00)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_SCRUB(r11, 0xc400941b, &(0x7f0000000ec0)={0x0, 0x7c9d6bae, 0x4, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r8, 0xc400941d, &(0x7f00000012c0)={r12, 0xe44a, 0x4}) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r11, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) r13 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r13, r10, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r5, r10, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r4, 0x9b, 0x0, 0x10000, 0x1, 0x1, {0x0, r3}}, 0x7) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xbba2, 0x3, 0x0, 0x0) 20:17:23 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3f00000000000000, 0x0, 0x0) [ 2699.156494] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:17:23 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:17:23 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00aaaaaaaaaaaaaaaa']) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 20:17:23 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0xfff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:17:23 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) [ 2699.408330] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:17:23 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:17:23 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = dup2(r4, r3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$batadv(0x0, r5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0x8, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r7, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0xfec6, 0x39, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000100)={r10, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000080)={r10, 0x1, 0x6, @dev}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r7, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x40040) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x2, 0x101, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x7800, 0x20, 0x8, 0x9}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1aa18220}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x1bc, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x50}, 0x20080) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r12, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:17:23 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2) [ 2699.643963] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:17:24 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 20:17:24 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) [ 2699.649952] device lo entered promiscuous mode 20:17:24 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 20:17:24 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000000000000000, 0x0, 0x0) [ 2699.761872] device lo left promiscuous mode [ 2699.818524] device lo entered promiscuous mode [ 2699.857583] device lo left promiscuous mode 20:17:24 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(r1, r2) dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r9, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@caif=@dbg, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f00000005c0)=""/105, 0x69}, {&(0x7f0000000400)=""/179, 0xb3}], 0x3, &(0x7f0000000240)=""/108, 0x6c}, 0x0, 0x40010021, 0x0, {0x2, r10}}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x5b3b, 0xec5e, 0x3, &(0x7f0000000580)={[0x100000000]}, 0x8) syz_io_uring_submit(r11, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:17:24 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:17:24 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 20:17:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:17:24 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r5, r4) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x12, 0x26, 0x0, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x70, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x200000e4}, 0x2046005) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2700.000018] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2700.009805] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:17:24 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005fc0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000180)=""/1, 0x1}, {&(0x7f00000001c0)=""/1, 0x1}, {&(0x7f0000000340)=""/203, 0xcb}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000440)=""/193, 0xc1}], 0x6, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/250, 0xfa}, {&(0x7f00000007c0)=""/162, 0xa2}, {&(0x7f0000000880)=""/27, 0x1b}, {&(0x7f00000008c0)=""/178, 0xb2}, {&(0x7f0000000980)=""/78, 0x4e}, {&(0x7f0000000a00)=""/69, 0x45}], 0x6, &(0x7f0000000b00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000b40), 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)=""/70, 0x46}, {&(0x7f0000000c40)=""/80, 0x50}, {&(0x7f0000000cc0)=""/199, 0xc7}], 0x3, &(0x7f0000000e00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000000ec0), 0x6e, &(0x7f0000001080)=[{&(0x7f0000000f40)=""/15, 0xf}, {&(0x7f0000000f80)=""/201, 0xc9}], 0x2, &(0x7f00000010c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000001180), 0x6e, &(0x7f0000001500)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001200)=""/60, 0x3c}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000001240)=""/7, 0x7}, {&(0x7f0000001280)=""/43, 0x2b}, {&(0x7f00000012c0)=""/125, 0x7d}, {&(0x7f0000001340)=""/250, 0xfa}, {&(0x7f0000001440)=""/175, 0xaf}], 0x8, &(0x7f0000001580)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000001600)=""/31, 0x1f}, {&(0x7f0000001640)=""/170, 0xaa}, {&(0x7f0000001700)=""/87, 0x57}, {&(0x7f0000001780)=""/11, 0xb}, {&(0x7f00000017c0)=""/155, 0x9b}, {&(0x7f0000001880)=""/153, 0x99}], 0x7, &(0x7f00000019c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001ac0), 0x6e, &(0x7f0000005ec0)=[{&(0x7f0000001b40)=""/58, 0x3a}, {&(0x7f0000001b80)=""/150, 0x96}, {&(0x7f0000001c40)=""/20, 0x14}, {&(0x7f0000004e00)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/198, 0xc6}, {&(0x7f0000005e00)=""/179, 0xb3}], 0x6, &(0x7f0000005f40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}], 0x7, 0x10000, &(0x7f0000006180)={0x0, 0x3938700}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x1010, r0, 0x0) [ 2700.114602] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:17:24 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2704000000000000) 20:17:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf250d000000940003801400020076657468310000000000000000000000060007004e22000014000600ff01000000000000000000000000000114000600200100000000000000000000000000000800010001000000140002006272696467655f736c6176655f30000014000200697036746e6c300000000000000000ffffffffffffff000114000600fc01000000000000000000000000000108000600e50000002c000280080008000000000006000b000200000006000f0000000000080005000400000008000700ff01000008000500c4000000080005002b73582608000500000001000c00038005000800a7000000"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2700.281557] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:17:37 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2804000000000000) 20:17:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 20:17:37 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5) 20:17:37 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff00000000, 0x0, 0x0) 20:17:37 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:17:37 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) [ 2712.897344] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:17:37 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x200000, 0x34e}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x4, 0x40, 0x0, 0x80, 0x1}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x20010, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x1, 0x1, 0x1}, 0x2) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000340), &(0x7f00000001c0)='./file0\x00', 0x10, 0x100, 0x1}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800, 0x1}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fallocate(r5, 0x30, 0x52038472, 0x3dd) 20:17:37 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xfffffffd}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:17:37 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x3) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x82, 0x3, 0x1, 0x80, 0x0, 0x5, 0x1008, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x15080, 0xffffffffffffffb9, 0xf21, 0x0, 0x8, 0x8, 0x1, 0x0, 0x3, 0x0, 0x8faa}, 0x0, 0xd, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x58201, 0x18) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x80, 0x48, 0xb6, 0x8, 0x0, 0x100000001, 0x2c440, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0xc6, 0x0, 0x1f, 0xc, 0x1, 0x7, 0x0, 0x0, 0x82, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r3, 0x8) 20:17:37 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:17:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f0000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:17:37 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x7, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3}, 0xffff) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r10, r9) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r10, 0x0, &(0x7f0000000000)="63ec5ac1e9a02f9c0f3c1bda0079e473b88ac4a694124095a5cca11bb38903cd6318", 0x22, 0x40000000, 0x0, {0x0, r8}}, 0x1000) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2713.052967] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2713.073339] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:17:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252", 0x89, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 20:17:37 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85", 0x85, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 20:17:37 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2904000000000000) 20:17:37 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x4010, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r6, r5) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd=r6, 0x9, 0x0, 0xc, 0x0, 0x1, {0x0, r3}}, 0x6) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:17:37 executing program 0: ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000080)=""/122) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r3}, 0x9) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x3f, 0x0, 0x8, 0x0, 0x5, 0x81810, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x920, 0x4, @perf_config_ext={0x81}, 0x10020, 0x2, 0x2, 0x0, 0x2a0aba58, 0xf1f6, 0x5, 0x0, 0xaa20, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) 20:17:52 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8) 20:17:52 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699b", 0x7c, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 20:17:52 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85", 0x85, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 20:17:52 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:17:52 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) 20:17:52 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7798, &(0x7f0000000000)={0x0, 0x8eb7, 0x0, 0x3, 0x300}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) 20:17:52 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3ff}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x10, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x55b02, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1878) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:17:52 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2a04000000000000) [ 2728.114162] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:17:52 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r8, 0x0, 0x0, 0x0, {0x22}, 0x1, {0x0, r9}}, 0x7eb) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r6, r6) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r11, &(0x7f0000000080)='./file0\x00', 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x2010, r11, 0x0) 20:17:52 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00000000000000) 20:17:52 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_setup(0x169, &(0x7f0000000000)={0x0, 0x7ff8, 0x10, 0x0, 0x20d, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb92b77d329e5676f, 0x810, r3, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x84780, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = dup2(r0, r4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x810, r6, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000040)='.\x00', 0x2000003) sendmsg$nl_generic(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x2bc, 0x2c, 0x200, 0x70bd28, 0x25dfdbfd, {0x1}, [@nested={0x2a7, 0x7, 0x0, 0x1, [@typed={0x14, 0x79, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc1, 0x17, 0x0, 0x0, @binary="00bd875dda003df184602797dbe143a620a816ae1dcdd03226c07517726f632f83804da58d88e3fd7a1728fe5748347dfb05fa35174ed35be8437f51b5588322e24368e5ce387a87eae9f18e438aa169b5c08b39703383521cd91668cee20bb26eb8b47fb9068a48f6843a6785d926635157eca6ddd7bbe6f539face2b1fe911f422d7725bfd5af74fa112fd734c624f2b87beae911ff8ac89508f0a0a328bf20bedd5314de46e85cfefe992410e77a7fa096e04e6c44e06c701422c2d"}, @generic="062ecd79509ae76cb42ed169da8c02d8ff461a540bf1ab33a864a0695bb087fc06a7216f6f898d39f66cc7bab66ab11d161e3d1701d2dddd7f43eae6950b3fb8fc9c100d4ec345151bcce80a58c5357dc6f1dae2d07fcbe89fa1a5fd009dca6408ab78b243cfc1c45f3cbe692212a29570b70259cf6a0875ad4d078bae2e32c8af", @generic="b3e7af665eada3eb905e572142781910dd5ba8168b8487452c55e14158de80f925ded2ba4420eab1f576f860aa7a565becac53089d8539f55b2d550ea18ece9e9438d8940ae60f90c60a568a3266944f71181881d5969d51ea", @typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@local}, @generic="e7cb7f944fced05983aa3f0e2b6d18694ba4096bb024e710b7b3b16262f0305f2a23334384cfe58b4a610e3f7c47a8e497873b168819151395ff64d56966c7994ad55e829d302bb132536d717bd13b5de40360aa6cd7567cb9ed2fe7f9fe4e8f1def8eeca3da6e8e30bfbee1bdcf7d24a7c7b7b27e436f9ac2f9a3faf4be31655003270645c505554893cd90408d5698dc646060a351754008e09adc02aa5178c11dd674347bf534d39b58329e5e61eb4de6b4fc43b60a943e8340f16dc72e66d46b905f26aeb21fe5", @typed={0xc, 0x1f, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x65, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0xc080}, 0x24008080) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r9 = inotify_add_watch(r7, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(r8, r9) r10 = dup3(r8, r7, 0x0) inotify_add_watch(r10, &(0x7f0000000080)='./file0\x00', 0x80) io_uring_enter(r10, 0x7833, 0x5cdd, 0x2, &(0x7f00000000c0)={[0x349]}, 0x8) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:17:52 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @loopback}, "c8ed01b536ca3d00"}}}}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:17:52 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf250d000000940003801400020076657468310000000000000000000000060007004e22000014000600ff01000000000000000000000000000114000600200100000000000000000000000000000800010001000000140002006272696467655f736c6176655f30000014000200697036746e6c300000000000000000ffffffffffffff000114000600fc01000000000000000000000000000108000600e50000002c000280080008000000000006000b000200000006000f0000000000080005000400000008000700ff01000008000500c4000000080005002b73582608000500000001000c00038005000800a7000000"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:17:52 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7798, &(0x7f0000000000)={0x0, 0x8eb7, 0x0, 0x3, 0x300}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) [ 2728.421423] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:18:07 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7798, &(0x7f0000000000)={0x0, 0x8eb7, 0x0, 0x3, 0x300}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) 20:18:07 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_setup(0x169, &(0x7f0000000000)={0x0, 0x7ff8, 0x10, 0x0, 0x20d, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb92b77d329e5676f, 0x810, r3, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x84780, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = dup2(r0, r4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x810, r6, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000040)='.