum [ 1338.821137] Bluetooth: Invalid header checksum [ 1338.861395] Bluetooth: Invalid header checksum 20:14:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xf0ffffff00000000) 20:14:33 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:14:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x104) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000100)) 20:14:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000300)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000400)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f00000004c0)={&(0x7f0000000340)=[r4, 0x0, 0x0, 0x0], &(0x7f0000000440)=[r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl0\x00', r2, 0x2f, 0x4, 0xa2, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x1, 0x10, 0x6}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_MASTER={0x8, 0x4, r9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)=@RTM_DELMDB={0x158, 0x55, 0x20, 0x70bd2b, 0x25dfdbfb, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x1, {@in6_addr=@loopback, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x3, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x4, {@ip4=@broadcast, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc1b3}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x0, {@in6_addr=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x2, 0x4, {@in6_addr=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x2, 0x1, {@in6_addr=@loopback, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x3, 0x0, {@ip4=@multicast2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x3, 0x4, {@in6_addr=@empty, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x0, 0x2, {@ip4=@multicast1, 0x800}}}]}, 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x40005) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x405, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x40) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/66, 0x42}], 0x1, 0x3f, 0x4) [ 1338.942848] Bluetooth: Invalid header checksum [ 1338.971159] Bluetooth: Invalid header checksum [ 1339.012082] validate_nla: 18 callbacks suppressed [ 1339.012091] netlink: 'syz-executor.1': attribute type 20 has an invalid length. 20:14:33 executing program 2: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000180)=0x2) accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x10, 0x80800) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/28, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r0, r2, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) [ 1339.041434] audit: type=1804 audit(1625170473.647:985): pid=5402 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2792/bus" dev="sda1" ino=14384 res=1 [ 1339.066834] Bluetooth: hci6: Frame reassembly failed (-84) [ 1339.066880] Bluetooth: Invalid header checksum [ 1339.081507] Bluetooth: Invalid header checksum [ 1339.094442] netlink: 'syz-executor.1': attribute type 20 has an invalid length. 20:14:33 executing program 5: write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) close(r1) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) 20:14:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xfc00000000000000) [ 1339.176150] Bluetooth: Invalid header checksum [ 1339.189212] Bluetooth: hci6: Frame reassembly failed (-84) [ 1339.196583] Bluetooth: Invalid header checksum [ 1339.206001] IPv6: Can't replace route, no match found [ 1339.258207] mkiss: ax2: crc mode is auto. [ 1339.291652] Bluetooth: Invalid header checksum [ 1339.299644] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1339.306285] Bluetooth: Invalid header checksum 20:14:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000280)=0x952c, 0x4) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x2, 0x401, 0x7, 0x832]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800010000000000000040000a0000000000000000000000080006004cbb37bc31ea", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3f, 0x7b, 0x7, 0x2, 0x0, 0x8, 0x203f8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x8, 0x792}, 0x40c08, 0x7ff, 0x4003, 0x1, 0x6, 0x1, 0x6, 0x0, 0x7, 0x0, 0x1}, 0x0, 0x7, r0, 0x3) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5, 0x3, 0x40, 0x8f, 0x0, 0x80000001, 0x400, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9c6, 0x2, @perf_config_ext={0x7, 0x1}, 0x20, 0x8, 0x1, 0x1, 0x3f, 0xfa8, 0x2, 0x0, 0x7fffffff, 0x0, 0x3f}, 0xffffffffffffffff, 0x8, r1, 0x9) [ 1339.335150] mkiss: ax2: crc mode is auto. [ 1339.339609] netlink: 'syz-executor.1': attribute type 20 has an invalid length. 20:14:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 20:14:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xfc03000000000000) [ 1339.403238] Bluetooth: Invalid header checksum [ 1339.411863] Bluetooth: Invalid header checksum [ 1339.470536] mkiss: ax2: crc mode is auto. [ 1339.476997] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1339.509273] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1339.517517] Bluetooth: Invalid header checksum [ 1339.523608] Bluetooth: Invalid header checksum [ 1339.558725] mkiss: ax2: crc mode is auto. [ 1339.623000] Bluetooth: Invalid header checksum [ 1339.634331] Bluetooth: Invalid header checksum [ 1339.731260] Bluetooth: Invalid header checksum [ 1339.747089] Bluetooth: Invalid header checksum [ 1339.847409] Bluetooth: Invalid header checksum [ 1339.852507] Bluetooth: Invalid header checksum [ 1339.951159] Bluetooth: Invalid header checksum [ 1339.962132] Bluetooth: Invalid header checksum [ 1340.066009] Bluetooth: Invalid header checksum [ 1340.073931] Bluetooth: Invalid header checksum [ 1340.171171] Bluetooth: Invalid header checksum [ 1340.182008] Bluetooth: Invalid header checksum [ 1340.291241] Bluetooth: Invalid header checksum [ 1340.293917] Bluetooth: Invalid header checksum [ 1340.401329] Bluetooth: Invalid header checksum [ 1340.402148] Bluetooth: Invalid header checksum [ 1340.511263] Bluetooth: Invalid header checksum [ 1340.511294] Bluetooth: Invalid header checksum [ 1340.621398] Bluetooth: Invalid header checksum [ 1340.626197] Bluetooth: Invalid header checksum [ 1340.731497] Bluetooth: Invalid header checksum [ 1340.732090] Bluetooth: Invalid header checksum [ 1340.841302] Bluetooth: Invalid header checksum [ 1340.841472] Bluetooth: Invalid header checksum [ 1340.951304] Bluetooth: Invalid header checksum [ 1340.951876] Bluetooth: Invalid header checksum [ 1341.061403] Bluetooth: Invalid header checksum [ 1341.071837] Bluetooth: Invalid header checksum [ 1341.101021] Bluetooth: hci6: command 0x1003 tx timeout [ 1341.106436] Bluetooth: hci6: sending frame failed (-49) [ 1341.171164] Bluetooth: Invalid header checksum [ 1341.181962] Bluetooth: Invalid header checksum [ 1341.281143] Bluetooth: Invalid header checksum [ 1341.291550] Bluetooth: Invalid header checksum [ 1341.391450] Bluetooth: Invalid header checksum [ 1341.411586] Bluetooth: Invalid header checksum [ 1341.501144] Bluetooth: Invalid header checksum [ 1341.531439] Bluetooth: Invalid header checksum [ 1341.611275] Bluetooth: Invalid header checksum [ 1341.651780] Bluetooth: Invalid header checksum [ 1341.721274] Bluetooth: Invalid header checksum [ 1341.761224] Bluetooth: Invalid header checksum [ 1341.831231] Bluetooth: Invalid header checksum [ 1341.871211] Bluetooth: Invalid header checksum [ 1341.951307] Bluetooth: Invalid header checksum [ 1341.981185] Bluetooth: Invalid header checksum [ 1342.071580] Bluetooth: Invalid header checksum [ 1342.091192] Bluetooth: Invalid header checksum [ 1342.181287] Bluetooth: Invalid header checksum [ 1342.211196] Bluetooth: Invalid header checksum [ 1342.291239] Bluetooth: Invalid header checksum [ 1342.331296] Bluetooth: Invalid header checksum [ 1342.401211] Bluetooth: Invalid header checksum [ 1342.441329] Bluetooth: Invalid header checksum [ 1342.521178] Bluetooth: Invalid header checksum [ 1342.551275] Bluetooth: Invalid header checksum [ 1342.631188] Bluetooth: Invalid header checksum [ 1342.671264] Bluetooth: Invalid header checksum [ 1342.741165] Bluetooth: Invalid header checksum [ 1342.781159] Bluetooth: Invalid header checksum [ 1342.851324] Bluetooth: Invalid header checksum [ 1342.891279] Bluetooth: Invalid header checksum [ 1342.971297] Bluetooth: Invalid header checksum [ 1343.001198] Bluetooth: Invalid header checksum [ 1343.091408] Bluetooth: Invalid header checksum [ 1343.111186] Bluetooth: Invalid header checksum [ 1343.170959] Bluetooth: hci6: command 0x1001 tx timeout [ 1343.176298] Bluetooth: hci6: sending frame failed (-49) [ 1343.211286] Bluetooth: Invalid header checksum [ 1343.221936] Bluetooth: Invalid header checksum [ 1343.321183] Bluetooth: Invalid header checksum [ 1343.331963] Bluetooth: Invalid header checksum [ 1343.431251] Bluetooth: Invalid header checksum [ 1343.451253] Bluetooth: Invalid header checksum [ 1343.541150] Bluetooth: Invalid header checksum [ 1343.562012] Bluetooth: Invalid header checksum [ 1343.651303] Bluetooth: Invalid header checksum [ 1343.681286] Bluetooth: Invalid header checksum [ 1343.771219] Bluetooth: Invalid header checksum [ 1343.791174] Bluetooth: Invalid header checksum [ 1343.891287] Bluetooth: Invalid header checksum [ 1343.901661] Bluetooth: Invalid header checksum [ 1344.012138] Bluetooth: Invalid header checksum [ 1344.016858] Bluetooth: Invalid header checksum [ 1344.121351] Bluetooth: Invalid header checksum [ 1344.131901] Bluetooth: Invalid header checksum [ 1344.237003] Bluetooth: Invalid header checksum [ 1344.251717] Bluetooth: Invalid header checksum [ 1344.341267] Bluetooth: Invalid header checksum [ 1344.361199] Bluetooth: Invalid header checksum [ 1344.451310] Bluetooth: Invalid header checksum [ 1344.471184] Bluetooth: Invalid header checksum [ 1344.561328] Bluetooth: Invalid header checksum [ 1344.581295] Bluetooth: Invalid header checksum [ 1344.672054] Bluetooth: Invalid header checksum [ 1344.691227] Bluetooth: Invalid header checksum [ 1344.781135] Bluetooth: Invalid header checksum [ 1344.801205] Bluetooth: Invalid header checksum [ 1344.891246] Bluetooth: Invalid header checksum [ 1344.911218] Bluetooth: Invalid header checksum [ 1345.001175] Bluetooth: Invalid header checksum [ 1345.021164] Bluetooth: Invalid header checksum [ 1345.111263] Bluetooth: Invalid header checksum [ 1345.131243] Bluetooth: Invalid header checksum [ 1345.231210] Bluetooth: Invalid header checksum [ 1345.241613] Bluetooth: Invalid header checksum [ 1345.251303] Bluetooth: hci6: command 0x1009 tx timeout [ 1345.352108] Bluetooth: Invalid header checksum [ 1345.356910] Bluetooth: Invalid header checksum [ 1345.461246] Bluetooth: Invalid header checksum [ 1345.461250] Bluetooth: Invalid header checksum [ 1345.571312] Bluetooth: Invalid header checksum [ 1345.571317] Bluetooth: Invalid header checksum [ 1345.681240] Bluetooth: Invalid header checksum [ 1345.681270] Bluetooth: Invalid header checksum [ 1345.791305] Bluetooth: Invalid header checksum [ 1345.792075] Bluetooth: Invalid header checksum [ 1345.901258] Bluetooth: Invalid header checksum [ 1345.911739] Bluetooth: Invalid header checksum [ 1346.011445] Bluetooth: Invalid header checksum [ 1346.021940] Bluetooth: Invalid header checksum [ 1346.125199] Bluetooth: Invalid header checksum [ 1346.131709] Bluetooth: Invalid header checksum [ 1346.232244] Bluetooth: Invalid header checksum [ 1346.251336] Bluetooth: Invalid header checksum [ 1346.341235] Bluetooth: Invalid header checksum [ 1346.361274] Bluetooth: Invalid header checksum [ 1346.451289] Bluetooth: Invalid header checksum [ 1346.481255] Bluetooth: Invalid header checksum [ 1346.561295] Bluetooth: Invalid header checksum [ 1346.591310] Bluetooth: Invalid header checksum [ 1346.671184] Bluetooth: Invalid header checksum [ 1346.711288] Bluetooth: Invalid header checksum [ 1346.781376] Bluetooth: Invalid header checksum [ 1346.822121] Bluetooth: Invalid header checksum [ 1346.901238] Bluetooth: Invalid header checksum [ 1346.943365] Bluetooth: Invalid header checksum [ 1347.011266] Bluetooth: Invalid header checksum [ 1347.061261] Bluetooth: Invalid header checksum [ 1347.121174] Bluetooth: Invalid header checksum [ 1347.171251] Bluetooth: Invalid header checksum [ 1347.231323] Bluetooth: Invalid header checksum [ 1347.291587] Bluetooth: Invalid header checksum [ 1347.341156] Bluetooth: Invalid header checksum [ 1347.411276] Bluetooth: Invalid header checksum [ 1347.451352] Bluetooth: Invalid header checksum [ 1347.521209] Bluetooth: Invalid header checksum [ 1347.561170] Bluetooth: Invalid header checksum [ 1347.631130] Bluetooth: Invalid header checksum [ 1347.681327] Bluetooth: Invalid header checksum [ 1347.741145] Bluetooth: Invalid header checksum [ 1347.791344] Bluetooth: Invalid header checksum [ 1347.851264] Bluetooth: Invalid header checksum [ 1347.901230] Bluetooth: Invalid header checksum [ 1347.961165] Bluetooth: Invalid header checksum [ 1348.011233] Bluetooth: Invalid header checksum [ 1348.071196] Bluetooth: Invalid header checksum [ 1348.131268] Bluetooth: Invalid header checksum [ 1348.181167] Bluetooth: Invalid header checksum [ 1348.241232] Bluetooth: Invalid header checksum [ 1348.301681] Bluetooth: Invalid header checksum [ 1348.351248] Bluetooth: Invalid header checksum [ 1348.421541] Bluetooth: Invalid header checksum [ 1348.461343] Bluetooth: Invalid header checksum [ 1348.531490] Bluetooth: Invalid header checksum [ 1348.571483] Bluetooth: Invalid header checksum [ 1348.651436] Bluetooth: Invalid header checksum [ 1348.682070] Bluetooth: Invalid header checksum [ 1348.772446] Bluetooth: Invalid header checksum [ 1348.791260] Bluetooth: Invalid header checksum [ 1348.881253] Bluetooth: Invalid header checksum [ 1348.901458] Bluetooth: Invalid header checksum [ 1349.001412] Bluetooth: Invalid header checksum [ 1349.011612] Bluetooth: Invalid header checksum [ 1349.122368] Bluetooth: Invalid header checksum [ 1349.126991] Bluetooth: Invalid header checksum 20:14:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xfe80000000000000) 20:14:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000100)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) 20:14:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:43 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) [ 1349.237214] Bluetooth: Invalid header checksum [ 1349.242273] Bluetooth: Invalid header checksum [ 1349.283267] audit: type=1804 audit(1625170483.897:986): pid=5509 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2793/bus" dev="sda1" ino=14066 res=1 [ 1349.313871] mkiss: ax2: crc mode is auto. [ 1349.321539] netlink: 'syz-executor.1': attribute type 20 has an invalid length. 20:14:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd29, 0x0, {0xa, 0x14, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) [ 1349.341300] Bluetooth: Invalid header checksum [ 1349.352002] Bluetooth: Invalid header checksum 20:14:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xfec0000000000000) [ 1349.398156] mkiss: ax2: crc mode is auto. [ 1349.451806] Bluetooth: Invalid header checksum [ 1349.471928] Bluetooth: Invalid header checksum 20:14:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x2, 0xffffffff, 0x1, 0x800000, 0x0, "efe89d6228d1ed5bbb73812388a01fcb90e38c"}) syz_open_dev$tty1(0xc, 0x4, 0x2) 20:14:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x3, 0x8, &(0x7f0000000640)=[{&(0x7f0000000140)="0bed0c762382df2bc4ee8a9c07e5c5d4f11274a82e43f648bc0a8d169ec6896ccbf5165f51f47e9f362cbb1060d67691154ca5228fcc895fce413f63cb3cb96ca3a745e16a59fc718b899c7599f7e16605da7f47be04735b22f661857db89004e8878edd175cd00f3f8530891490c1ef659cd2604056154db9a7ae3b5fed402cfe7621acfbe71fec3959dd168f42d16262a0273c49b68a2185bd96aae5d029c894d5370d1267d2c208b0e577c1e8b2289f89ba5b60397f1620eba2e2", 0xbc, 0x1}, {&(0x7f0000000200)="3e624cb7a6ced9c333581b2307b1904a1712f5b26a6af9e0eeefed5e776f62e708c0329c", 0x24, 0x9}, {&(0x7f0000000240)="9be969130885cc1e98cbd403072c2dac1b6b15b60a08bc2e000798cd61678b9fdc6f7fbf27639ebe482c44baabdca8d5ae445c764d9cfc62307355ccc02d3d56b17f2f918330b781afbd73eeac923eeb19b6c5299ffea0b2e9094dd0e914bb81e43d64802beb18babe32056cbfdd29e02f924d3940e313e623f022e7c1c32f5ddf3fac9eb31c736f42596f5d1be3c06bc61a7d9a3adb8128ea4c95ab7b68e13b086f3a195c8624bde90b4dfd0b", 0xad, 0x40}, {&(0x7f0000000300)="1c332638af6b0f978d0505ff666042c092c22a1e4812fce2b8fcea0ea0cd1fcd054d175fa4e1c60500e06cd929cbe4284e378b1d8e9a48a8507f47e2c347996dce2a617841d2ace7bad629c291e5ed2216d53ae77ca07860caf891f4ac32a5c15bdaf656e5526236bb3d7c5944f340a79d83db8c4047d79550b1d7546930ec1b0e19e183", 0x84, 0x6}, {&(0x7f00000003c0)="dcba9e494d1da57369b61b0d0c6766293d543e4438f960fae22ed8f83d61416367e538c355f046245252a91c3a03203df02a70f74f6df8e682208f", 0x3b, 0x6}, {&(0x7f0000000400)="c1e16f26092fe0fab0fe5f89b8caab35c3fd0511f20e79862a6d7cb936fddb6722bccaa70b87b98dd40f46a59aa8ac177ffac6df212e7594ea73a4aa72d5adb2dd431889908f492f11f08d4f1d09ed86f43d591d62d26aa3789c11727aec4fab732d5f241a9ad107531d26f2410c6a504a78e00f6d24c5776bb1d8ea21e2a982eb83e223584be635d87c92b7e49ebd97c8f20089e9984297611739497c21317d678e05fa", 0xa4, 0x1}, {&(0x7f00000004c0)="8ff2afba2e6831a2f4552aaa66047a30b074b888e4b448fe11c0844c7c8f732eb5c12cab3fa1a70980b9105ebabdbd79b9034f93505cc41157922bcee5360426e97cad791df0407f83f14ebd1fb310a8dadf8fbdaf52d4960db5242b3ccc6bb19c71321198f15eded1577d84acbbde3bb53b38f93cb8f3b586c0af826832bdac67d3edc30506", 0x86, 0x4}, {&(0x7f0000000580)="77e8cbc78ad70c2c426a13819d5333e153c79c84da0422e6f3c156fead80b231f0d41feb2f5db58c3a11b0c95fbc41c7bf5c5c7c389569eae64eaf880e662f7d82bcfe62fab14683add09c9df97872c3821f424792f940a5dd6f9f164a90fb5245700a97bde4051eda8885c2b308e1559343d036338bc1fe9c349353123996f8088d3566fbccd88612", 0x89}], 0x400000, &(0x7f0000000700)={[{@jqfmt_vfsv0}, {@inline_dentry}, {@usrjquota={'usrjquota', 0x3d, '$&'}}, {@noextent_cache}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@usrjquota={'usrjquota', 0x3d, '{.'