\x00', 0x2000003) sendmsg$nl_generic(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x2bc, 0x2c, 0x200, 0x70bd28, 0x25dfdbfd, {0x1}, [@nested={0x2a7, 0x7, 0x0, 0x1, [@typed={0x14, 0x79, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc1, 0x17, 0x0, 0x0, @binary="00bd875dda003df184602797dbe143a620a816ae1dcdd03226c07517726f632f83804da58d88e3fd7a1728fe5748347dfb05fa35174ed35be8437f51b5588322e24368e5ce387a87eae9f18e438aa169b5c08b39703383521cd91668cee20bb26eb8b47fb9068a48f6843a6785d926635157eca6ddd7bbe6f539face2b1fe911f422d7725bfd5af74fa112fd734c624f2b87beae911ff8ac89508f0a0a328bf20bedd5314de46e85cfefe992410e77a7fa096e04e6c44e06c701422c2d"}, @generic="062ecd79509ae76cb42ed169da8c02d8ff461a540bf1ab33a864a0695bb087fc06a7216f6f898d39f66cc7bab66ab11d161e3d1701d2dddd7f43eae6950b3fb8fc9c100d4ec345151bcce80a58c5357dc6f1dae2d07fcbe89fa1a5fd009dca6408ab78b243cfc1c45f3cbe692212a29570b70259cf6a0875ad4d078bae2e32c8af", @generic="b3e7af665eada3eb905e572142781910dd5ba8168b8487452c55e14158de80f925ded2ba4420eab1f576f860aa7a565becac53089d8539f55b2d550ea18ece9e9438d8940ae60f90c60a568a3266944f71181881d5969d51ea", @typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@local}, @generic="e7cb7f944fced05983aa3f0e2b6d18694ba4096bb024e710b7b3b16262f0305f2a23334384cfe58b4a610e3f7c47a8e497873b168819151395ff64d56966c7994ad55e829d302bb132536d717bd13b5de40360aa6cd7567cb9ed2fe7f9fe4e8f1def8eeca3da6e8e30bfbee1bdcf7d24a7c7b7b27e436f9ac2f9a3faf4be31655003270645c505554893cd90408d5698dc646060a351754008e09adc02aa5178c11dd674347bf534d39b58329e5e61eb4de6b4fc43b60a943e8340f16dc72e66d46b905f26aeb21fe5", @typed={0xc, 0x1f, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x65, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0xc080}, 0x24008080) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r9 = inotify_add_watch(r7, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(r8, r9) r10 = dup3(r8, r7, 0x0) inotify_add_watch(r10, &(0x7f0000000080)='./file0\x00', 0x80) io_uring_enter(r10, 0x7833, 0x5cdd, 0x2, &(0x7f00000000c0)={[0x349]}, 0x8) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:18:07 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:18:07 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x288900, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000040)={0x20000008}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:18:07 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2) 20:18:07 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:18:07 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3b6) 20:18:07 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000000000000000) [ 2742.932612] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:18:07 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf250d000000940003801400020076657468310000000000000000000000060007004e22000014000600ff01000000000000000000000000000114000600200100000000000000000000000000000800010001000000140002006272696467655f736c6176655f30000014000200697036746e6c300000000000000000ffffffffffffff000114000600fc01000000000000000000000000000108000600e50000002c000280080008000000000006000b000200000006000f0000000000080005000400000008000700ff01000008000500c4000000080005002b73582608000500000001000c00038005000800a7000000"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:18:07 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2d40, &(0x7f0000000000)={0x0, 0xb132, 0x20, 0x3, 0x55, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) 20:18:07 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7c4c000000000000) 20:18:07 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3f000000, 0x0, 0x0, 0x0) [ 2743.268613] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:18:24 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5) 20:18:24 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7798, &(0x7f0000000000)={0x0, 0x8eb7, 0x0, 0x3, 0x300}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) 20:18:24 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x200402, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r5, r4) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x12, 0x26, 0x0, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}}, 0x0) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f00000000c0)) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:18:24 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf250d000000940003801400020076657468310000000000000000000000060007004e22000014000600ff01000000000000000000000000000114000600200100000000000000000000000000000800010001000000140002006272696467655f736c6176655f30000014000200697036746e6c300000000000000000ffffffffffffff000114000600fc01000000000000000000000000000108000600e50000002c000280080008000000000006000b000200000006000f0000000000080005000400000008000700ff01000008000500c4000000080005002b73582608000500000001000c00038005000800a7000000"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:18:24 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3b7) 20:18:24 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981b", 0x47, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 20:18:24 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7f4c000000000000) 20:18:24 executing program 0: r0 = syz_io_uring_setup(0x68e2, &(0x7f00000002c0)={0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x17, 0x0, {0x0, r3}}, 0xffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2759.715866] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2759.727149] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:18:24 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000000)={0x0, 0xfffffffe}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:18:24 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x814c000000000000) 20:18:24 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) r2 = fork() ptrace(0x10, r2) r3 = fork() ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x0, &(0x7f00000000c0)=""/103) waitid(0x1, r2, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:18:24 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:18:24 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fork() ptrace(0x10, r4) r5 = fork() ptrace(0x10, r5) clone3(&(0x7f0000000440)={0x80820000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x5}, &(0x7f0000000180)=""/78, 0x4e, &(0x7f0000000340)=""/197, &(0x7f0000000240)=[r4, r5, 0x0], 0x3, {r0}}, 0x58) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2760.043260] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:18:24 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3b8) 20:18:24 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8) 20:18:24 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf250d000000940003801400020076657468310000000000000000000000060007004e22000014000600ff01000000000000000000000000000114000600200100000000000000000000000000000800010001000000140002006272696467655f736c6176655f30000014000200697036746e6c300000000000000000ffffffffffffff000114000600fc01000000000000000000000000000108000600e50000002c000280080008000000000006000b000200000006000f0000000000080005000400000008000700ff01000008000500c4000000080005002b73582608000500000001000c00038005000800a7000000"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:18:24 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf73", 0x23, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) [ 2760.252506] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:18:24 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:18:24 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x854c000000000000) [ 2760.414914] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2774.884062] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:18:39 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) fcntl$addseals(r0, 0x409, 0x9) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fork() ptrace(0x10, r4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xe2, 0xfc, 0x7, 0x0, 0x0, 0x3f, 0x42010, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0xfffffffffffffffe, 0x5, 0x8, 0x9, 0x5, 0x8, 0x0, 0xfffffffc, 0x0, 0x5}, r4, 0x4, r5, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:18:39 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:18:39 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff00000000) 20:18:39 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x41b) 20:18:39 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x402, 0x0, 0x0, 0x0) 20:18:39 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3b9) 20:18:39 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:18:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2774.905054] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:18:39 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x854c000000000000) 20:18:39 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2775.215740] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:18:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:18:39 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = dup2(r5, r4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$batadv(0x0, r6) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0x8, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r8, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0xfec6, 0x39, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r11, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000080)={r11, 0x1, 0x6, @dev}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r8, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x40040) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x29, 0xfe, 0x2, 0x4, 0x1, @local, @mcast2, 0x8000, 0x7800, 0x400, 0x20}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x414, 0x0, 0x124, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xfff9, 0x7f, 0x5, 0x4}, {0x81, 0x7, 0x5, 0x101}, {0x400, 0x1, 0x0, 0xffff}, {0x8, 0x5, 0x2, 0x9}, {0x7, 0x7, 0x2, 0x4bb}, {0xfff9, 0x0, 0x5, 0x63f}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}]}}, {{0x8, 0x1, r12}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc1}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x414}, 0x1, 0x0, 0x0, 0x4000090}, 0x4004001) 20:18:39 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:18:39 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) [ 2775.434362] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:18:39 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x41c) [ 2775.492276] device lo entered promiscuous mode [ 2775.515919] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2775.626013] device lo left promiscuous mode [ 2775.627253] perf: interrupt took too long (7929 > 7903), lowering kernel.perf_event_max_sample_rate to 25000 [ 2775.728145] device lo entered promiscuous mode [ 2775.739002] device lo left promiscuous mode 20:18:53 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x854c000000000000) 20:18:53 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3ba) 20:18:53 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x41d) 20:18:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300), 0x0, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 20:18:53 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x5}, 0x8001) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x3000002, 0x3f181118e6568ede, r0, 0x8000000) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r8, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x70, 0x501100, 0x12345, {0x0, r9}}, 0x4) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r6, r5) dup3(r4, r6, 0x80000) ioctl$sock_netdev_private(r5, 0x89fb, &(0x7f0000000180)="7c60141ed62119ee8395476c818d7a69c8e6ae30f36fda1aaa9abfc40ffbf612518d19046e36d2caad9fb65c9df0e6ac118e2a23d981725c5827dfa3346c7f8ab75a299ad4dc08b0c2a9") io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:18:53 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2789.094050] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:18:53 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x0, 0x4, 0x128}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x2df2, 0xf94b, 0x3, &(0x7f0000000000)={[0x9]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x6, 0x2f, 0x6, 0x0, 0x7, [{0x4, 0x51, 0x3, '\x00', 0x1001}, {0x9e2, 0xab53, 0x6e, '\x00', 0x1000}, {0xd839, 0x100000001, 0x0, '\x00', 0x2401}, {0x2, 0x8, 0x8, '\x00', 0x4}, {0xffffffff, 0x3, 0x4, '\x00', 0x2}, {0x400, 0x7, 0x80000001, '\x00', 0x608}, {0x1, 0x530, 0xffffffff, '\x00', 0x1000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x2000003) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(r5, r6) dup3(r5, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r5, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:18:53 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x80010, r0, 0x10000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x2010, r0, 0x8000000) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400, 0x8b, 0x2}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r3}}, 0x0) r5 = perf_event_open$cgroup(&(0x7f0000000340)={0x4, 0x80, 0x9, 0x6, 0x1, 0x63, 0x0, 0x5, 0x100, 0xf, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x402, 0xa01, 0xa6, 0x9, 0x3, 0x0, 0x8c, 0x0, 0x78, 0x0, 0x10000}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x4) fstatfs(r5, &(0x7f0000000280)=""/16) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r6 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r9, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xe252e4d9b9cd5eb1, 0x12345, {0x0, r10}}, 0x2) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x6, 0x2, 0xf, 0x6, 0x0, 0x28f, 0xb010a, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9b58, 0x0, @perf_config_ext={0x80000, 0xffffffffffffff27}, 0x100, 0x10000, 0x9a0, 0x9, 0x9, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xf) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffff5fb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:18:53 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f00000002c0)={'\x00', 0x0, 0x3, 0x1ff}) dup2(r5, r4) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r5, 0x0, &(0x7f0000000240)="1cddc7853c2c81ed639332f79e196f24f57e9fd491f48b1f46c28e55171e084aaf08602391e8a9e80e70fcdcab0fd143443de73e98667db48e8b80b6252cae203efd939d4e9fcfd7b6ffc785a55e81b6e3", 0x51, 0x40000040}, 0x10000) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xd79a}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fsetxattr(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7573653efd54f4d0433abb3c28eeb2096a8ca1d35560296fdf3d5e97c6"], &(0x7f0000000180)='\x00', 0x1, 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB='\f\x00'/12], 0x2c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x200a}) 20:18:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {0x0, 0x0, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 20:18:53 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x364}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x0) syz_io_uring_setup(0x47, &(0x7f0000000000)={0x0, 0xc1aa, 0x1, 0x2, 0x1f5, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x5, 0xfffffffffffffff8, 0x0, 0xfffffff9, 0x0, 0x1, {0x0, r6}}, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:18:53 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:18:53 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500) [ 2789.488800] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:18:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="120000002600000000000000000000000000000018", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:18:53 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x5, 0x0, 0x6, 0x8, 0x0, 0x0, 0x60040, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={&(0x7f0000000000), 0xb}, 0x60, 0xbb, 0xffff, 0xf, 0x70, 0x3, 0xda62, 0x0, 0x3, 0x0, 0xfffffffffffffffa}, 0xffffffffffffffff, 0x8, r4, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2789.612266] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:19:07 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x854c000000000000) [ 2803.416847] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:19:07 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10010, r0, 0x8000000) r4 = signalfd4(r0, &(0x7f0000000000), 0x8, 0x80800) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r6, r5) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x5, 0x0, r4, &(0x7f0000000040), r6, 0x1, 0x0, 0x1}, 0x1) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) accept(r5, &(0x7f0000000180)=@nl, &(0x7f0000000240)=0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:19:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9", 0x6, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 20:19:07 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:19:07 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r5, r4) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x4004, @fd=r5, 0x40, 0x77f2, 0x800, 0xa, 0x1, {0x2}}, 0xf8) 20:19:07 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x41e) 20:19:07 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 20:19:07 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="12f80bf85ac2e90423b94bb8dbcbc600000026000000000000000000000000000000180000800800000002869700eedfb2f56f0353a1355b237829c96b60810413f18a", @ANYRES32=0xee00, @ANYBLOB="2900000000000000000000f9690212e444e8c4f2d45d55e5d4d8c4846804302564479f14f3834938b7b58446f83d8c607448ed9fdd21b7009e384d0ab54e9b771a1ae4992935d780ecfdd1834309ee0b098750994ae48d50b01ad6a0ccd8ae04c01497c9886c186ade9c3173174f589923821d5264f8e98472f42fef7de7adf8dd18c08c685a975cce5f3a58ba0169f91d506d3b"], 0x2c}}, 0x0) close(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2819.298580] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:19:23 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:19:23 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x15c7, &(0x7f0000000000)={0x0, 0x5bba, 0x2, 0x2, 0x33f, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x28b0, &(0x7f0000000240)={0x0, 0x9704, 0x4, 0x3, 0x2b6, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000340)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x6c24, 0x3aa, 0x3, &(0x7f00000003c0)={[0x68]}, 0x8) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0xa, 0x7fffffff, 0x0, 0x7, 0x0, 0x0, {0x0, r5}}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:19:23 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x2, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 20:19:23 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500) 20:19:23 executing program 4: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(r1, r2) r3 = dup3(r1, r0, 0x0) inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x80) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x1}, 0x1c) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:19:23 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f00000047c0), &(0x7f0000004800)={'fscrypt:', @desc1}, &(0x7f0000004840)={0x0, "608f7260f94ff352d2bce2638a9773121e6e39d506b1a7bee2adcc25cac99a3e70f0bc9d518d108e7d70549e1f091656ef1e2bfe2f03cd4c41797a0e843f0bd1", 0x3d}, 0x48, 0xfffffffffffffffa) keyctl$instantiate(0xc, r0, &(0x7f00000048c0)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'user:', '', 0x20, 0x40}, 0x28, 0xfffffffffffffff9) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000004780)) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/197, 0xc5}, {&(0x7f0000001440)=""/190, 0xbe}, {&(0x7f0000001500)=""/187, 0xbb}], 0x4, &(0x7f00000015c0)=""/175, 0xaf}, 0x790}, {{&(0x7f0000000180)=@x25={0x9, @remote}, 0x80, &(0x7f0000000040)=[{&(0x7f0000001680)=""/220, 0xdc}], 0x1}, 0xffffff2f}, {{&(0x7f0000000240)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/224, 0xe0}, {&(0x7f0000001940)=""/117, 0x75}], 0x3, &(0x7f0000001e00)=""/4096, 0x1000}, 0x785}, {{&(0x7f00000019c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a40)=""/236, 0xec}], 0x1, &(0x7f0000001b80)=""/26, 0x1a}, 0x400}, {{&(0x7f0000001bc0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001c40)=""/128, 0x80}, {&(0x7f0000001cc0)=""/133, 0x85}, {&(0x7f0000002e00)=""/56, 0x38}, {&(0x7f0000002e40)=""/72, 0x48}, {&(0x7f0000002ec0)=""/99, 0x63}, {&(0x7f0000002f40)=""/126, 0x7e}], 0x6}, 0xffffffff}, {{&(0x7f0000003040)=@nl=@proc, 0x80, &(0x7f0000004400)=[{&(0x7f00000030c0)=""/249, 0xf9}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/87, 0x57}, {&(0x7f0000004240)=""/69, 0x45}, {&(0x7f00000042c0)=""/101, 0x65}, {&(0x7f0000004340)=""/13, 0xd}, {&(0x7f0000004380)=""/95, 0x5f}], 0x7, &(0x7f0000004480)=""/249, 0xf9}, 0x7}], 0x6, 0x40000000, &(0x7f0000004700)={0x77359400}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x2000003) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r7 = inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(r6, r7) dup3(r6, r5, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x11, r6, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x1, 0x0, 0x0) rt_sigsuspend(&(0x7f0000004740)={[0x5]}, 0x8) 20:19:23 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {0x0, 0x0, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 20:19:23 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00) 20:19:23 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:19:23 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x2, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 20:19:23 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x0, 0x0, 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) [ 2819.557067] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:19:23 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r9, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r10 = pidfd_open(0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r10, 0x0, 0x0, 0x0, {0x2091}, 0x0, {0x0, r3}}, 0x3) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r12, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x12, 0x26, 0x0, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}}, 0x0) syz_io_uring_submit(r8, r6, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000180)=""/123, 0x7b, 0x4, 0x1}, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:19:24 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) close(0xffffffffffffffff) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='\x00', 0x0, 0x3, &(0x7f0000000240)=[{&(0x7f0000000180)="140319f72f0e7f4a8563c74257733dd72a573d31705f9e9c68ad322c45c1ebf8ab94151bd8825ac0474a2c18eb44d27e46", 0x31, 0xff}, {&(0x7f0000000340)="f257676ead881920ac021af9711a683ad9496d35912f36d3eaa3e283b6f0d98d1b4d98e182f10596e843414e0d6912a6e0205c72d8ad4cbe5ad33520e692ee11317f50a91f63e6a5fac85815b4d1e28e556109b25cf118be84d50bc0a5e5d713f2c6d796c0b28fb844f19db145f543254a5fe6454af2d765f125b2a2897b31b2ad2e53", 0x83, 0x3}, {&(0x7f0000000400)="d94760a948f15f7dc107bea2bcb73955fac70979498c1ee66b617ce17c65e57a820f1555cbcb281cfc02ac729d880c4a6ae8445a8f651bb2e975945d5f7d72d97701beb37014be61191a5d67fc6061bb1ce7f8d933556f99dc9e607d8682761fa0e13cde44563e1196b14076c3ced0146917e2ff5353fd7c94db41bd4fc74c1eb6331f492e4f665d8f2c06506be89367ef549cff264d617cf5fd0f1f", 0x9c, 0x55a1}], 0x40420, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@block={'block', 0x3d, 0x1200}}, {@nocompress}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@map_acorn}, {@uid={'uid', 0x3d, 0xee01}}, {@mode={'mode', 0x3d, 0x1b}}, {}, {@utf8}, {@overriderock}], [{@subj_role={'subj_role', 0x3d, '\')+U'}}, {@subj_type}, {@smackfsroot}, {@appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, ',.&@'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}]}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r4, r3) syz_io_uring_setup(0x50c7, &(0x7f0000000600)={0x0, 0x1e58, 0x4, 0x2, 0x3cb}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000680)) syz_io_uring_submit(r5, r1, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index, 0x0, {0x0, r4}, 0xffffff80, 0x6, 0x0, {0x0, r2, r0}}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x8, 0x8bc, 0x8}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:19:24 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc57) 20:19:24 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf250d000000940003801400020076657468310000000000000000000000060007004e22000014000600ff01000000000000000000000000000114000600200100000000000000000000000000000800010001000000140002006272696467655f736c6176655f30000014000200697036746e6c300000000000000000ffffffffffffff000114000600fc01000000000000000000000000000108000600e50000002c000280080008000000000006000b000200000006000f0000000000080005000400000008000700ff01000008000500c4000000080005002b73582608000500000001000c00038005000800a7000000"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:19:24 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x0, 0x0, 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 20:19:24 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) 20:19:24 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x0, 0x0, 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) [ 2819.836756] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:19:24 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:19:24 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x11, r0, 0x8000000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r7, r6) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x12, 0x26, 0x0, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x1d}, r6, 0x1, 0x0, 0x0, {0x0, r3}}, 0x44f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r9, r8) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000000340)={{0x0, 0x7b, 0x100000001, 0xd8b5, 0x5, 0x1, 0x9, 0x0, 0x115f, 0x2, 0x80000000, 0x0, 0x80000000, 0x18, 0x4}}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:19:24 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2820.038794] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2820.059212] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:19:40 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x7) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:19:40 executing program 4: r0 = syz_io_uring_setup(0x3c26, &(0x7f00000002c0)={0x0, 0x0, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r3 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) r10 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001880), 0x2002, 0x0) io_submit(r9, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r10, 0x0, 0x2}]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:19:40 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) r2 = fork() ptrace(0x10, r2) r3 = fork() ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x0, &(0x7f00000000c0)=""/103) 20:19:40 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1557) 20:19:40 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:19:40 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) dup2(r4, r3) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r6 = dup2(r5, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="0c000000000000000000000089fdaf45a3e133aedf8b3abd040b064ba97950ec3725286ed7980541c2aa05e5b37590019efa537883cd3ac8408877ed125330eb562a3ce02149c47dd27b355ea1ce010a15e6f33abe82f9f84e2a2b956e35bc295bddd28ed78d3fe315c29dc603f01eb95566cb86f12090af4e61ad22b021d5e4a963a7477c8254b76af2bc84f9690bfaaa9948a52c38e9234fdc771310917f13f82cdcbed03b7cfe7b2fa8a1e7e55efb23bb818c7e2b549aa5fbda95e99cddff4c37a3552f6ace87726500000000000000000000c35da8601a0597e398e049e6ed62d93878dec19935071d5ee187780b950da312"], 0x2c}}, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000180)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000001c0)=0x2c) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x12, 0x26, 0x0, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}}, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x7fff, r3, &(0x7f0000000040)=0x300, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="01002000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fcdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB="0500290001000000"], 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x40040) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x8, 0x6, 0x18, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10, 0x80, 0x10000, 0x65f2}}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 20:19:40 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5293) 20:19:40 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) r2 = fork() ptrace(0x10, r2) r3 = fork() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x0, &(0x7f00000000c0)=""/103) waitid(0x1, r2, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) [ 2836.547984] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:19:41 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) r8 