}}, {@alloc_mode_def}, {@nodiscard}], [{@euid_lt}, {@permit_directio}]}) preadv(r2, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/241, 0xf1}, {&(0x7f00000008c0)=""/151, 0x97}, {&(0x7f0000000980)=""/95, 0x5f}, {&(0x7f0000000a00)=""/4, 0x4}], 0x4, 0x401, 0x5) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) [ 1349.505627] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1349.529136] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1349.563243] Bluetooth: Invalid header checksum [ 1349.581406] Bluetooth: Invalid header checksum 20:14:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xff00000000000000) [ 1349.644783] mkiss: ax2: crc mode is auto. [ 1349.677664] Bluetooth: Invalid header checksum 20:14:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') fstat(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000001000)=0x0, &(0x7f0000001040), &(0x7f0000001080)) syz_mount_image$nfs(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000c00)="ee382b489f4d8671fe3e4d82e473369e7bf590b9aaa44d29cae4ecbd3441bbc85f02fc588fc55a806bd59563ee8bf7b796da69508363ceb14bf03115003ee60f20cc5959f614ad238a271e9a247f8ee1b14d3b3913de19ad8da6f6aa2dd213338c036cdff8e00a2a1e910423069bfc0383a78640803907c4401c15bba54a5bf6f0957342cf436286245710a939e59078476f052b99620fe5e844af8175a29057df2236da9c25857e9a628c0c581091fd43b5d6d2ca66a191ff8411bc2e15962e1ace49b22a3b4f4ddeee0a27051500", 0xcf, 0x5}, {&(0x7f0000000d00)="2621189bad20e9cf491292e9009c1c771cf370f7617176fc7a7fa4406f945177026425e8672b429085fed248c15e68a58c7014bb244bf6678da2e924c2cdbd7a4a98905752d2f340294514139c851fdce4e9b3d31057047a4df34409d505959e688074edaeb13ddda40682ba66224ee71907531ddfe8a2c3776c2d83e62dc2e7f004bb8ef73b", 0x86, 0xfcd3}, {&(0x7f0000000dc0)="1723bea02c3abcd7f2b069708573b2c7b1a35d8e135abcb782202e274547c24a2ddbb42b344e84c72bedb73b75045912ad86c63a81ff6430cab9bc9a435f1e61f6e7327c2493c0e169bf305a16e2ee64f62103154a3a83b8061d90274dbe8b97bde61dec207aaaecc6b8fa3fc2838363b78dc022eb1671280ec11c1c697c0af2ea", 0x81, 0x1}, {&(0x7f0000000e80)="772af29e727a545a1a81f4de12a93bc7f32af82f25b24c76b909ac3ac4711a76f4cfc4e96392f6031ce83d23c4706928c0751fccf9f448c04e62fec184ec3578d11325309cb9f1193884013f89de4231d990acf9a6ae5d8e18524528d57ac6f77decb083a68cc2ba53b0b852763ab19366a459cc857b4858ee430911dcaf3db889569f1aa082fb6b4cfc107bd56df68537f5adc1004bcd32328739c07d9f52734e5d8a7faaa91674961d0cc92b733594e8f84711318ab27d9cd5a5605e008e45e218f4f5ad2179cbee9cdedca9f7a7f36e6d2c0f53f6ec19828725261be636873baea3d1a887c54fd8dafbd8916bd6a0dc5c2b3d0f", 0xf5, 0x6}], 0x1042000, &(0x7f00000010c0)={[{}, {'cbq\x00'}, {'sfq\x00'}, {'{@{^\xfa]\x1b]/'}, {'taprio\x00'}, {'sfq\x00'}, {'sfq\x00'}, {}], [{@euid_gt={'euid>', r4}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@context={'context', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, 'taprio\x00'}}, {@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@appraise_type}, {@euid_gt={'euid>', r5}}]}) preadv(r3, &(0x7f00000017c0), 0x333, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000680)=@deltclass={0x4e0, 0x29, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffe0, 0xa}, {0x7, 0xb}, {0xc, 0xf}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x7f, 0xff}}, @TCA_RATE={0x6, 0x5, {0xd5, 0x81}}, @tclass_kind_options=@c_cbq={{0x8}, {0x488, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0xff, 0x1, 0x0, 0x2, 0x2, 0x3}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2d, 0x1, 0x2, 0xfe, 0x80000001, 0x201f, 0x1, 0x1000000}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x37, 0x1, 0x1e, 0xc5, 0x3ff, 0xfffffff9, 0x12000000, 0xffffffff}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x1, 0x1, 0x0, 0x3f}}, @TCA_CBQ_RATE={0x10, 0x5, {0xff, 0x1, 0x4, 0x8, 0xffff, 0x6}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x2, 0x4, 0x5, 0x6, 0x3f, 0x4}}, @TCA_CBQ_RATE={0x10, 0x5, {0x6b, 0x0, 0x101, 0x808d, 0x7}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x7, 0x9, 0x7fff, 0x0, 0x800, 0xaf9, 0x2, 0x9, 0x8, 0x100, 0x9, 0x683, 0x6, 0x1, 0x1, 0x1, 0x8, 0x9, 0x0, 0x80000001, 0x6, 0xf4, 0x80000001, 0x4cf4, 0x0, 0x8, 0x1, 0x11669653, 0x0, 0x9, 0xffff7fff, 0x40, 0x2, 0xffff, 0x0, 0x1, 0x5, 0x80000000, 0x80000000, 0x30, 0x4b1, 0xfffffff9, 0x200, 0xfffff001, 0x9, 0x800, 0xff, 0x6, 0x1, 0xf3b, 0x5, 0x8, 0x0, 0x6, 0x7fff, 0x43ef323, 0x7ff, 0x8001, 0x8001, 0xffffff7f, 0x8, 0x1, 0x5, 0x2, 0x0, 0x3080, 0x5, 0x33, 0xd16, 0x1, 0x1, 0x2a8, 0x8, 0x9, 0x9, 0x8, 0x2, 0xff, 0x7, 0x10000, 0x7, 0x0, 0xffff, 0x8, 0x7, 0x1, 0x5, 0x3, 0xa66, 0xa, 0x0, 0x6, 0xb4f, 0xc866f2e, 0x9, 0xfffffff8, 0xfff, 0x40, 0x101, 0x8, 0x7fff, 0x400, 0x3, 0x1c, 0x7fffffff, 0xed55, 0x401, 0x8, 0x7ff, 0x1ff, 0x4, 0x1ff, 0x6, 0xffffc31b, 0x7ff, 0xed, 0x8000, 0x0, 0x3, 0x619c698f, 0x6, 0x5f, 0xffffffff, 0x2, 0x2, 0x81, 0x0, 0x6, 0x3, 0x8, 0x9, 0x1f, 0xd292, 0x2, 0x80, 0x9, 0x101, 0x7, 0x0, 0x4, 0x6, 0x9, 0x4, 0x7, 0x81, 0x8, 0x1, 0x6, 0x7, 0x1, 0xfff, 0x83, 0x2, 0x401, 0x6, 0x4, 0x3, 0x8001, 0x2, 0xffff, 0x10001, 0x2c5, 0x4, 0x9, 0x101, 0xa2, 0x4, 0x6, 0xc5, 0xa8, 0x80000000, 0x9, 0x0, 0x1af9, 0x100, 0x3, 0x5, 0x1ff, 0x4, 0x0, 0x1, 0x7fff, 0xf910, 0x7fffffff, 0x3f, 0x1, 0xffff, 0xfff, 0xff, 0x9, 0x9, 0x44d, 0x8, 0x5, 0x9, 0x0, 0x100, 0x0, 0xcbf, 0x1, 0x4, 0xc0b, 0x9, 0x5, 0x0, 0x100, 0x7, 0xfffffffe, 0x6, 0x3, 0x1ff, 0xd57, 0x6, 0x6, 0x0, 0x0, 0x40, 0x4, 0x0, 0x400, 0x7, 0x5, 0xbf3, 0x9, 0x50fc, 0x0, 0x0, 0x0, 0xffffffff, 0x80000001, 0x9, 0x9, 0x10001, 0x3, 0x380c, 0xfa3f, 0x5, 0xefe0, 0x3ff, 0xffffffc1, 0x81, 0x1d21, 0x0, 0xff, 0x4, 0x1, 0x400, 0x7, 0x800, 0x3, 0x1ff, 0x6, 0x1, 0x5, 0x81]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x80}, 0x40005) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/155, 0x9b}, {&(0x7f00000001c0)=""/193, 0xc1}, {&(0x7f00000002c0)=""/220, 0xdc}, {&(0x7f00000003c0)=""/194, 0xc2}], 0x4, 0xb1, 0x5) [ 1349.701224] Bluetooth: Invalid header checksum [ 1349.720552] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1349.763422] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1349.781751] Bluetooth: Invalid header checksum 20:14:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1f) 20:14:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xff1c000000000000) [ 1349.810617] IPv6: Can't replace route, no match found [ 1349.821456] Bluetooth: Invalid header checksum [ 1349.844631] IPv6: Can't replace route, no match found 20:14:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) flock(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) [ 1349.896618] Bluetooth: Invalid header checksum [ 1349.913915] mkiss: ax2: crc mode is auto. [ 1349.941334] Bluetooth: Invalid header checksum [ 1349.954529] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1349.974633] IPv6: Can't replace route, no match found [ 1349.992536] mkiss: ax2: crc mode is auto. [ 1349.997100] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1350.001273] Bluetooth: Invalid header checksum [ 1350.031492] IPv6: Can't replace route, no match found [ 1350.051697] Bluetooth: Invalid header checksum [ 1350.111228] Bluetooth: Invalid header checksum 20:14:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f00001d5000/0x1000)=nil, 0x1000, 0x1800003, 0x10, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/85, &(0x7f0000000280)=0x55) syz_open_procfs(r2, &(0x7f00000001c0)='net/kcm\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0) [ 1350.161195] Bluetooth: Invalid header checksum 20:14:44 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:14:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xffffff7f00000000) 20:14:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:44 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) [ 1350.234744] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1350.241652] Bluetooth: Invalid header checksum [ 1350.259427] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1350.271437] Bluetooth: Invalid header checksum 20:14:44 executing program 2: ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1350.287890] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1350.315872] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1350.331285] Bluetooth: Invalid header checksum 20:14:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xffffffff00000000) 20:14:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) [ 1350.385658] Bluetooth: Invalid header checksum [ 1350.403638] mkiss: ax2: crc mode is auto. [ 1350.412247] Bluetooth: Invalid header checksum [ 1350.419304] Bluetooth: Invalid header checksum [ 1350.439316] Bluetooth: Invalid header checksum [ 1350.445460] Bluetooth: Invalid header checksum [ 1350.481959] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1350.491290] Bluetooth: Invalid header checksum [ 1350.521835] Bluetooth: Invalid header checksum 20:14:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000006, 0x4010, r2, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000001000000000000a000000000000000000000008000600a35ed9098604afe4d8a66889874cff2d1c99df0cc05558b5e9aaedaaf9bf87348df1223df2bd1d40eb0a", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) [ 1350.539045] mkiss: ax2: crc mode is auto. [ 1350.554112] audit: type=1804 audit(1625170485.167:987): pid=5639 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2794/bus" dev="sda1" ino=14164 res=1 [ 1350.582965] Bluetooth: Invalid header checksum [ 1350.601560] Bluetooth: Invalid header checksum 20:14:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0xfffffffffffff000) [ 1350.631730] Bluetooth: Invalid header checksum [ 1350.663106] Bluetooth: Invalid header checksum [ 1350.720438] Bluetooth: Invalid header checksum 20:14:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=ANY=[@ANYBLOB="240000001800010000000000000000000a000000000000000000110008001400", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) [ 1350.741436] Bluetooth: Invalid header checksum [ 1350.772998] Bluetooth: Invalid header checksum [ 1350.821452] Bluetooth: Invalid header checksum [ 1350.862778] Bluetooth: Invalid header checksum [ 1350.881250] Bluetooth: Invalid header checksum [ 1350.935900] Bluetooth: Invalid header checksum [ 1350.967961] Bluetooth: Invalid header checksum [ 1350.991527] Bluetooth: Invalid header checksum [ 1351.041311] Bluetooth: Invalid header checksum 20:14:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c800}, 0x0) 20:14:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x602, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x80006, 0x7, 0x0, 0x0, 0x11, "270bed9815497608ea79dd4c2ea3f3e0cf45b1"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x521000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f0000000180)=0x364) preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x2a) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000140)={0x498, 0x8, 0x425, 0x7, 0xa, "04eb47e681a419f6"}) ioctl$KDADDIO(r1, 0x4b34, 0x5) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/psched\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x333, 0x0, 0x0) write$P9_RUNLINKAT(r5, &(0x7f0000000200)={0x7, 0x4d, 0x1}, 0x7) preadv(r4, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f00000000c0)=0xfe5) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000001c0)) [ 1351.071213] Bluetooth: Invalid header checksum [ 1351.101164] Bluetooth: Invalid header checksum [ 1351.151558] Bluetooth: Invalid header checksum [ 1351.211234] Bluetooth: Invalid header checksum [ 1351.277359] Bluetooth: Invalid header checksum [ 1351.321271] Bluetooth: Invalid header checksum 20:14:45 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(0x0, 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "01879471d5856168da81980df4f8f8ce5cefef11656fff432ccdc6cc5e1d09cc794c94111200a6e1ed5a7c733905ea8b243fd2b84b1f39e5ae88c24196d633de83990b395e9374ce6de68f73e8319e2318fb605d656d923bd0e79a07e400818cf9a24811278ccc3455ff1c0c7251beae50eac0ae8992ae0ed07efa799cde7eec90c0b82bf1df035e371477eee137d95a4215066a6206d27396abd8b5078d648ff64e697b622b1582511113dde3434d8f8ca36d467adde387d99cb8ce0357ccec901e35e95127e92adb9f65336c759868e17035fe53460d043f53daae7476d6114fe0c4b2a252319eabecd9ac874e7ee7249544258644f4675d69ba3035a37de6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:14:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:45 executing program 1: r0 = syz_mount_image$ubifs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80000001, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="8433000260cb7d01f4c6ac023188754b2d2c0a54ff48153eaca121fd4f0ae3a117c9ab47f4840301dc445f9bf989dc632b3cff864396b8cd601a0ebd716d37640b22d9a46fb2dded9a194ad592f044c156faab7eb0dd626a836bc3b70175e58ecea77baa363331e5ced6688dcace1380bc64044727b328bd91c3ae59bb3e0eebe8b8564763", 0x85, 0x3f}, {&(0x7f0000000200)="85a36335973ec8043850e2cbab7d13a1b676b93467114d913157576c58bb", 0x1e, 0x7}], 0x1000, &(0x7f0000000280)={[{@chk_data_crc}, {@chk_data_crc}, {@compr_zlib}, {@auth_hash_name={'auth_hash_name', 0x3d, 'sha1'}}, {@chk_data_crc}, {@compr_lzo}]}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000340)={&(0x7f0000000300)=""/4, 0x4}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x221, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x4800) 20:14:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x80c04, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0xb3, 0x9, 0x4, 0x800, 0x400, {r2, r3/1000+60000}, {0x1, 0x8, 0xff, 0x1, 0x8, 0xeb, "05828ca1"}, 0x400, 0x4, @planes=&(0x7f0000000100)={0x0, 0x3, @userptr=0x8, 0x9}, 0x7, 0x0, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r4, 0x1, 0x7, 0x5}) 20:14:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1351.391861] Bluetooth: Invalid header checksum [ 1351.431180] Bluetooth: Invalid header checksum 20:14:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x3) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfb, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) 20:14:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x0) [ 1351.491733] Bluetooth: Invalid header checksum 20:14:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1c9581, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) [ 1351.531312] Bluetooth: Invalid header checksum [ 1351.536109] Bluetooth: Invalid header checksum [ 1351.540191] Bluetooth: Invalid header checksum [ 1351.545775] Bluetooth: Invalid header checksum 20:14:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000100)=""/187, 0xbb}, {&(0x7f00000001c0)=""/120, 0x78}, {&(0x7f0000000040)=""/4, 0x4}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/18, 0x12}, {&(0x7f00000012c0)}, {&(0x7f0000001300)}, {&(0x7f0000001340)=""/27, 0x1b}], 0x8, 0x1000, 0x9) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000240)='./file0\x00', &(0x7f00000012c0), &(0x7f0000001300), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001540)=ANY=[@ANYBLOB="240000001800010000000000000000000a000000000000000000000008000600", @ANYRES32=0x0, @ANYBLOB="a9f90f79f6180c7616dfc1aba28c2a924b5afd70216d41c1f9e0b1218d5c1a14fe95d901a669ba74e0ab6b30fc445d81a8d404f6c19eb70398ff2f12fb931e4df9767e9d7f93bb4443285b9e8c3bb8d14c2e5c837dbc168be8a7ece11472103aaf6863a95f9abf2825dadda5188db9c51c6bf3018277f2c1fb2ef4d104d9d689f90ccdde14b6897f467b3384ff6d72c0ffffffffffffffacc0806fc7b9434ae00dbf"], 0x24}}, 0x0) [ 1351.611363] Bluetooth: Invalid header checksum 20:14:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x6000, 0x10e000}) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x0) [ 1351.651827] Bluetooth: Invalid header checksum [ 1351.657921] Bluetooth: Invalid header checksum [ 1351.721497] Bluetooth: Invalid header checksum 20:14:46 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(0x0, 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:14:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000100000000000000a00000000000000000000000800060092c52e024877946dac3b3693165af86b410e6af47ab48a3419baf4466be5a8b18c89dcd5dfe9c3e8109116d939e3c149715731", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) [ 1351.761573] Bluetooth: Invalid header checksum [ 1351.766488] Bluetooth: Invalid header checksum [ 1351.832310] Bluetooth: Invalid header checksum [ 1351.872235] Bluetooth: Invalid header checksum [ 1351.876911] Bluetooth: Invalid header checksum [ 1351.941636] Bluetooth: Invalid header checksum [ 1351.981625] Bluetooth: Invalid header checksum [ 1351.981629] Bluetooth: Invalid header checksum [ 1352.065784] Bluetooth: Invalid header checksum [ 1352.091227] Bluetooth: Invalid header checksum [ 1352.101823] Bluetooth: Invalid header checksum 20:14:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/91, 0x5b}, {&(0x7f00000001c0)=""/236, 0xec}, {&(0x7f00000002c0)=""/44, 0x2c}], 0x5, 0xffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x0) [ 1352.181620] Bluetooth: Invalid header checksum [ 1352.201249] Bluetooth: Invalid header checksum [ 1352.221428] Bluetooth: Invalid header checksum 20:14:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:46 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(0x0, 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:14:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) tee(0xffffffffffffffff, r1, 0x8000, 