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r11, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) r12 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r8, 0x8000000) syz_io_uring_submit(r12, r10, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r5, r10, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x2007, @fd_index=0x9, 0xffffffff, 0x100, 0x20, 0x12, 0x0, {0x2, r3}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:19:41 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:19:41 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:19:41 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) r2 = fork() ptrace(0x10, r2) r3 = fork() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x0, &(0x7f00000000c0)=""/103) waitid(0x1, r2, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:19:41 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5297) 20:19:41 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1b04) [ 2836.894034] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:19:41 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000280), 0xfff, 0x0) preadv(r3, 0x0, 0x0, 0x6, 0xfff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000009, 0x12, r3, 0x8000000) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:19:41 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0x7, 0x4, 0x0, 0xfffffff7, 0x1, 0x1}, 0x1f) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) r8 = io_uring_setup(0x7f49, &(0x7f0000000380)={0x0, 0x6059, 0x10, 0x0, 0x39f, 0x0, r0}) r9 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r12, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x0, r13}}, 0x0) r14 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="73656375726974790000000009000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000190000000000000000fdffffff000000000000000000000000bc7a"], 0x58) syz_io_uring_submit(r5, r2, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r8, 0x0, 0x0, 0x655, 0x2, 0x1, {0x0, r13, r14}}, 0x3f) fsetxattr$trusted_overlay_opaque(r4, &(0x7f00000001c0), &(0x7f0000000340), 0x2, 0x2) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:19:56 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:19:56 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) r3 = fsmount(0xffffffffffffffff, 0x0, 0x70) dup2(r3, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:19:56 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) dup2(r5, r4) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x12, 0x26, 0x0, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}}, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000000)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:19:56 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) r2 = fork() ptrace(0x10, r2) r3 = fork() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x0, &(0x7f00000000c0)=""/103) waitid(0x1, r2, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:19:56 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x52a0) 20:19:56 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1c04) 20:19:56 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) 20:19:56 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x12, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0xc897}, 0x0, 0x0, 0xfb9997a504f14bd3, {0x0, r3}}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x5}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2852.002056] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2852.018859] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:19:56 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2852.093127] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:19:56 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) r2 = fork() ptrace(0x10, r2) fork() waitid(0x1, r2, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) [ 2852.176770] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:19:56 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000040)={r4, r5+60000000}, 0x1, 0x0, 0x0, {0x0, r6}}, 0x8001) io_uring_enter(r0, 0x48ad, 0x0, 0x0, 0x0, 0x0) 20:19:56 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x52b0) 20:19:56 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 1) 20:19:56 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:19:56 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) r2 = fork() ptrace(0x10, r2) waitid(0x1, r2, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:19:56 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0xfffffffffffffffb, 0x9, 0x81, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2852.343671] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:19:56 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1d04) [ 2852.437562] FAULT_INJECTION: forcing a failure. [ 2852.437562] name failslab, interval 1, probability 0, space 0, times 0 [ 2852.440477] CPU: 0 PID: 37229 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 2852.441915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2852.443657] Call Trace: [ 2852.444200] dump_stack+0x107/0x167 [ 2852.444952] should_fail.cold+0x5/0xa [ 2852.445767] ? getname_flags.part.0+0x50/0x4f0 [ 2852.446722] should_failslab+0x5/0x20 [ 2852.447513] kmem_cache_alloc+0x5b/0x310 [ 2852.448364] getname_flags.part.0+0x50/0x4f0 [ 2852.449266] getname_flags+0x9a/0xe0 [ 2852.450037] do_mkdirat+0x8f/0x2b0 [ 2852.450767] ? user_path_create+0xf0/0xf0 [ 2852.451627] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2852.452700] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2852.453772] do_syscall_64+0x33/0x40 [ 2852.454531] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2852.455578] RIP: 0033:0x7fb73f007b19 [ 2852.456339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2852.460130] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2852.461703] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 2852.463164] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2852.464657] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2852.466123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2852.467572] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:19:56 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000001e00)=ANY=[], 0x1280}, 0x0, 0x844, 0x1, {0x0, r3}}, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6e97, 0xab49, 0x0, &(0x7f0000000000)={[0x2000004]}, 0x8) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x20002, 0x74) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) io_uring_enter(r5, 0x58ad, 0x0, 0x0, 0x0, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000040)='.\x00', 0x2000003) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r8 = inotify_add_watch(r6, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(r7, r8) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80) dup2(0xffffffffffffffff, r7) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x88083, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) 20:19:56 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:19:56 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2852.552155] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2870.129020] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:20:14 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) pread64(r4, &(0x7f0000000340)=""/236, 0xec, 0x43a80cba) 20:20:14 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:20:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) r2 = fork() ptrace(0x10, r2) waitid(0x1, r2, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:20:14 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_setup(0x65c6, &(0x7f0000000000)={0x0, 0x5fea, 0x0, 0x2, 0x207}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x0, @fd_index, 0x200, 0x2, 0x5, 0x3}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:20:14 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x52b8) 20:20:14 executing program 1: getpeername(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000040)=0x80) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_open_dev$vcsa(&(0x7f0000000280), 0xfff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r4) preadv(r5, 0x0, 0x0, 0x6, 0xfff) openat(r5, &(0x7f0000000000)='./file0\x00', 0x400020, 0x21) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:20:14 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 2) 20:20:14 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1e04) [ 2870.190042] FAULT_INJECTION: forcing a failure. [ 2870.190042] name failslab, interval 1, probability 0, space 0, times 0 [ 2870.192804] CPU: 1 PID: 37289 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 2870.194419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2870.196328] Call Trace: [ 2870.196946] dump_stack+0x107/0x167 [ 2870.197809] should_fail.cold+0x5/0xa [ 2870.198699] ? create_object.isra.0+0x3a/0xa20 [ 2870.199765] should_failslab+0x5/0x20 [ 2870.200649] kmem_cache_alloc+0x5b/0x310 [ 2870.201595] ? ksys_write+0x21a/0x260 [ 2870.202507] create_object.isra.0+0x3a/0xa20 [ 2870.203526] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2870.204703] kmem_cache_alloc+0x159/0x310 [ 2870.205675] getname_flags.part.0+0x50/0x4f0 [ 2870.206693] getname_flags+0x9a/0xe0 [ 2870.207561] do_mkdirat+0x8f/0x2b0 [ 2870.208386] ? user_path_create+0xf0/0xf0 [ 2870.209349] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2870.210554] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2870.211750] do_syscall_64+0x33/0x40 [ 2870.212604] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2870.213799] RIP: 0033:0x7fb73f007b19 [ 2870.214648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2870.218877] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2870.220625] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 2870.222270] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2870.223911] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2870.225547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2870.227208] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:20:14 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2870.253260] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:20:14 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c00000/0x1000)=nil, &(0x7f0000000340)="a49e919e1fd524d7d410aa634d553d48eb5efd678235e0e29d4d5f03945835a005a3d18000a3ee4f349a44739439729a9da1d44b46ddf317384c49176e8d51ba0652fb17228e8a08a6b33e1b6ad9ee8b871750b385f731721138a971d91be4594bc5d8a113825fbdecb6e83e78ee4adaa4362c269d04575febcf4693ab061b164d345d767be0a043fab1ce761627176cadc14ba1ab29e92d939ae16d8f745fd4ea2fa51b1abb14974e2d1f6357346890", 0xb0, r3}, 0x68) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x6544, 0xa189, 0x2, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:20:14 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2870.372597] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:20:14 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x9352) 20:20:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) r2 = fork() ptrace(0x10, r2) waitid(0x1, r2, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:20:14 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40306, 0x5, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f00000000c0)=ANY=[@ANYBLOB="1b1e6d34fdb246579f660491ea0ddc88ab242fb109e120b9ab003b9a262f4d00b890b038f04ce76060bbe6ab"], 0x8, 0xab630992a8dc22ec) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000180)=""/128) 20:20:14 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:20:14 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x4, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x7a62, &(0x7f0000003000)={0x0, 0x51d, 0x10, 0x0, 0x104}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001e40), &(0x7f0000003080)=0x0) r6 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r11 = fsmount(0xffffffffffffffff, 0x1, 0x2) r12 = syz_open_dev$vcsa(&(0x7f0000000280), 0xfff, 0x0) preadv(r12, 0x0, 0x0, 0x6, 0xfff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r11, 0x2405, r12) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r9, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000003100)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x4, 0x0, 0xffffffffffffffff, &(0x7f00000030c0)={0x11}, r4, 0x3, 0x0, 0x1, {0x0, r10}}, 0x0) r13 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) recvmmsg(r13, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/70, 0x46}], 0x1, &(0x7f0000000340)=""/224, 0xe0}, 0xffffffe0}, {{&(0x7f0000000240)=@isdn, 0x80, &(0x7f00000015c0)=[{&(0x7f00000000c0)=""/37, 0x25}, {&(0x7f0000000440)=""/116, 0x74}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/193, 0xc1}], 0x4, &(0x7f0000001600)=""/117, 0x75}, 0x2d6f}, {{&(0x7f0000001680)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001700)=""/200, 0xc8}], 0x1, &(0x7f0000001840)=""/179, 0xb3}, 0x4010}, {{&(0x7f0000001900)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/121, 0x79}, {&(0x7f0000001a00)=""/30, 0x1e}, {&(0x7f0000001a40)=""/56, 0x38}, {&(0x7f0000001a80)=""/21, 0x15}, {&(0x7f0000001ac0)=""/154, 0x9a}], 0x5, &(0x7f0000001c00)=""/253, 0xfd}, 0x4}, {{&(0x7f0000001d00)=@can, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001e00)=""/41, 0x29}, {&(0x7f0000001e40)}], 0x2, &(0x7f0000001ec0)=""/4096, 0x1000}, 0x7fffffff}], 0x5, 0x40000020, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:20:14 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) [ 2870.628145] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:20:33 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 3) 20:20:33 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3157) 20:20:33 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x5fc5, 0x435a, 0x0, &(0x7f0000000000)={[0x81]}, 0x8) 20:20:33 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r7, r6) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="8c000000e9ffffffffffffff"], 0x2c}}, 0x0) fsetxattr$trusted_overlay_opaque(r6, &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r5, r4) copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x100, r5, &(0x7f0000000040)=0xc9f9, 0x9e4b, 0x0) io_uring_enter(r0, 0x58a7, 0x0, 0x0, 0x0, 0x0) 20:20:33 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:20:33 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x9752) 20:20:33 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x400}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x4}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r5, r4) pread64(r5, &(0x7f0000000340)=""/229, 0xe5, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r7, r6) fallocate(r7, 0x10, 0xf0b, 0x20000) 20:20:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) r2 = fork() fork() waitid(0x1, r2, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) [ 2889.375934] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2889.447305] FAULT_INJECTION: forcing a failure. [ 2889.447305] name failslab, interval 1, probability 0, space 0, times 0 [ 2889.450062] CPU: 1 PID: 37405 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 