0x7) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000000000a000000000000000000000008000600", @ANYRES32=0x0, @ANYBLOB="9d0f57d0c0144e71310e00000000000000000000b701ba0948b3c85de4ffcb55f6f307c9ba26d2304016f93a9b3ad700a56c93baa46724cf8617246065db5f2b67f25b5af99bb7d2d4fede3104723df6f1703413c29c4df759bad11c30ef8950a0f5033a75294575a12472d6dfbe2f245138d57128f446af37398d1f8385e61b982427d79c919fe98f99d5341fd6ccec0af482dacc74471341d26ed98cafdb0d302317ee2bff1d7b6ee2e0420e21dfecccef53a83f74"], 0x24}}, 0x0) 20:14:46 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002540)=ANY=[@ANYBLOB="240000001800010000000000000000000a000000000000000000000008001400", @ANYRES32=0x0, @ANYBLOB="3ac41cdfad1dcd8ded40afc0bf3b35c550a36f5d5ecb205cb4265b8d88afb62786deb7c5dd0847d5c62a35489f15ba2b3c471845f25daf8975bfb54af278ae09c20d540c3bb32979be45"], 0x24}}, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) readv(r1, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/65, 0x41}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/77, 0x4d}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000001200)=""/205, 0xcd}, {&(0x7f0000001300)=""/149, 0x95}, {&(0x7f0000002480)=""/173, 0xad}], 0x7) [ 1352.317975] Bluetooth: Invalid header checksum [ 1352.324212] Bluetooth: Invalid header checksum [ 1352.355983] IPv6: Can't replace route, no match found 20:14:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x208801, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x3, 0x0, 0x1, 0x1000, &(0x7f000024f000/0x1000)=nil}) [ 1352.365060] IPv6: Can't replace route, no match found [ 1352.413778] Bluetooth: Invalid header checksum [ 1352.423648] Bluetooth: Invalid header checksum [ 1352.461425] Bluetooth: Invalid header checksum [ 1352.466126] Bluetooth: Invalid header checksum [ 1352.531380] Bluetooth: Invalid header checksum [ 1352.532319] Bluetooth: Invalid header checksum [ 1352.571322] Bluetooth: Too short H5 packet [ 1352.576987] Bluetooth: Invalid header checksum [ 1352.641204] Bluetooth: Invalid header checksum [ 1352.652163] Bluetooth: Invalid header checksum [ 1352.681126] Bluetooth: Invalid header checksum [ 1352.751481] Bluetooth: Invalid header checksum [ 1352.761356] Bluetooth: Invalid header checksum [ 1352.801316] Bluetooth: Invalid header checksum [ 1352.861408] Bluetooth: Invalid header checksum [ 1352.871692] Bluetooth: Invalid header checksum [ 1352.911149] Bluetooth: Invalid header checksum [ 1352.981389] Bluetooth: Invalid header checksum [ 1352.982261] Bluetooth: Invalid header checksum [ 1353.021662] Bluetooth: Invalid header checksum [ 1353.091274] Bluetooth: Invalid header checksum [ 1353.092410] Bluetooth: Invalid header checksum [ 1353.141223] Bluetooth: Invalid header checksum [ 1353.201391] Bluetooth: Invalid header checksum [ 1353.202111] Bluetooth: Invalid header checksum [ 1353.311275] Bluetooth: Invalid header checksum [ 1353.311279] Bluetooth: Invalid header checksum [ 1353.421295] Bluetooth: Invalid header checksum [ 1353.421313] Bluetooth: Invalid header checksum [ 1353.531388] Bluetooth: Invalid header checksum [ 1353.532136] Bluetooth: Invalid header checksum [ 1353.641294] Bluetooth: Invalid header checksum [ 1353.642699] Bluetooth: Invalid header checksum [ 1353.751732] Bluetooth: Invalid header checksum [ 1353.751970] Bluetooth: Invalid header checksum [ 1353.861252] Bluetooth: Invalid header checksum [ 1353.861282] Bluetooth: Invalid header checksum [ 1353.971331] Bluetooth: Invalid header checksum [ 1353.971993] Bluetooth: Invalid header checksum [ 1354.081280] Bluetooth: Invalid header checksum [ 1354.082125] Bluetooth: Invalid header checksum [ 1354.191266] Bluetooth: Invalid header checksum [ 1354.191566] Bluetooth: Invalid header checksum [ 1354.301370] Bluetooth: Invalid header checksum [ 1354.302066] Bluetooth: Invalid header checksum [ 1354.411421] Bluetooth: Invalid header checksum [ 1354.412879] Bluetooth: Invalid header checksum [ 1354.521231] Bluetooth: Invalid header checksum [ 1354.521236] Bluetooth: Invalid header checksum 20:14:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00005d1000/0x2000)=nil, 0x2000, 0x200000d, 0x12, r0, 0x8b280000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) 20:14:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) dup(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x0) 20:14:49 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:14:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000100)=""/67, 0x43}, {&(0x7f0000000180)=""/133, 0x85}, {&(0x7f0000000240)=""/143, 0x8f}, {&(0x7f0000000300)=""/67, 0x43}, {&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000380)=""/146, 0x92}, {&(0x7f0000000440)=""/172, 0xac}], 0x7, 0x800, 0x3) [ 1354.631334] Bluetooth: Invalid header checksum [ 1354.635162] Bluetooth: Invalid header checksum [ 1354.650023] validate_nla: 10 callbacks suppressed [ 1354.650032] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1354.690638] audit: type=1804 audit(1625170489.297:988): pid=5794 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2798/bus" dev="sda1" ino=14164 res=1 [ 1354.696243] mkiss: ax2: crc mode is auto. [ 1354.732781] netlink: 'syz-executor.1': attribute type 20 has an invalid length. 20:14:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1354.743336] Bluetooth: Invalid header checksum [ 1354.747981] Bluetooth: Invalid header checksum [ 1354.779289] mkiss: ax2: crc mode is auto. 20:14:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x9, 0x5, &(0x7f0000000600)=[{&(0x7f00000001c0)="5dee6e75b7e9e781b34713d77ba76fe98a81be2ccfffcaf0c62140c26712f02f5ab9dd305c05720fccc377f82906a53ff1c6d555e649adb3cd0ef0adc2ba4e236154be384ba3972545955cfca24893440635572106c64bf5fe62228d16243949c5bc086bd6600ebec9776bc1e98f381450bab3e75ce2c6e0d16c2d10515dcb73eac70842eed9013f9129d9491095bbcc598b143f57eebba60f8c88c6338fee765839ecc56116332b3ce84dcaddd849c0c21b3aca58ce75f6f8ddba418075283042ea5754780ae612f88ce80f1a5475d96188255cc0821fa0d95a5250813ec8c9c8871f84", 0xe4, 0x2}, {&(0x7f00000002c0)="36a9ddbf03cc09c6ca8e6ab7ae514afc4cf342b2ab7a1a843be2fe0c30557753d7e1c7725ff021720a2809ff49b712ee3e7322962792ed67aeb7838e8e7982ae48cdde5cb0b25289c328b63f58", 0x4d, 0x6}, {&(0x7f0000000340)="f7b2eeff4cee332bfe0711780adcb49f8e8914ff531391a3b4bf5ecb7f374d32e6141c3656f5164b8b64e985cf8d99efaf0cccd254b3ed62e3e4bca94da67a331e2d4b61052d74c1b21a0b4c85ebadc7e50e6653501faf9e9f415758886b4f326d364839ca0411690c682e503ae128a64f09905b158925cc34f9adb153913f91b54e5b5985a9739b45711ab90898d8e7b61a13fa7811d465d8584541cc875a2276d0ac7c913c1e96e20c58062f996f30db952b5a9ffdea59374f5bebab8c2b49bed29c67e938ce74d3c5981f27d3e6b2b903ccf3683b7da091ccb8bb690de76332630b1ebbc2bb09", 0xe8, 0xffffffff}, {&(0x7f0000000440)="1401a1f00da096e8735ef261ab66dd57255cd13760e5ed82879f31579fb408df04502780dccc736bfde5cba2da5798fd7cf789b63cfa1256fcd3354626a737bd68d3480656bf0712aca5acece17ec94968eafc2f5925fc2ea75bb5d2544cba24e503a1474fdb278ec00bb80e3f3ad0283acc9f9ff4b6d4e3349d54fad0ff9339a28d693f905007676e8abc675f1b726b0b11fc317697e496ac656f9be3c953e16f0143b66770536cb29f2a0b66634cd27e2256e8521314f702328e516142267c02", 0xc1, 0x4}, {&(0x7f0000000540)="6f951f3abf87e5891582f0bcb5301695209c26c983d5eb0cda0c67c0b8adc56db080da9f9cfb16f5a35a206b722190981eb5c8d5bd83c0c4bb8867df3de25be28ccccce016e29952483486b1007cfdd2b9c0949c3f6b6aa960ec2660a218943fcc83ec249a516083f9898c097ee9fdc9e251bcac6a4db6881eef02b1c03b44ca69eb12a869bdcec9abd0810089e44e80945aed7aca3e2e7b9bf1ad24e5997e69ca9f4c671b", 0xa5, 0x80000001}], 0x258021, &(0x7f0000000680)={[{@extent_cache}, {@grpquota={'grpquota', 0x3d, '{\'{)\x00('}}], [{@hash}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_eq}, {@hash}]}) faccessat(r1, &(0x7f0000000700)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x30200, 0x1) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="476efbef98c302e8da5c672aeb7eb489987ae182651043d2", @ANYRES32=0x0, @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x804) [ 1354.860184] Bluetooth: Invalid header checksum [ 1354.865447] IPv6: Can't replace route, no match found [ 1354.872908] Bluetooth: Invalid header checksum [ 1354.891323] IPv6: Can't replace route, no match found 20:14:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x442, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) r1 = dup2(r0, 0xffffffffffffffff) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000100)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_MASTER={0x8, 0x4, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newchain={0x34, 0x64, 0x4, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff2, 0x1}, {0x0, 0xffff}, {0x0, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xe6b7}, @TCA_RATE={0x6, 0x5, {0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c000}, 0x20040001) [ 1354.962052] Bluetooth: Invalid header checksum [ 1354.971835] Bluetooth: Invalid header checksum 20:14:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0x10, 0x2, 0x0) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfd, 0x10}, 0xc) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) mmap(&(0x7f00003d6000/0x3000)=nil, 0x3000, 0xa, 0x10, r2, 0xa6fd6000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000000000a000000000000030000000008001400", @ANYRES32=0x0, @ANYBLOB="698a86141948c380c9fe44cdf2402a1fc10f5dc3d38a6d526c074f30ee27f58cb87b0749"], 0x24}}, 0x0) [ 1355.071212] Bluetooth: Invalid header checksum [ 1355.094050] Bluetooth: Invalid header checksum 20:14:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1355.178186] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1355.186468] Bluetooth: Invalid header checksum [ 1355.191455] Bluetooth: Invalid header checksum [ 1355.206547] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1355.291155] Bluetooth: Invalid header checksum [ 1355.302013] Bluetooth: Invalid header checksum [ 1355.393022] Bluetooth: Invalid header checksum [ 1355.398091] Bluetooth: Invalid header checksum [ 1355.398806] Bluetooth: Invalid header checksum [ 1355.405842] Bluetooth: Invalid header checksum [ 1355.424574] Bluetooth: Invalid header checksum [ 1355.493537] Bluetooth: Invalid header checksum [ 1355.516560] Bluetooth: Invalid header checksum [ 1355.532067] Bluetooth: Invalid header checksum 20:14:50 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:14:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xffffff00, 'syzkaller1\x00', 'syz_tun\x00', {0xff}, {}, 0x2e, 0x2, 0x52}, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0xc94ab3831a627c5a, 0x1, 0x4, 0x0, 0xf], 0x4, 0x1}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x21}, [0xffffffff, 0xff, 0xffffff00, 0xff000000], 0x4e23, 0x4e20, 0x4e24, 0x4e21, 0x7, 0x1ff, 0x4, 0x1f}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x2, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x40, 0xe, [0x30, 0xd, 0x11, 0xb, 0x27, 0x3b, 0x3c, 0x9, 0x2f, 0x2f, 0x4, 0x34, 0x2b, 0x9, 0x2a, 0x32], 0x2, 0x10001, 0x7fffffff}}}, {{@ip={@multicast1, @local, 0xd90133c013b3c1fb, 0xffffffff, 'ip6gre0\x00', 'wlan1\x00', {}, {}, 0x44, 0x1, 0x8}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x3, {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) 20:14:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x6) 20:14:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') socket$nl_generic(0x10, 0x3, 0x10) preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010101}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x0) openat(r1, &(0x7f0000000100)='./file0\x00', 0x40a002, 0x60) 20:14:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1355.612085] Bluetooth: Invalid header checksum [ 1355.621516] Bluetooth: Invalid header checksum [ 1355.649313] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1355.649595] Bluetooth: Invalid header checksum [ 1355.680440] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1355.709924] mkiss: ax2: crc mode is auto. [ 1355.715366] Bluetooth: Invalid header checksum [ 1355.732736] Bluetooth: Invalid header checksum [ 1355.751793] Bluetooth: Invalid header checksum [ 1355.783425] mkiss: ax2: crc mode is auto. 20:14:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x30001, 0x116) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) mmap(&(0x7f0000760000/0x3000)=nil, 0x3000, 0x100000c, 0x50, r2, 0xc4) r3 = syz_mount_image$befs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x80, 0x9, &(0x7f0000001600)=[{&(0x7f0000000180)="57c25f6e1d30fffda95e2379c3ac00467c8e71071cb07078f60835e5361937541d2bcad3b63c3e85a2aeed02cafe3aaf50bf8eb8733fe2c41ac23963c13424b5569a5323e87063e338d24ae7ec5d878a639ce85675494c15eb686e45bd83f376c42c72c9352e283a3d949408", 0x6c, 0x8000}, {&(0x7f0000000200)="9d9d26760e7b150af9a65a49c41747ea65268609d8efc8586d4b9c203db85a5d32fbd210b508a52dad5428bf7c5a46d296bf", 0x32, 0x3e79}, {&(0x7f0000000240)="683277360846148e653747d4ecdb8a4a87b000471dda182977c66d375c9a9079f654083033d35a96b320c2a04a2e1b30cf8e0a113ff33aaadc64333a4bcddb0f734abf7dfe202194ea190011d570ce5c1e70c34835c418b3d9bdc845f1d23bd525f4dbf881d3b6b4b8037f493c025b73b66bc6222ef384f7ec3ac07ebfe71bbbf4d77f987e21b42c72f00c31e9c378826bf5b4c1f6c357661cdf3fd291d3465e9aec9db16c8ff64b", 0xa8, 0x7}, {&(0x7f0000000300)="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", 0x1000, 0x5}, {&(0x7f0000001300)="8fad6f6dc8099411c2570f87cd745656fa62b0d7716fb7b405f4ed5133413d5e1260696fa5e89fc1e0ea1e3c51ceeffede9c91323626829bd19e9dc256e9b094046819be51d6b1b611dc10a327a10614ff6d3bf09cd764e3a68196f2797a5b083b6f9f1e8584800df7fffe5a6bfe3fcc9acec89f3b93fabd35dcb0cbbe94b8ca20d0aa768f13ad23409768fd390f8ff01860a458d65b", 0x96, 0x6acc}, {&(0x7f00000013c0)="82907738174fe76385e29ec9f7005a3f0e8ef69d90dbffd3ac5949870ce11f646f033012250fc3", 0x27, 0x6}, {&(0x7f0000001480)="9e820f45381ba78232d8001fc2293d6b055ea251ce22e61dc377e1ec07101f8c93170dcc9e430984a793bd0328ef029e87670b2deeb7b6d89623636e2f36200f25318f20b23b944e60789bd07942b060d4b02b068d640aeac80ef236f937a6c3f674cbca1601c4412bca1e73a8", 0x6d, 0x5}, {&(0x7f0000001400)="a6d86b1d652b3df194f3695ffc3a2107e2045a6bcd5d462edc38f08d5a29a9509df561fbd8", 0x25, 0x40000000}, {&(0x7f0000001500)="9504462a2a7819b039b332c56cf7b64930065394a48f03094fc41d04a23c65bce8101d65788fdb64dd2806b26ce0aa189fb3766ea57658fd22c4976357c61b4c237ea06949c9d0d998a528e62bbef5d57ac9c2c37aa20247a84285f6e36c27c58fe71877c76336ebb45cc4d0e3a562d69eeef379cc5c2625771b6c669cd96e54ccaa4904bdfe4317eb87a4bfdffabefa5dd9f3dba1fe0c0cc7c906aa6b7bc92af10d3b16f2e656f9759e017c55f66a642a6fd6b9d5e9b856280fc5f485edff668dc4d6e508d79b94303b", 0xca, 0x1}], 0x1000, &(0x7f0000001780)=ANY=[@ANYBLOB="282b5c5d5b2c233a2b2e25017d295c002c25292c2a3d212e5c2c292f2c736d61636b66736465663d5b2a7d5c5d7d2c726f6f74636f6e746578743d73797361646d5f752c736d61636b66737472616e736d7504003d2cd72c00006f06762b24eba3cd54b295d360d4bec37bf6c44eee"]) ioctl$FICLONE(r1, 0x40049409, r3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0xffffffff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0xc1) [ 1355.837509] Bluetooth: Invalid header checksum [ 1355.843596] Bluetooth: Invalid header checksum [ 1355.861501] Bluetooth: Invalid header checksum [ 1355.885546] audit: type=1804 audit(1625170490.497:989): pid=5908 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2799/bus" dev="sda1" ino=14394 res=1 20:14:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x10, r3, 0xa4ca5000) sendmsg(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)}, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) mmap(&(0x7f000003a000/0x3000)=nil, 0x3000, 0x0, 0x50, r1, 0x47719000) sendfile(0xffffffffffffffff, r2, 0x0, 0xb5) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x333, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000980)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @empty}, 0x3, 0x0, 0x1, 0x3}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)="f6a9e45c13e16110b638f4ad549c3ffb4bd6c85f70d743801e4765b43cdee62ba7990cfdea2b6e28967c243de2c4eea8d3624f2a9460bf3d9e281f87fc45e99e6958022fc96786ca15d21a27ccdb", 0x4e}, {&(0x7f0000000040)="9c694392541cbe76b3ee0976fa95477c93e6fd6ca98d07c34566116f6dbbc2badff6ba251f8de9955ebe72817c6d0d39f2870137d84dac7ccb404fcdca", 0x3d}, {&(0x7f0000000380)="dfe364576a86743bca456e7af7", 0xd}, {&(0x7f00000003c0)="8c8bc3105b5e5090a57348b7a81625cf3b79aca058f8e51a18cd79eb52e52128be442d91f518edd3d6ef59d09a31d2e2a55fcb5dfa4c1e81c66208f6b96881826a5a22379f1e", 0x46}, {&(0x7f0000000440)="5eade143b143c3b497c0b8464a0cc7088bfe8821ef2563ef45ddac55053e416c87ad519f073926adc86a4a17ef8cd00eb400e5240cd741e6846695a330431666b279bda0b678c6754dc291bcbd8e39d5d95410c3bde5abc0ec40d3c02240b31dcb44ea432c7d1716933e16dc33b4516435ddd96cc247ddc14bace421864f9fa4c85ddfb200693411", 0x88}], 0x5, &(0x7f0000000580)=[{0x70, 0x107, 0x7, "237bd316e1297861f9337411ad6032f220466bc972927d9e96125599874405bdb4b69223566da8dd91dceb5db909e2194d4c9c020898df2c638d275a0ffe795077552b7c615a9134689e13cd9d469a365fc2be2f353dc1e45f84a0b60b28"}, {0x58, 0xff, 0x2, "bcf68ed0324e3b7e56d92a26eeefbb266ea78a782d3dbca4722c7084131bccb5b946effe5fe45d43bf21a6976fde46591b99c6c9ce2e7f6b8fe6cb6fce1e86f09c22e1e33fde3e1b"}, {0xa0, 0xff, 0x9, "03408e8e1ed59428e280ddaf0a00e46fe632e43b11ead5a40704243a03751de24776d163bb922227fb73a61f77edeaec45128a7a19670d1da620bc8327a2a5960458043bc5dea702400e9b59953bcb89e753e384050a3186cafdab42e8b6ff2152fb0df249d05b79499b93da1947b3682c7d6662631efa5020d6b6ab89675444caf4d4b49f2a96e032996fb225e6f0a9"}, {0xf8, 0x102, 