2889.451451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2889.453099] Call Trace: [ 2889.453629] dump_stack+0x107/0x167 [ 2889.454370] should_fail.cold+0x5/0xa [ 2889.455133] ? create_object.isra.0+0x3a/0xa20 [ 2889.456047] should_failslab+0x5/0x20 [ 2889.456805] kmem_cache_alloc+0x5b/0x310 [ 2889.457619] ? ksys_write+0x21a/0x260 [ 2889.458396] create_object.isra.0+0x3a/0xa20 [ 2889.459271] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2889.460290] kmem_cache_alloc+0x159/0x310 [ 2889.461133] getname_flags.part.0+0x50/0x4f0 [ 2889.462035] getname_flags+0x9a/0xe0 [ 2889.462785] do_mkdirat+0x8f/0x2b0 [ 2889.463500] ? user_path_create+0xf0/0xf0 [ 2889.464337] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2889.465381] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2889.466444] do_syscall_64+0x33/0x40 [ 2889.467189] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2889.468237] RIP: 0033:0x7fb73f007b19 [ 2889.468982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2889.472670] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2889.474206] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 2889.475632] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2889.477061] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2889.478493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2889.479941] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 [ 2889.494109] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:20:33 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:20:33 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x7, 0x6, 0x1, 0x3f, 0x0, 0x2, 0x20000, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7fff}, 0x800, 0x1, 0x2, 0x4, 0xa78, 0x8, 0x4, 0x0, 0x25ce}, r4, 0xf, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2889.583858] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:20:34 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) syz_io_uring_setup(0x10dd, &(0x7f0000000180)={0x0, 0xa57d, 0x20, 0x0, 0x3bf, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r7 = dup2(r6, r5) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[r6, r0]}, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000000340)={0x0, 0x0, "c76b50c05bb9caf35c423317c6486e39a9b146e42bc35cb4110f65e8f61328933e9fe39302cdca96bddf3591884f17869f92627f8a4e9b4b708c216d06921783302c3ef0f30b3b47ccd970ffa15e2687bf7391cc68e19e49ff86dabc673258bb5d8492c7dff56fb3edc02f04f8410ece43dd3e4a64acf4c21753a30990b977fcc491990442a0c4fac514432decf1acb043aaf77bdec11c45f0e8b37cff215ca59af6025d0c9faacefb7af688d5259fc3bc7a7b5fdca89d700a32f99f7f297c29ae603d8dec1a15106f34ecb896b0efe5f9737aeaf7431d9aedbcfbe089f5d4dfe3e29151c7f65bac53ddbcb82c6ded801bf0df7766778b13b9e6266c8e473366", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000001340)={{r8, 0x1, 0x7, 0x7, 0x0, 0x1, 0x3, 0x4, 0x0, 0x6, 0x10000, 0x9, 0x7, 0x100, 0x6}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 20:20:34 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:20:34 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 4) 20:20:34 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3c57) [ 2889.798027] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2889.835310] FAULT_INJECTION: forcing a failure. [ 2889.835310] name failslab, interval 1, probability 0, space 0, times 0 [ 2889.841557] CPU: 1 PID: 37460 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 2889.843177] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2889.845093] Call Trace: [ 2889.845709] dump_stack+0x107/0x167 [ 2889.846583] should_fail.cold+0x5/0xa [ 2889.847469] ? __d_alloc+0x2a/0x990 [ 2889.848316] should_failslab+0x5/0x20 [ 2889.849197] kmem_cache_alloc+0x5b/0x310 [ 2889.850157] __d_alloc+0x2a/0x990 [ 2889.850960] ? dput+0x1ae/0xc90 [ 2889.851732] d_alloc+0x46/0x1c0 [ 2889.852502] __lookup_hash+0xcc/0x190 [ 2889.853380] filename_create+0x186/0x4a0 [ 2889.854328] ? filename_parentat+0x570/0x570 [ 2889.855339] ? getname_flags.part.0+0x1dd/0x4f0 [ 2889.856420] do_mkdirat+0xa2/0x2b0 [ 2889.857242] ? user_path_create+0xf0/0xf0 [ 2889.858211] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2889.859411] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2889.860601] do_syscall_64+0x33/0x40 [ 2889.861455] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2889.862644] RIP: 0033:0x7fb73f007b19 [ 2889.863500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2889.867700] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2889.869441] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 2889.871090] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2889.872718] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2889.874356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2889.875984] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:20:50 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) r2 = fork() fork() waitid(0x1, r2, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:20:50 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xa052) 20:20:50 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00) 20:20:50 executing program 4: prctl$PR_GET_TIMERSLACK(0x1e) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r6, r5) syz_io_uring_submit(r1, r2, &(0x7f0000002600)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0xe3b, 0x0, 0xb53, 0x0, 0x1, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000280), 0xfff, 0x0) preadv(r7, 0x0, 0x0, 0x6, 0xfff) clock_gettime(0x0, &(0x7f0000002580)={0x0, 0x0}) recvmmsg$unix(r7, &(0x7f0000002400)=[{{&(0x7f0000000340), 0x6e, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000013c0)=""/22, 0x16}, {&(0x7f0000001400)=""/51, 0x33}, {&(0x7f0000001440)=""/170, 0xaa}], 0x3, &(0x7f0000001540)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001580), 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001600)=""/13, 0xd}, {&(0x7f0000001640)=""/215, 0xd7}, {&(0x7f0000001740)=""/54, 0x36}, {&(0x7f0000001780)=""/155, 0x9b}, {&(0x7f0000001840)=""/94, 0x5e}, {&(0x7f00000018c0)=""/145, 0x91}, {&(0x7f0000001980)=""/41, 0x29}, {&(0x7f00000019c0)=""/12, 0xc}, {&(0x7f0000001a00)=""/70, 0x46}], 0x9}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001bc0)=""/138, 0x8a}, {&(0x7f0000001c80)=""/74, 0x4a}, {&(0x7f0000001e00)=""/157, 0x9d}], 0x3}}, {{&(0x7f0000001ec0)=@abs, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001f40)=""/185, 0xb9}, {&(0x7f0000002000)=""/235, 0xeb}, {&(0x7f0000002100)=""/69, 0x45}], 0x3, &(0x7f0000002180)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002280)=""/49, 0x31}, {&(0x7f00000022c0)=""/190, 0xbe}], 0x2, &(0x7f00000023c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x6, 0x0, &(0x7f00000025c0)={r8, r9+60000000}) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00022abd7000fedbdf250100000008000600ac1414bb050d04000000000014000700fc00000000000000000000000000000104000500050003003b00def6e6cf1110114586b5"], 0x4c}, 0x1, 0x0, 0x0, 0xfad0c0fdf2f3cf2b}, 0x4c000) 20:20:50 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:20:50 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 5) 20:20:50 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r5 = dup2(r4, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r4, 0x3f, 0x1, 0x615, 0x1, 0x0, {0x1}}, 0xd6c) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10010, r0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r8, r7) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1263147dc40000004f3d00000000000000000000180000800800000078e6f01fe268ad53720a05b8daf72f6af08493b33766ac8bfd6ea735361005508aacdce15acccdd85bc87e826bcf95b964f89c53f8", @ANYRES32=0xee00, @ANYBLOB="0c0000000000000001000000"], 0x2c}}, 0x0) ioctl$BTRFS_IOC_DEFRAG(r7, 0x50009402, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x7, 0x80000000, 0x17, @empty, @remote, 0x10, 0x10, 0x3, 0x5}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="a0010000", @ANYRES16=0x0, @ANYBLOB="100000020000fbdbdf250d00000058000180140002006261746164765f736c6176655f3000001400020067656e65766530000000000000000000140002006272696467655f736c6176655f30000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300000000000c00018008000300821d8f2e2400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000500000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6c0001801400020076657468305f746f5f687372000000001400020076657468305f6d616376746170000000140002006361696630000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r9, @ANYBLOB="500001801400020065727370616e3000000000000000000008000300000000001400020069703665727370616e3000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e31000000000000000018000180140002006261746164763000000000000000000014000180080003000300000008000300010000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x1a0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040040) 20:20:50 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x6000, @fd, 0x8, &(0x7f0000000000)=""/127, 0x7f, 0x12, 0x1}, 0x3) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2905.700951] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2905.749454] FAULT_INJECTION: forcing a failure. [ 2905.749454] name failslab, interval 1, probability 0, space 0, times 0 [ 2905.752829] CPU: 1 PID: 37489 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 2905.754237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2905.755920] Call Trace: [ 2905.756453] dump_stack+0x107/0x167 [ 2905.757192] should_fail.cold+0x5/0xa [ 2905.757956] ? create_object.isra.0+0x3a/0xa20 [ 2905.758874] ? create_object.isra.0+0x3a/0xa20 [ 2905.759794] should_failslab+0x5/0x20 [ 2905.760554] kmem_cache_alloc+0x5b/0x310 [ 2905.761374] create_object.isra.0+0x3a/0xa20 [ 2905.762265] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2905.763285] kmem_cache_alloc+0x159/0x310 [ 2905.764112] ? __d_lookup+0x3bf/0x760 [ 2905.764900] __d_alloc+0x2a/0x990 [ 2905.765605] d_alloc+0x46/0x1c0 [ 2905.766291] __lookup_hash+0xcc/0x190 [ 2905.767057] filename_create+0x186/0x4a0 [ 2905.767869] ? filename_parentat+0x570/0x570 [ 2905.768748] ? getname_flags.part.0+0x1dd/0x4f0 [ 2905.769689] do_mkdirat+0xa2/0x2b0 [ 2905.770413] ? user_path_create+0xf0/0xf0 [ 2905.771249] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2905.772292] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2905.773361] do_syscall_64+0x33/0x40 [ 2905.774123] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2905.775146] RIP: 0033:0x7fb73f007b19 [ 2905.775891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2905.779541] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2905.781064] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 2905.782493] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2905.783916] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2905.785338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2905.786773] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:20:50 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf250d000000940003801400020076657468310000000000000000000000060007004e22000014000600ff01000000000000000000000000000114000600200100000000000000000000000000000800010001000000140002006272696467655f736c6176655f30000014000200697036746e6c300000000000000000ffffffffffffff000114000600fc01000000000000000000000000000108000600e50000002c000280080008000000000006000b000200000006000f0000000000080005000400000008000700ff01000008000500c4000000080005002b73582608000500000001000c00038005000800a7000000"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2905.979750] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:21:06 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) r2 = fork() fork() waitid(0x1, r2, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:21:06 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) 20:21:06 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) writev(r3, &(0x7f0000000640)=[{&(0x7f0000000180)="4638b305782c02837bcc309701978a83d40e2637090d4cb380fee6a85163a5687398dfd6cc4d186a8e1f43f2a545f142b2a673d2a538949c6c7d0c78dd2adeb9203306580e7fe87b9d4493b6e75ba13ff8a3778ed48a258ddc4c010da2fc3b1fc6de7585595908d614493157a220b4d27366855455ca215ecc738b6c2ed9", 0x7e}, {&(0x7f0000000240)="0442040845da5e5cad8558f0b47ebe986db6b9c1d3b9ca57fe74ff13457f0a7e4193a0917ddd0fc16392acad2051cee9a614304e8547b07afc1ca577b614b717965b4e048e811fcc0a2856d3cc4bad92e5464935cb5ed6412e41e9725b40", 0x5e}, {&(0x7f0000000340)="d8ac74661e5e8523d1099b12e1db51a50b07cfa6aec6c6106f67b34894b2a0c033727e5cfbd827857fbf129813b4bc03eb8f09236bf3f1fa2f0df9a5e5fdec154d2d900e281b327bb8046f76c8d6aa58b3bb833c2d2076d230f3c1c8069fc05359ee212642411de4f5c4c5", 0x6b}, {&(0x7f00000003c0)="d992ed39c448a934f1e66888f54f271997fb363636b5ea692ba4228ff28a505ce09de9954badfa6e0664196e9800b1395fdced4a83bd7569af4d7b98dd79da309bdbb92c5e5346a9b722b4a20ece0422f95a6f85de3732c8125523ba6802d3ea1eb9617b459a61bcd016a47dfcc21ee893243c3059b295ca09ebfe6af29feb350530bf9d62fc006cb92e539dd3937d732d3e052222df288c6564e242bf36b8dfaff426601209ed1a0a136990ff9fe7f649dc26215ee998a2c8d17a35414c1e3ba6a8ad29b73d4ab68ae777f1e9b03383c07273dfc8da35fa2306b6190411996c7a3f72c80b87f5", 0xe7}, {&(0x7f00000004c0)="8cfd8a25ef696338e27c0c4c62bf609fd552e0e683b2ad508853f54d078ba4b4d78a32c2547b1f8c986666c6cb2500227e69207fd3fc28bd33404382686a67114d73f3", 0x43}, {&(0x7f0000000540)="f4bf73b6e36318898e4a57beb38a4364e0d3ae9283175ae2e6bbc659c2bb32fa63a134c7ac47cee3ed4ad89bfdb00efdc571e8441004c50f141462c5b6a4229ac9933ebbd54d717606016d479db095924e197891fb7a10613e94582d449cbb4a394734c7e23d5b5d1a3e864352525216e0e4f8c6f6dcaa808ada64f6873f4036204295b7def019ae7e9cc017b0506ed09d5e0c75a6a59a139ee576f2ec550336d201f7b2b8385d17c0b23d4abe345ec56907bba8ab26b0762965ef2975456b36d852ece6", 0xc4}], 0x6) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:06 executing program 1: r0 = syz_io_uring_setup(0x664b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:06 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 6) 20:21:06 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:21:06 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xb052) [ 2922.314433] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:21:06 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/199, 0xc7}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/173, 0xad}, {&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f00000015c0)=""/193, 0xc1}], 0x7, &(0x7f00000016c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000000240), 0x6e, &(0x7f00000000c0)=[{&(0x7f0000001780)=""/150, 0x96}], 0x1, &(0x7f0000001840)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001940)=""/95, 0x5f}, {&(0x7f00000019c0)=""/115, 0x73}, {&(0x7f0000001a40)=""/162, 0xa2}, {&(0x7f0000001b00)=""/60, 0xff43}, {&(0x7f0000001b40)=""/169, 0xa9}, {&(0x7f0000001c00)=""/32, 0x20}, {&(0x7f0000002000)}, {&(0x7f0000001c80)=""/19, 0x13}, {&(0x7f0000001e00)=""/202, 0xca}, {&(0x7f0000001f00)=""/249, 0xf9}], 0xa, &(0x7f0000002000)}}, {{&(0x7f0000002100)=@abs, 0x6e, &(0x7f0000003240)=[{&(0x7f0000002180)=""/112, 0x70}, {&(0x7f0000002200)=""/60, 0x3c}, {&(0x7f0000002240)=""/4096, 0x1000}], 0x3, &(0x7f0000003280)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}], 0x4, 0x40, &(0x7f00000034c0)={0x77359400}) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x1d0f, 0x1, 0x0, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x2000003) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r7 = inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(r6, r7) dup3(r6, r5, 0x0) bind$inet(r6, &(0x7f0000003500)={0x2, 0x4e22, @private=0xa010100}, 0x10) openat(r4, &(0x7f0000001c40)='./file0\x00', 0x400000, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r8, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x12, 0x26, 0x0, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003540)) [ 2922.381185] FAULT_INJECTION: forcing a failure. [ 2922.381185] name failslab, interval 1, probability 0, space 0, times 0 [ 2922.384087] CPU: 1 PID: 37561 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 2922.385530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2922.387236] Call Trace: [ 2922.387789] dump_stack+0x107/0x167 [ 2922.388526] should_fail.cold+0x5/0xa [ 2922.389304] ? cgroup_mkdir+0x254/0xf50 [ 2922.390125] should_failslab+0x5/0x20 [ 2922.390917] __kmalloc+0x72/0x390 [ 2922.391638] cgroup_mkdir+0x254/0xf50 [ 2922.392409] ? cgroup_destroy_locked+0x710/0x710 [ 2922.393388] kernfs_iop_mkdir+0x14d/0x1e0 [ 2922.394260] vfs_mkdir+0x493/0x700 [ 2922.394978] do_mkdirat+0x150/0x2b0 [ 2922.395728] ? user_path_create+0xf0/0xf0 [ 2922.396582] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2922.397661] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2922.398735] do_syscall_64+0x33/0x40 [ 2922.399503] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2922.400566] RIP: 0033:0x7fb73f007b19 [ 2922.401314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2922.405108] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2922.406698] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 2922.408164] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2922.409629] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2922.411100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2922.412573] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:21:06 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:21:06 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2922.531416] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:21:06 executing program 4: r0 = syz_io_uring_setup(0x9de, &(0x7f00000002c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x2000003) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(r5, r6) r7 = dup3(r5, r4, 0x0) inotify_add_watch(r7, &(0x7f0000000080)='./file0\x00', 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xff, 0x7, 0x5, 0x80, 0x0, 0x6, 0x8ca0b15d53a0b36, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x3}, 0x141a3, 0x3, 0x1, 0x6, 0x7, 0xfffffffc, 0x7fff, 0x0, 0x7, 0x0, 0x66d8}, 0x0, 0xa, r7, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) pwrite64(r7, &(0x7f0000000000)="34040a515f3a5f6e5379", 0xa, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000280), 0xfff, 0x0) preadv(r8, 0x0, 0x0, 0x6, 0xfff) openat(r8, &(0x7f0000000200)='./file0\x00', 0x1, 0x20) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:07 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x2c9e, &(0x7f0000000340)={0x0, 0x53a5, 0x4, 0x2, 0x14c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x8001) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:07 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 7) 20:21:07 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2922.764782] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2922.776152] FAULT_INJECTION: forcing a failure. [ 2922.776152] name failslab, interval 1, probability 0, space 0, times 0 [ 2922.778814] CPU: 1 PID: 37623 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 2922.780242] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2922.781944] Call Trace: [ 2922.782510] dump_stack+0x107/0x167 [ 2922.783277] should_fail.cold+0x5/0xa [ 2922.784073] ? cgroup_mkdir+0x254/0xf50 [ 2922.784907] should_failslab+0x5/0x20 [ 2922.785698] __kmalloc+0x72/0x390 [ 2922.786449] cgroup_mkdir+0x254/0xf50 [ 2922.787253] ? cgroup_destroy_locked+0x710/0x710 [ 2922.788231] kernfs_iop_mkdir+0x14d/0x1e0 [ 2922.789087] vfs_mkdir+0x493/0x700 [ 2922.789825] do_mkdirat+0x150/0x2b0 [ 2922.790590] ? user_path_create+0xf0/0xf0 [ 2922.791454] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2922.792536] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2922.793626] do_syscall_64+0x33/0x40 [ 2922.794419] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2922.795476] RIP: 0033:0x7fb73f007b19 [ 2922.796254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2922.800057] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2922.801618] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 2922.803106] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2922.804577] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2922.806041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 20:21:07 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x570c) [ 2922.807517] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:21:07 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xb603) 20:21:07 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 8) 20:21:07 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x7, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:07 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:21:07 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x220800, 0x23456, {0x0, r3}}, 0x400) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:07 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x54}, 0x0, 0x40010002, 0x0, {0x1}}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r6 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r9, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd, 0x9, &(0x7f00000001c0)=[{&(0x7f0000000180)="9ed133281c3e784f158565ce40b1754144979393920ce5afa6d8f2dcee30b1d7a0dfd8ef57a662ed32044aa780115ec1ad068dea4065c9", 0x37}, {&(0x7f0000000340)="0b5ee8e25f8dad4febec1c549bc0620e20edf07a5d6baa73f09df6e97ea6c4654693c787b1b1e3a6ae060f8efb4d26947606a61b576d248dfc0dc847a892bce04ddd8575104f5b59870acba047e022df3a12e7505737bf54011ab996fb0acffdabbbba1a11f61b29a8e678f73cdee0a0af5876ea39dc7fdf34855416d5283d7b5795ff7d6b23bede09339cad73a86f2e6baf8ca9ef", 0x95}, {&(0x7f0000000240)="bc152112c41ee1f82999457af6ce9d52cf1f9000cf04813ced906ad3b29918bdcde62b2139e8538a8c0d775a64ffd4d1900fe3b621d9a1300ac1d19b2d10f55a53b3687c41fcbd92fc04b4e6e119f6fc06c96ab6436db7fa278685990112b58087364f7346e1a4757b", 0x69}], 0x3, 0x12, 0x0, {0x3, r10}}, 0x2350) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040)=r11, 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:07 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xb703) 20:21:07 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) ptrace(0x10, 0x0) fork() waitid(0x1, 0x0, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) [ 2923.176405] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2923.210193] FAULT_INJECTION: forcing a failure. [ 2923.210193] name failslab, interval 1, probability 0, space 0, times 0 [ 2923.212595] CPU: 1 PID: 37673 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 2923.213995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2923.215675] Call Trace: [ 2923.216207] dump_stack+0x107/0x167 [ 2923.216953] should_fail.cold+0x5/0xa [ 2923.217731] ? create_object.isra.0+0x3a/0xa20 [ 2923.218671] should_failslab+0x5/0x20 [ 2923.219436] kmem_cache_alloc+0x5b/0x310 [ 2923.220266] create_object.isra.0+0x3a/0xa20 [ 2923.221173] kmemleak_alloc_percpu+0xa0/0x100 [ 2923.222084] pcpu_alloc+0x4e2/0x1240 [ 2923.222866] ? cset_cgroup_from_root+0x2a0/0x2a0 [ 2923.223825] percpu_ref_init+0x31/0x3d0 [ 2923.224634] cgroup_mkdir+0x28b/0xf50 [ 2923.225410] ? cgroup_destroy_locked+0x710/0x710 [ 2923.226387] kernfs_iop_mkdir+0x14d/0x1e0 [ 2923.227225] vfs_mkdir+0x493/0x700 [ 2923.227948] do_mkdirat+0x150/0x2b0 [ 2923.228683] ? user_path_create+0xf0/0xf0 [ 2923.229521] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2923.230578] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2923.231625] do_syscall_64+0x33/0x40 [ 2923.232376] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2923.233402] RIP: 0033:0x7fb73f007b19 [ 2923.234146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2923.237814] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2923.239330] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 2923.240763] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2923.242182] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2923.243621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2923.245050] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:21:21 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xb803) 20:21:21 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5715) 20:21:21 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_setup(0x4089, &(0x7f0000000740)={0x0, 0x9684, 0x10, 0x1, 0x87}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/22, 0x16}, {&(0x7f0000000180)=""/89, 0x59}, {&(0x7f0000000040)}, {&(0x7f00000000c0)=""/27, 0x1b}, {&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/150, 0x96}, {&(0x7f0000000240)=""/48, 0x30}, {&(0x7f00000004c0)=""/164, 0xa4}, {&(0x7f0000000580)=""/148, 0x94}], 0x9, 0x2, 0x36) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000840)=ANY=[@ANYBLOB="01010000003da50ab00081e23fe32859269f515b", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000700)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0xd0f7}) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20004890}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xa0, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x6c, 0x22, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa9ae}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffff8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8001}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x100}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x810) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:21 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf250d000000940003801400020076657468310000000000000000000000060007004e22000014000600ff01000000000000000000000000000114000600200100000000000000000000000000000800010001000000140002006272696467655f736c6176655f30000014000200697036746e6c300000000000000000ffffffffffffff000114000600fc01000000000000000000000000000108000600e50000002c000280080008000000000006000b000200000006000f0000000000080005000400000008000700ff01000008000500c4000000080005002b73582608000500000001000c00038005000800a7000000"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:21:21 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:21 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = dup2(r5, r4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$batadv(0x0, r6) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0x8, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r8, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0xfec6, 0x39, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r11, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000080)={r11, 0x1, 0x6, @dev}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r8, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x40040) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @remote}, r11}, 0x14) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x820}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r12, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:21 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) ptrace(0x10, 0x0) fork() waitid(0x1, 0x0, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:21:21 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 9) [ 2937.098861] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2937.113992] device lo entered promiscuous mode [ 2937.180090] FAULT_INJECTION: forcing a failure. [ 2937.180090] name failslab, interval 1, probability 0, space 0, times 0 [ 2937.182765] CPU: 1 PID: 37729 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 2937.184304] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2937.186140] Call Trace: [ 2937.186755] dump_stack+0x107/0x167 [ 2937.187574] should_fail.cold+0x5/0xa [ 2937.188425] ? create_object.isra.0+0x3a/0xa20 [ 2937.189446] should_failslab+0x5/0x20 [ 2937.190302] kmem_cache_alloc+0x5b/0x310 [ 2937.191224] ? mark_held_locks+0x9e/0xe0 [ 2937.192138] create_object.isra.0+0x3a/0xa20 [ 2937.193132] kmemleak_alloc_percpu+0xa0/0x100 [ 2937.194141] pcpu_alloc+0x4e2/0x1240 [ 2937.195015] ? cset_cgroup_from_root+0x2a0/0x2a0 [ 2937.196075] percpu_ref_init+0x31/0x3d0 [ 2937.196285] device lo left promiscuous mode [ 2937.196968] cgroup_mkdir+0x28b/0xf50 [ 2937.198284] ? cgroup_destroy_locked+0x710/0x710 [ 2937.199405] kernfs_iop_mkdir+0x14d/0x1e0 [ 2937.200354] vfs_mkdir+0x493/0x700 [ 2937.201163] do_mkdirat+0x150/0x2b0 [ 2937.202168] ? user_path_create+0xf0/0xf0 [ 2937.203126] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2937.204549] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2937.205718] do_syscall_64+0x33/0x40 [ 2937.206755] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2937.207907] RIP: 0033:0x7fb73f007b19 [ 2937.208918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2937.213011] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2937.214982] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 2937.216562] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2937.217317] device lo entered promiscuous mode [ 2937.218130] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 20:21:21 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$batadv(0x0, r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0x8, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0xfec6, 0x39, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @dev}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x40040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000004800)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000004a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000049c0)={&(0x7f0000004840)={0x178, 0x0, 0x10, 0x70bd2b, 0x1e62, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x1) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r11, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2937.218144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2937.218157] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:21:21 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) ptrace(0x10, 0x0) fork() waitid(0x1, 0x0, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) [ 2937.240210] device lo entered promiscuous mode [ 2937.245439] device lo left promiscuous mode 20:21:21 