0x9, "a181e77bc9c75c864e19b3a86f5249bf660e8a6e612bc4ef83d6fe3dd051872af58b9bcf84863cfd4a2901c5c4e365ee374a4d0bb6141ad22fd653e173aea61c246c14b2d0d21368e9b1c97e6c7d65d32864f6332cf2891f9a695f524d344697ccc96aa5716285e9d9f846bf9e64b06ac2c8cc6fba14eeb121d13f619849c0a33924f917c8ecfbe4bb062a374ec4eae5b0794041b78969f4c7716bf5b8d0ef65bebd0f03bdf8a145f8ae86f0a9f4a20cb55fb36bb90c497e16a5f13ea41d50029f58172375a0623b63a642ebb5f2720bd06b6429691ced97e5511ec7e7720c87b16f0dce9918"}, {0xd0, 0x0, 0x6, "9cccbbd831d806f80c27d387b4085ea89260c181e732a906aab34f2bdbddb7de6d2e0f1ae2e0ae3dd80ae6800cd4eedb1cbc52e4ac2180b7c54c338893b2f36375de989e692cab6fe4f6072d434f1261e56d861677b198de6e2ad1a927cb379f2b0877b6a07c51e39fb0af83e829402aac9b11ea4956b8cda89448aa2cd1f613d267ac2711269b0033b73814779d99c98a9f5a7eee3a16448c1cefde75b28e09cdd4bf05dab35db7ea5ac91949e958f45c59c3f7d25bdb7e533823"}, {0xc0, 0x1, 0x9, "ab269fdbe02336ca8046f17fcabae05f40fbbc4cd70c347a8667879d2eb1aa59fb935bd347777591178fbcf69645d4e1810cb193bffaa0e341eee2e6b3a7295cf8badf2a2884703b32c8a2dc594fe27ad66f0b51116299655c0b9eb62eba56bdb2bb905a8d3854360d6381db1870f8d0e1020138e5fc3050684d3876af966c2c608aad342bae97a78e03133a2b892105bd717664b9aaa658da3044fb541facfc675a8c1738a78ae632228385cc"}], 0x3f0}, 0xc000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv6_newroute={0xcc, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_METRICS={0x7c, 0x8, 0x0, 0x1, "232b32a131a387b27662357a42574eb9d81dc1043856582156103d8622b7d048f39c5a1e2e14ec52dd124049ca3f3b94bbfb1b9a2d2551e5b0f4997bd641e02a8cbb099640cb65191f94061b395bc3f09983835b10e1c9920a5a2d1dc94d8acf5e8da5ea33b8d1d500d091f136f522baf83d2eae40acb8e9aba79a70e5f5c7312848c2eb12bef06c02f28e239bdd306bfd7aab266276275313f203997645a5c33e3812dad4cf1f154ec175cf"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24004081}, 0x44000) [ 1355.940099] Bluetooth: Invalid header checksum [ 1355.952915] Bluetooth: Invalid header checksum [ 1355.971504] Bluetooth: Invalid header checksum 20:14:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2b0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0, 0x0) fremovexattr(r1, &(0x7f0000000140)=@random={'trusted.', ']\x00'}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) fcntl$dupfd(r3, 0x0, r0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f00000001c0)) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) r7 = syz_open_procfs(r6, &(0x7f0000000200)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x333, 0x0, 0x0) ioctl$TCGETA(r7, 0x5405, &(0x7f00000000c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) [ 1356.041906] Bluetooth: Invalid header checksum [ 1356.061327] Bluetooth: Invalid header checksum [ 1356.076739] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1356.086069] Bluetooth: Invalid header checksum 20:14:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1356.132336] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1356.181216] Bluetooth: Invalid header checksum [ 1356.196792] Bluetooth: Invalid header checksum 20:14:50 executing program 2: add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000000307010400000000000000000500000a0c000240a17c61dfba000c034000000000000000090900010073797a31000000000900010073797a310000000008000540000000010c000240ffffffffffffffc00c000240000000000000008009000100"/115], 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x41) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x19, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x0) [ 1356.289256] Bluetooth: Invalid header checksum [ 1356.312196] Bluetooth: Invalid header checksum [ 1356.341280] Bluetooth: Invalid header checksum [ 1356.346114] Bluetooth: Invalid header checksum [ 1356.391161] Bluetooth: Invalid header checksum [ 1356.397801] mkiss: ax2: crc mode is auto. [ 1356.431442] Bluetooth: Invalid header checksum [ 1356.452372] mkiss: ax2: crc mode is auto. [ 1356.461898] Bluetooth: Too short H5 packet [ 1356.466719] Bluetooth: Invalid header checksum [ 1356.504015] Bluetooth: Invalid header checksum [ 1356.549899] Bluetooth: Invalid header checksum [ 1356.574910] Bluetooth: Invalid header checksum [ 1356.612996] Bluetooth: Invalid header checksum 20:14:51 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:14:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x420000, 0x28) mmap(&(0x7f000066e000/0x3000)=nil, 0x3000, 0x3000009, 0x40010, r1, 0x91f4d000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) 20:14:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000240)=""/249, 0xf9}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f00000003c0)=""/248, 0xf8}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x4, 0x81, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000000000a000000000000000000000008001400", @ANYRES32=0x0, @ANYBLOB="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"], 0x24}}, 0x0) 20:14:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:14:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1356.661485] Bluetooth: Invalid header checksum [ 1356.691068] Bluetooth: Invalid header checksum [ 1356.717082] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1356.725121] Bluetooth: Invalid header checksum 20:14:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000001c0)=""/100, 0x64}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x4, 0x3, 0x7) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=ANY=[@ANYBLOB="240000001800010000000000000000000a00000000000000f400000008001400", @ANYRES32=0x0, @ANYBLOB="fbe1a41273ed5a28ef39fc1c2519f4241db738bd6ce770c34505dfd03e067612885a02e0b6bd9129c5c2062acc5fcdbcbcc99a3f3b2e0c1904eae7ce95c9c5522822015089c349afaf6210b3349aaf7b9e579a279ccf2569f5d0eaf4cf9b3ced7896"], 0x24}}, 0x0) [ 1356.763155] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1356.771224] Bluetooth: Invalid header checksum [ 1356.775836] Bluetooth: hci6: Frame reassembly failed (-84) [ 1356.792025] Bluetooth: Invalid header checksum [ 1356.831946] Bluetooth: Invalid header checksum 20:14:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x3, 0x10000) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000220000012dfd70b271a120250a2020002000000801000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x40000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) r3 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f0140fe15b282a380930a29000248a84302916d0200390009003500ff6c0800000005000500fc000000070b566881b18432389b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000040)={{r1}, {@void, @actul_num={@val=0x2d, 0xfa, 0x6b}}}) [ 1356.857250] Bluetooth: hci6: Frame reassembly failed (-84) [ 1356.863532] Bluetooth: Invalid header checksum [ 1356.869189] Bluetooth: Invalid header checksum [ 1356.881267] Bluetooth: Invalid header checksum [ 1356.881958] Bluetooth: Invalid header checksum [ 1356.901241] Bluetooth: Invalid header checksum [ 1356.908157] audit: type=1804 audit(1625170491.517:990): pid=5986 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2800/bus" dev="sda1" ino=14312 res=1 [ 1356.941378] Bluetooth: Invalid header checksum [ 1356.947054] IPv6: Can't replace route, no match found [ 1356.966556] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1356.974694] Bluetooth: Invalid header checksum [ 1357.000108] Bluetooth: Invalid header checksum [ 1357.003755] IPv6: Can't replace route, no match found [ 1357.037160] Bluetooth: Invalid header checksum [ 1357.052110] Bluetooth: Invalid header checksum 20:14:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/165}, {&(0x7f0000000100)=""/45}, {&(0x7f0000000500)=""/102}, {&(0x7f0000000280)=""/21}, {&(0x7f00000002c0)=""/166}, {&(0x7f0000000380)=""/13, 0x50}, {&(0x7f0000000480)=""/77}, {&(0x7f0000000040)=""/59}], 0x9, 0x20000d9f, 0x200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x6}]}, 0x24}}, 0x0) 20:14:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x37cb1133) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6fd11a3a34fdcbd0c7812f793c65ab2de26305b041c0f26346cb", 0x1a, 0x7) splice(r2, 0x0, r4, 0x0, 0x80000002, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1357.097450] Bluetooth: Invalid header checksum [ 1357.114558] Bluetooth: Invalid header checksum 20:14:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x0) [ 1357.162158] Bluetooth: Invalid header checksum [ 1357.191157] Bluetooth: Invalid header checksum [ 1357.220404] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 1357.231171] Bluetooth: Invalid header checksum 20:14:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=@dellink={0x1b4, 0x11, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x408, 0x10000}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x48, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x25}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x90}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xe5511}]}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_NET_NS_PID={0x8}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_VFINFO_LIST={0x40, 