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf250d000000940003801400020076657468310000000000000000000000060007004e22000014000600ff01000000000000000000000000000114000600200100000000000000000000000000000800010001000000140002006272696467655f736c6176655f30000014000200697036746e6c300000000000000000ffffffffffffff000114000600fc01000000000000000000000000000108000600e50000002c000280080008000000000006000b000200000006000f0000000000080005000400000008000700ff01000008000500c4000000080005002b73582608000500000001000c00038005000800a7000000"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2937.311225] device lo left promiscuous mode [ 2937.322469] device lo entered promiscuous mode [ 2937.330596] device lo left promiscuous mode 20:21:21 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index, 0x2, 0x0, 0xfff, 0x4, 0x0, {0x0, r5}}, 0x3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:21 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = fork() ptrace(0x10, r1) fork() waitid(0x1, r1, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) [ 2937.355204] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:21:21 executing program 1: r0 = syz_io_uring_setup(0x40a6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, r5, {0x2800}}, './file0\x00'}) syz_io_uring_setup(0x3a73, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x1, 0x132, 0x0, r6}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) r10 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r13, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r10, 0x0) r14 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r10, 0x8000000) syz_io_uring_submit(0x0, r8, &(0x7f0000000540)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r9, 0x0, &(0x7f0000000480)="7f4d45b62b809fe877a8d8f8b59f73e4928e738d3eaba1ada8753d75d6f1b8b87447959ddb239c70a72a33bb9a3caaa6d5d82274914a769c2036c072ba7bfa402bcdf78e180faf2f4fe07e582385a72e5d804b9996cff839df81c0cfc9ab1778939f257397ed009c00c02121fb03f8606eecb5ca116bc50f25f724d2b2cb8fbbbf24ef0db513da6b857e87a4a58c508584", 0x91, 0x20040000, 0x1}, 0x7ff) syz_io_uring_submit(r4, r12, &(0x7f0000000180), 0x800) syz_io_uring_submit(r14, r12, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r7, r12, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)="086b470554b512c6e7c8a4fb3098e7ca65473485a4c1c0968076d46f20712f540f6f2a741560ccfa967c47a008f8a9e55bdfeef9850d40d3ba3a5ef30c8634976216baaaf0368babfaa3eab10e6f62f258817782e262b79e7571e60a6270165bdeb199ffcf6de2db71ee62ad1726eea62f29e92a94b8a310ffc685326ff662e924528e4b3a2c7f10ebdd51a7ff36f4a2d0126e740aff374b3b1bb5de41ca38b29cfc6ac43932bf302096658dd96dc752d428e0", 0xb3, 0x0, 0x1, {0x0, r3}}, 0x5) 20:21:21 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = fork() ptrace(0x10, r4) syz_io_uring_setup(0x1007, &(0x7f0000000180)={0x0, 0xf8f4, 0x10, 0x3, 0x3c5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x2, 0x4007, @fd_index=0x9, 0xff, &(0x7f0000000400)="ae8a5c7206124ee6056aa5f2d11e516a72a209241f4581c9a347670ada9594c2720e9eefdc4ab2080b02b4b6a9fa0a5ba3233b79fa4e529fbb863a00358b4c838b12df65d7ca2aa848f4e536e878a6bfd5cab313004ad4dbca86ecd34b8c559e939c3164931ee89d94256682f5046db4a5d28bc86b499310ddfd4941bafa0ff35471", 0x82, 0x2}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x800c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0xfffffffffffffffb}}, r4, 0x3, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) wait4(r4, &(0x7f0000000000), 0x80000000, &(0x7f0000000340)) 20:21:36 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = fork() ptrace(0x10, r1) fork() waitid(0x1, r1, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:21:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 10) 20:21:36 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xb852) 20:21:36 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf250d000000940003801400020076657468310000000000000000000000060007004e22000014000600ff01000000000000000000000000000114000600200100000000000000000000000000000800010001000000140002006272696467655f736c6176655f30000014000200697036746e6c300000000000000000ffffffffffffff000114000600fc01000000000000000000000000000108000600e50000002c000280080008000000000006000b000200000006000f0000000000080005000400000008000700ff01000008000500c4000000080005002b73582608000500000001000c00038005000800a7000000"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:21:36 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5731) 20:21:36 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000000)=""/98, 0x62}, {&(0x7f0000000180)=""/71, 0x47}, {&(0x7f0000000440)=""/211, 0xd3}, {&(0x7f0000000540)=""/255, 0xff}], 0x5, 0x6, 0x9) r6 = inotify_init() syz_io_uring_submit(r4, r2, &(0x7f0000000680)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r6, 0x7f, 0x0, 0x1, 0x5, 0x1, {0x0, r3}}, 0x7f) fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f0000000700)=ANY=[@ANYBLOB="05010000000080f1edb2266adce622f2cebebda18ec3f100958b7dad9ff86e6900000000000000632989ac67409f447438c9443e074558b2e982886c5c3eeabb3cf3833d00c827904cfb3587ea1c96d2b73ec63a36ce34ea8da96c825a42dc77563bf51355fda9846e42892dfc48bf065fd6e296c5b94352c2d11ad2147701368f4b19b7b3ec48afd0934c0900000013eb010102ffe328746804ec96097143123c6f58fe8bfb00"/180], 0x9e, 0x0) r7 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r10, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r7, 0x8000000) syz_io_uring_submit(r11, r9, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r9, &(0x7f0000000640)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x80, 0x6, 0x0, {0x0, r12, r5}}, 0x81e) 20:21:36 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r6, r5) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x400, 0x0, &(0x7f0000000000)=[r4, r6]}, 0x2) 20:21:36 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x2, 0x80}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r6, r5) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x12, 0x26, 0x0, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = fork() ptrace(0x10, r7) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x87, 0xfd, 0x0, 0x0, 0x5, 0x400, 0xb, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0x7ff}, 0x200, 0x6b97, 0x53, 0x9, 0x100, 0x2, 0x4, 0x0, 0x7, 0x0, 0x5}, r7, 0xc, r4, 0xa) [ 2952.463180] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2952.484203] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2952.526302] FAULT_INJECTION: forcing a failure. [ 2952.526302] name failslab, interval 1, probability 0, space 0, times 0 [ 2952.528966] CPU: 0 PID: 37797 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 2952.530362] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2952.532051] Call Trace: [ 2952.532598] dump_stack+0x107/0x167 [ 2952.533340] should_fail.cold+0x5/0xa [ 2952.534107] ? percpu_ref_init+0xd8/0x3d0 [ 2952.534956] should_failslab+0x5/0x20 [ 2952.535722] kmem_cache_alloc_trace+0x55/0x320 [ 2952.536650] ? cset_cgroup_from_root+0x2a0/0x2a0 [ 2952.537601] percpu_ref_init+0xd8/0x3d0 [ 2952.538409] cgroup_mkdir+0x28b/0xf50 [ 2952.539202] ? cgroup_destroy_locked+0x710/0x710 [ 2952.540159] kernfs_iop_mkdir+0x14d/0x1e0 [ 2952.540996] vfs_mkdir+0x493/0x700 [ 2952.541714] do_mkdirat+0x150/0x2b0 [ 2952.542451] ? user_path_create+0xf0/0xf0 [ 2952.543300] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2952.544352] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2952.545398] do_syscall_64+0x33/0x40 [ 2952.546148] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2952.547194] RIP: 0033:0x7fb73f007b19 [ 2952.547945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2952.551648] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2952.553177] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 2952.554610] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2952.556049] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2952.557483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2952.558924] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:21:36 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:21:37 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = fork() ptrace(0x10, r0) fork() waitid(0x1, r0, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) [ 2952.652407] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2952.703511] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2952.784267] cgroup: fork rejected by pids controller in /syz3 20:21:37 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000d, 0x50, 0xffffffffffffffff, 0x8000000) r5 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x6991, &(0x7f0000000180)={0x0, 0x71cb, 0x4, 0x2, 0x1c, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000000c0)=0x0) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x1c) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000a00)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x1, 0x4, {0x0, r7}, 0x5, 0x0, 0x1, {0x0, 0x0, r8}}, 0x7) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r9, r5) write$binfmt_elf64(r9, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x6c6) openat(r4, &(0x7f0000000000)='./file0\x00', 0x200000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:37 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 11) [ 2952.951167] FAULT_INJECTION: forcing a failure. [ 2952.951167] name failslab, interval 1, probability 0, space 0, times 0 [ 2952.953824] CPU: 0 PID: 37883 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 2952.955158] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2952.956745] Call Trace: [ 2952.957258] dump_stack+0x107/0x167 [ 2952.957968] should_fail.cold+0x5/0xa [ 2952.958722] ? create_object.isra.0+0x3a/0xa20 [ 2952.959607] should_failslab+0x5/0x20 [ 2952.960342] kmem_cache_alloc+0x5b/0x310 [ 2952.961131] create_object.isra.0+0x3a/0xa20 [ 2952.961976] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2952.962992] kmem_cache_alloc_trace+0x151/0x320 [ 2952.963894] ? cset_cgroup_from_root+0x2a0/0x2a0 [ 2952.964826] percpu_ref_init+0xd8/0x3d0 [ 2952.965602] cgroup_mkdir+0x28b/0xf50 [ 2952.966368] ? cgroup_destroy_locked+0x710/0x710 [ 2952.967303] kernfs_iop_mkdir+0x14d/0x1e0 [ 2952.968116] vfs_mkdir+0x493/0x700 [ 2952.968804] do_mkdirat+0x150/0x2b0 [ 2952.969510] ? user_path_create+0xf0/0xf0 [ 2952.970317] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2952.971352] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2952.972354] do_syscall_64+0x33/0x40 [ 2952.973087] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2952.974071] RIP: 0033:0x7fb73f007b19 [ 2952.974793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2952.978321] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2952.979831] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 2952.981221] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2952.982621] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2952.984036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2952.985441] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 [ 2967.557302] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:21:51 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 12) 20:21:51 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d08", 0x6d}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:21:51 executing program 1: r0 = syz_io_uring_setup(0x3f4, &(0x7f00000002c0)={0x0, 0x6a0a, 0x1, 0x0, 0x1d5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:51 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:51 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xb903) 20:21:51 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x573c) 20:21:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x6b0181, 0x0) write$bt_hci(r4, &(0x7f0000000440)={0x1, @le_set_ext_scan_params={{0x2041, 0xe3}, {0x6, 0x6, 0x3, "024797c46fddf4a9ff65ab5dc15f8d6c933536e7345a840deda512a3793ac7e3d5869428a4f828d1acea23866113a80820da35993a9004587c49278f04cfc0dc6be3ffa4d20e759aa7e9fe9654496b126a0d665ce61e5f1f39caa87a071d456f6a1dc634f3b9ffe656e481560108857fcab6a59485b820c2c0a5cc3034764070f0c28d2ee669af0f2f6f735f6772ddd2237c0dcd3a43a059d16cc8f754428d422a5440a5a85295f0c3dbb61ebe8959816532b0289932cccfe64b8e5ead53f2e668a27864e79542e12899e8439ba90b68cafa587e5bb45682ae675255c6a53a7b"}}}, 0xe7) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r3, r2) write$bt_hci(r3, &(0x7f0000000180)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x4, 0x8}}}, 0x6) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="0c004182ea72c561fc3f64e208000000000000000000"], 0x2c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="cc000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf2501000000080006000500000030000180060001000a0000000800080000000100140003000a01010000000000000000000000000008000b0073697000300001800800050004000000080009005100000014000300ac1414100000000000000000000000000600010002000000380003801400020074756e6c3000000000000000000000000600040000000000080001000100000008000500ac1414aa060007004e2200000000000000000000001feab247b288ee07a280b1bd01e952c936d220ce8632fcb8c02b1895b87d567e6dacc617efb2577831138074b87f236d8242cd535360d32d5471f30dc0e3fcb2fd856365e6032e620f8eeed72e309995a2e5058772010e32b443418f86535f04c574635fb60000000000000000000000000000008b37ac2e76cd917066e13192fcd461f893fed918e8db9f17275e3e3b0bfc"], 0xcc}, 0x1, 0x0, 0x0, 0x40880}, 0x20054040) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x1, 0x1000, 0x0, 0x45, 0x0, 0x1, {0x0, r9}}, 0x8001) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:51 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = fork() ptrace(0x10, r0) fork() waitid(0x1, r0, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) [ 2967.583725] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2967.609283] FAULT_INJECTION: forcing a failure. [ 2967.609283] name failslab, interval 1, probability 0, space 0, times 0 [ 2967.610567] CPU: 1 PID: 37983 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 2967.611323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2967.612174] Call Trace: [ 2967.612466] dump_stack+0x107/0x167 [ 2967.612853] should_fail.cold+0x5/0xa [ 2967.613235] ? create_object.isra.0+0x3a/0xa20 [ 2967.613701] should_failslab+0x5/0x20 [ 2967.614081] kmem_cache_alloc+0x5b/0x310 [ 2967.614488] create_object.isra.0+0x3a/0xa20 [ 2967.614987] kmemleak_alloc_percpu+0xa0/0x100 [ 2967.615437] pcpu_alloc+0x4e2/0x1240 [ 2967.615826] cgroup_rstat_init+0x14f/0x1f0 [ 2967.616250] cgroup_mkdir+0x709/0xf50 [ 2967.616632] ? cgroup_destroy_locked+0x710/0x710 [ 2967.617105] kernfs_iop_mkdir+0x14d/0x1e0 [ 2967.617518] vfs_mkdir+0x493/0x700 [ 2967.617877] do_mkdirat+0x150/0x2b0 [ 2967.618239] ? user_path_create+0xf0/0xf0 [ 2967.618658] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2967.619230] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2967.619750] do_syscall_64+0x33/0x40 [ 2967.620151] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2967.620702] RIP: 0033:0x7fb73f007b19 [ 2967.621097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2967.623068] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2967.623876] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 