0x16, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x10000, 0x1000}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x2}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x4}}]}]}, @IFLA_PHYS_SWITCH_ID={0x15, 0x24, "9469525e2ff7a7cb427aa80049faef288f"}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_bridge\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x2d68}, @IFLA_PROP_LIST={0xa4, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvtap0\x00'}, {0x14, 0x35, 'macvlan1\x00'}, {0x14, 0x35, 'lo\x00'}, {0x14, 0x35, 'xfrm0\x00'}, {0x14, 0x35, 'veth0_to_hsr\x00'}, {0x14, 0x35, 'gretap0\x00'}, {0x14, 0x35, 'geneve0\x00'}, {0x14, 0x35, 'bridge_slave_1\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40864}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000040)=[0x400, 0x7, 0x4], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800010000000000000000000a000000000000060000000008000600", @ANYRES32=0x0, @ANYBLOB="aab3cc4db55a0ada5f08e41ed62eeb33212d8b13b06630774c47ab3f293165485215d6b93e5973b679e57b06bc49c4ecf4250c0ca2"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 1357.271529] Bluetooth: Invalid header checksum 20:14:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/20, 0x14}], 0x2, 0xd9b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x14}]}, 0x24}}, 0x0) [ 1357.301633] Bluetooth: Invalid header checksum [ 1357.344422] Bluetooth: Invalid header checksum [ 1357.349169] Bluetooth: Invalid header checksum [ 1357.354131] Bluetooth: Invalid header checksum [ 1357.371048] Bluetooth: Invalid header checksum [ 1357.376172] ================================================================== [ 1357.383972] BUG: KASAN: use-after-free in kfree_skb+0x32/0x3d0 [ 1357.389953] Read of size 4 at addr ffff88809e42d9a4 by task kworker/u4:2/43 [ 1357.397056] [ 1357.398706] CPU: 1 PID: 43 Comm: kworker/u4:2 Not tainted 4.19.196-syzkaller #0 [ 1357.406152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1357.415517] Workqueue: events_unbound flush_to_ldisc [ 1357.420621] Call Trace: [ 1357.423217] dump_stack+0x1fc/0x2ef [ 1357.426859] print_address_description.cold+0x54/0x219 [ 1357.432146] kasan_report_error.cold+0x8a/0x1b9 [ 1357.436823] ? kfree_skb+0x32/0x3d0 [ 1357.440476] kasan_report+0x8f/0xa0 [ 1357.444127] ? kfree_skb+0x32/0x3d0 [ 1357.447768] kfree_skb+0x32/0x3d0 [ 1357.451263] h5_rx_3wire_hdr+0x43a/0x7f0 [ 1357.455345] h5_recv+0x370/0x6c0 [ 1357.458725] ? h5_open+0x6c0/0x6c0 [ 1357.462281] ? check_preemption_disabled+0x7e/0x280 [ 1357.467326] hci_uart_tty_receive+0x221/0x530 [ 1357.471832] ? hci_uart_send_frame+0x4f0/0x4f0 [ 1357.476426] tty_ldisc_receive_buf+0x14a/0x190 [ 1357.481021] tty_port_default_receive_buf+0x78/0xa0 [ 1357.486048] flush_to_ldisc+0x21f/0x390 [ 1357.490044] process_one_work+0x864/0x1570 [ 1357.494303] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 1357.498993] worker_thread+0x64c/0x1130 [ 1357.502985] ? __kthread_parkme+0x133/0x1e0 [ 1357.507316] ? process_one_work+0x1570/0x1570 [ 1357.511816] kthread+0x33f/0x460 [ 1357.515190] ? kthread_park+0x180/0x180 [ 1357.519173] ret_from_fork+0x24/0x30 [ 1357.522897] [ 1357.524525] Allocated by task 43: [ 1357.528077] kmem_cache_alloc_node+0x146/0x3b0 [ 1357.532671] __alloc_skb+0x71/0x560 [ 1357.536308] h5_rx_pkt_start+0xd1/0x360 [ 1357.540291] h5_recv+0x370/0x6c0 [ 1357.543667] hci_uart_tty_receive+0x221/0x530 [ 1357.548166] tty_ldisc_receive_buf+0x14a/0x190 [ 1357.552753] tty_port_default_receive_buf+0x78/0xa0 [ 1357.557770] flush_to_ldisc+0x21f/0x390 [ 1357.561749] process_one_work+0x864/0x1570 [ 1357.565989] worker_thread+0x64c/0x1130 [ 1357.569985] kthread+0x33f/0x460 [ 1357.573362] ret_from_fork+0x24/0x30 [ 1357.577071] [ 1357.578892] Freed by task 6016: [ 1357.582180] kmem_cache_free+0x7f/0x260 [ 1357.586157] kfree_skbmem+0xc1/0x140 [ 1357.589894] kfree_skb+0x127/0x3d0 [ 1357.593444] h5_rx_3wire_hdr+0x43a/0x7f0 [ 1357.597507] h5_recv+0x370/0x6c0 [ 1357.600892] hci_uart_tty_receive+0x221/0x530 [ 1357.605478] tty_ioctl+0xff8/0x15c0 [ 1357.609111] do_vfs_ioctl+0xcdb/0x12e0 [ 1357.613000] ksys_ioctl+0x9b/0xc0 [ 1357.616474] __x64_sys_ioctl+0x6f/0xb0 [ 1357.620362] do_syscall_64+0xf9/0x620 [ 1357.624171] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1357.629352] [ 1357.630982] The buggy address belongs to the object at ffff88809e42d8c0 [ 1357.630982] which belongs to the cache skbuff_head_cache of size 232 [ 1357.644271] The buggy address is located 228 bytes inside of [ 1357.644271] 232-byte region [ffff88809e42d8c0, ffff88809e42d9a8) [ 1357.656156] The buggy address belongs to the page: [ 1357.661088] page:ffffea0002790b40 count:1 mapcount:0 mapping:ffff8880b5b96900 index:0x0 [ 1357.669255] flags: 0xfff00000000100(slab) [ 1357.673409] raw: 00fff00000000100 ffffea0002921648 ffffea0002a87788 ffff8880b5b96900 [ 1357.681298] raw: 0000000000000000 ffff88809e42d000 000000010000000c 0000000000000000 [ 1357.689304] page dumped because: kasan: bad access detected [ 1357.695013] [ 1357.696663] Memory state around the buggy address: [ 1357.701596] ffff88809e42d880: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 1357.708962] ffff88809e42d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1357.716338] >ffff88809e42d980: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 1357.723697] ^ [ 1357.728111] ffff88809e42da00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1357.735479] ffff88809e42da80: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc 20:14:52 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) pipe2(&(0x7f0000001780), 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffa) open(0x0, 0x1, 0x144) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) accept(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000101) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 20:14:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000000000a000000000000000000000008000600", @ANYRES32=0x0, @ANYBLOB="7d4b47efc76eac8e165775b97f003150cc5e55e2a2f536908108d0e739c75f12fea1b2a8545fbf68ceec9ce548e7412244533062edf20c02a460c84aa9ec913395b30d40a2b0e1a986b8857d2a942935973279f495b2531d0cdd771f24e1de14c910dcf960d927b919d7a0dcd40eacd44f6b44080bf191c9c4ba5e62"], 0x24}}, 0x0) [ 1357.742837] ================================================================== [ 1357.750188] Disabling lock debugging due to kernel taint [ 1357.764382] Bluetooth: Invalid header checksum [ 1357.764405] Bluetooth: Invalid header checksum 20:14:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800007, 0x12, r0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000000000a000000000000000000000008001400", @ANYRES32=0x0, @ANYRESOCT], 0x24}}, 0x0) [ 1357.862116] Bluetooth: Invalid header checksum [ 1357.882066] Bluetooth: Invalid header checksum [ 1357.942030] audit: type=1804 audit(1625170492.557:991): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir549825595/syzkaller.GMLeDz/2801/bus" dev="sda1" ino=14312 res=1 [ 1357.960403] Kernel panic - not syncing: panic_on_warn set ... [ 1357.960403] [ 1357.973215] CPU: 0 PID: 43 Comm: kworker/u4:2 Tainted: G B 4.19.196-syzkaller #0 [ 1357.974859] Bluetooth: Invalid header checksum [ 1357.982053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1357.982069] Workqueue: events_unbound flush_to_ldisc [ 1357.982075] Call Trace: [ 1357.982093] dump_stack+0x1fc/0x2ef [ 1357.982109] panic+0x26a/0x50e [ 1357.982122] ? __warn_printk+0xf3/0xf3 [ 1357.982136] ? preempt_schedule_common+0x45/0xc0 [ 1357.982153] ? ___preempt_schedule+0x16/0x18 [ 1358.023507] ? trace_hardirqs_on+0x55/0x210 [ 1358.027839] kasan_end_report+0x43/0x49 [ 1358.031820] kasan_report_error.cold+0xa7/0x1b9 [ 1358.036502] ? kfree_skb+0x32/0x3d0 [ 1358.040134] kasan_report+0x8f/0xa0 [ 1358.043766] ? kfree_skb+0x32/0x3d0 [ 1358.047396] kfree_skb+0x32/0x3d0 [ 1358.050856] h5_rx_3wire_hdr+0x43a/0x7f0 [ 1358.054921] h5_recv+0x370/0x6c0 [ 1358.058318] ? h5_open+0x6c0/0x6c0 [ 1358.061864] ? check_preemption_disabled+0x7e/0x280 [ 1358.067151] hci_uart_tty_receive+0x221/0x530 [ 1358.071677] ? hci_uart_send_frame+0x4f0/0x4f0 [ 1358.076271] tty_ldisc_receive_buf+0x14a/0x190 [ 1358.080859] tty_port_default_receive_buf+0x78/0xa0 [ 1358.084121] Bluetooth: Invalid header checksum [ 1358.085877] flush_to_ldisc+0x21f/0x390 [ 1358.094412] process_one_work+0x864/0x1570 [ 1358.098659] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 1358.103338] worker_thread+0x64c/0x1130 [ 1358.107331] ? __kthread_parkme+0x133/0x1e0 [ 1358.111656] ? process_one_work+0x1570/0x1570 [ 1358.116155] kthread+0x33f/0x460 [ 1358.119529] ? kthread_park+0x180/0x180 [ 1358.123515] ret_from_fork+0x24/0x30 [ 1358.128191] Kernel Offset: disabled [ 1358.131808] Rebooting in 86400 seconds..