2967.624629] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2967.625386] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2967.626147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2967.626924] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:21:52 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_io_uring_setup(0x633b, &(0x7f0000000000)={0x0, 0x6e9b, 0x10, 0x3, 0x3bb, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) flock(r5, 0x1) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x7fff, 0x2, &(0x7f0000000240)="6f4da04e76dbab282d4e8f1d4080dd85388d96cc0f4cd1c8e273c8bb0434cd2b0c5332aeb5353fc323d279084bac21a416b467b15b5f53869566c68ff87e73010569", 0x2, 0x0, 0x1, {0x2, r3}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:52 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d08", 0x6d}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:21:52 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_eee={0x44, 0x0, 0x20, 0x4, 0x8, 0xfd, 0xa1ad, 0x4, [0x0, 0x5]}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1ce}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_setup(0xc42, &(0x7f0000000180)={0x0, 0xa8fe, 0x20, 0x2, 0x13d, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r9 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r12, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r9, 0x0) r13 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r9, 0x8000000) syz_io_uring_submit(r13, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x400) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2967.736311] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:21:52 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 13) 20:21:52 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000) 20:21:52 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x80010, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:52 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xba03) 20:21:52 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d08", 0x6d}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:21:52 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = fork() ptrace(0x10, r0) fork() waitid(0x1, r0, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) [ 2967.944483] FAULT_INJECTION: forcing a failure. [ 2967.944483] name failslab, interval 1, probability 0, space 0, times 0 [ 2967.947309] CPU: 0 PID: 38135 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 2967.948714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2967.950391] Call Trace: [ 2967.950955] dump_stack+0x107/0x167 [ 2967.951697] should_fail.cold+0x5/0xa [ 2967.952476] ? create_object.isra.0+0x3a/0xa20 [ 2967.953409] should_failslab+0x5/0x20 [ 2967.954185] kmem_cache_alloc+0x5b/0x310 [ 2967.955034] ? mark_held_locks+0x9e/0xe0 [ 2967.955867] create_object.isra.0+0x3a/0xa20 [ 2967.956770] kmemleak_alloc_percpu+0xa0/0x100 [ 2967.957677] pcpu_alloc+0x4e2/0x1240 [ 2967.958473] cgroup_rstat_init+0x14f/0x1f0 [ 2967.959363] cgroup_mkdir+0x709/0xf50 [ 2967.960138] ? cgroup_destroy_locked+0x710/0x710 [ 2967.961121] kernfs_iop_mkdir+0x14d/0x1e0 [ 2967.961980] vfs_mkdir+0x493/0x700 [ 2967.962704] do_mkdirat+0x150/0x2b0 [ 2967.963482] ? user_path_create+0xf0/0xf0 [ 2967.964344] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2967.965401] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2967.966450] do_syscall_64+0x33/0x40 [ 2967.967223] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2967.968268] RIP: 0033:0x7fb73f007b19 [ 2967.969026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2967.972740] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2967.974280] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 2967.975744] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2967.977197] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2967.978646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2967.980092] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 [ 2968.011685] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2982.629261] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2982.635437] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:22:06 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf250d000000940003801400020076657468310000000000000000000000060007004e22000014000600ff01000000000000000000000000000114000600200100000000000000000000000000000800010001000000140002006272696467655f736c6176655f30000014000200697036746e6c300000000000000000ffffffffffffff000114000600fc01000000000000000000000000000108000600e50000002c000280080008000000000006000b000200000006000f0000000000080005000400000008000700ff01000008000500c4000000080005002b73582608000500000001000c00038005000800a7000000"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac7", 0xa3}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:22:06 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000) 20:22:06 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000) 20:22:06 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 14) 20:22:06 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r5 = dup2(r4, r3) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x12, 0x26, 0x0, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000340)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000001340)={{r6, 0x1, 0x101, 0x82, 0x0, 0x8, 0xff, 0x8000, 0x2, 0x0, 0x7, 0x8, 0xffffffff, 0x40, 0x9}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000009, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:22:06 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') poll(&(0x7f0000000280)=[{r4, 0x106}, {r8, 0x4000}], 0x2, 0x9) syz_io_uring_setup(0x6efc, &(0x7f0000000000)={0x0, 0x7254, 0x0, 0x0, 0x189, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r10 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r13, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x0, r14}}, 0x0) syz_io_uring_submit(r5, r9, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0x1, {0x0, r14}}, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:22:06 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x10000000) r5 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_setup(0x1280, &(0x7f0000000500)={0x0, 0xeb30, 0x4, 0x2, 0xf1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r8, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@sco={0x1f, @none}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)=""/190, 0xbe}, {&(0x7f00000000c0)=""/34, 0x22}], 0x2, &(0x7f0000000400)=""/155, 0x9b}, 0x0, 0x40, 0x1, {0x2, r9}}, 0x10001) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:22:06 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) fork() waitid(0x1, r0, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:22:07 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) faccessat2(r4, &(0x7f0000000040)='./file0\x00', 0x11, 0x200) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8141) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f00000001c0)={0xb32b, 0x0, &(0x7f0000000180)=[r5, r4, r0, r4, r0, r0]}, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:22:07 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf250d000000940003801400020076657468310000000000000000000000060007004e22000014000600ff01000000000000000000000000000114000600200100000000000000000000000000000800010001000000140002006272696467655f736c6176655f30000014000200697036746e6c300000000000000000ffffffffffffff000114000600fc01000000000000000000000000000108000600e50000002c000280080008000000000006000b000200000006000f0000000000080005000400000008000700ff01000008000500c4000000080005002b73582608000500000001000c00038005000800a7000000"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac7", 0xa3}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2982.732087] FAULT_INJECTION: forcing a failure. [ 2982.732087] name failslab, interval 1, probability 0, space 0, times 0 [ 2982.734617] CPU: 0 PID: 38301 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 2982.736202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2982.738090] Call Trace: [ 2982.738698] dump_stack+0x107/0x167 [ 2982.739565] should_fail.cold+0x5/0xa [ 2982.740436] ? create_object.isra.0+0x3a/0xa20 [ 2982.741483] should_failslab+0x5/0x20 [ 2982.742363] kmem_cache_alloc+0x5b/0x310 [ 2982.743301] ? mark_held_locks+0x9e/0xe0 [ 2982.744234] create_object.isra.0+0x3a/0xa20 [ 2982.745249] kmemleak_alloc_percpu+0xa0/0x100 [ 2982.746280] pcpu_alloc+0x4e2/0x1240 [ 2982.747171] cgroup_rstat_init+0x14f/0x1f0 [ 2982.748147] cgroup_mkdir+0x709/0xf50 [ 2982.749024] ? cgroup_destroy_locked+0x710/0x710 [ 2982.750110] kernfs_iop_mkdir+0x14d/0x1e0 [ 2982.751090] vfs_mkdir+0x493/0x700 [ 2982.751902] do_mkdirat+0x150/0x2b0 [ 2982.752730] ? user_path_create+0xf0/0xf0 [ 2982.753696] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2982.754952] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2982.756140] do_syscall_64+0x33/0x40 [ 2982.756981] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2982.758136] RIP: 0033:0x7fb73f007b19 [ 2982.759001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2982.763139] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2982.764848] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 2982.766450] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2982.768062] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2982.769652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2982.771305] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:22:07 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5000000) 20:22:07 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x6000, @fd_index=0x5, 0x100000000, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000040)=""/19, 0x13}], 0x2, 0x1, 0x0, {0x0, r8}}, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r9, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000380)=@ll={0x11, 0xc, 0x0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x0, 0x0, 0x1}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r10 = syz_io_uring_complete(r4) r11 = fsopen(&(0x7f00000001c0)='nilfs2\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r11, &(0x7f0000000240)={0x2008}) [ 2982.855046] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2982.865269] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:22:07 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000) 20:22:07 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) fork() waitid(0x1, r0, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:22:07 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 15) 20:22:07 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r0, 0x8000000) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r1, r6, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2000, @fd_index, 0x20, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x7fffffff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2983.094005] FAULT_INJECTION: forcing a failure. [ 2983.094005] name failslab, interval 1, probability 0, space 0, times 0 [ 2983.096811] CPU: 0 PID: 38464 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 2983.098235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2983.099971] Call Trace: [ 2983.100523] dump_stack+0x107/0x167 [ 2983.101275] should_fail.cold+0x5/0xa [ 2983.102060] ? create_object.isra.0+0x3a/0xa20 [ 2983.103003] should_failslab+0x5/0x20 [ 2983.103793] kmem_cache_alloc+0x5b/0x310 [ 2983.104634] create_object.isra.0+0x3a/0xa20 [ 2983.105544] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2983.106595] __kmalloc_track_caller+0x177/0x370 [ 2983.107556] ? kstrdup_const+0x53/0x80 [ 2983.108382] kstrdup+0x36/0x70 [ 2983.109045] kstrdup_const+0x53/0x80 [ 2983.109814] __kernfs_new_node+0x9d/0x860 [ 2983.110669] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2983.111655] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2983.112602] ? pcpu_alloc+0x12a/0x1240 [ 2983.113394] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2983.114453] kernfs_create_dir_ns+0x9c/0x230 [ 2983.115356] cgroup_mkdir+0x318/0xf50 [ 2983.116132] ? cgroup_destroy_locked+0x710/0x710 [ 2983.117099] kernfs_iop_mkdir+0x14d/0x1e0 [ 2983.117939] vfs_mkdir+0x493/0x700 [ 2983.118664] do_mkdirat+0x150/0x2b0 [ 2983.119409] ? user_path_create+0xf0/0xf0 [ 2983.120252] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2983.121310] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2983.122354] do_syscall_64+0x33/0x40 [ 2983.123142] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2983.124172] RIP: 0033:0x7fb73f007b19 [ 2983.124928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2983.128629] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2983.130166] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 2983.131618] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2983.133054] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2983.134491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2983.135939] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:22:22 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5000000) 20:22:22 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 16) 20:22:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:22:22 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) fork() waitid(0x1, r0, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:22:22 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x375b, &(0x7f0000000180)={0x0, 0xbf18, 0x2, 0x3, 0x26c}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd=r0, 0x2, 0x0, 0x0, 0xc, 0x0, {0x3, r8}}, 0x100) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r13, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x0, r14}}, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x1934688bb02481c9, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r14}}, 0x1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:22:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000) 20:22:22 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac7", 0xa3}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:22:22 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xd723, 0x1, 0x20003}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r9, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, r5, &(0x7f0000000340)={0x10000000}, r0, 0x1, 0x0, 0x0, {0x0, r10}}, 0xffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x7, 0x6}) r11 = syz_open_dev$hidraw(&(0x7f0000000240), 0x7fff, 0x222901) ioctl$AUTOFS_IOC_FAIL(r11, 0x9361, 0x7fff) [ 2998.066897] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 2998.117387] FAULT_INJECTION: forcing a failure. [ 2998.117387] name failslab, interval 1, probability 0, space 0, times 0 [ 2998.119182] CPU: 1 PID: 38581 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 2998.120076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2998.121113] Call Trace: [ 2998.121453] dump_stack+0x107/0x167 [ 2998.121924] should_fail.cold+0x5/0xa [ 2998.122418] ? __kernfs_new_node+0xd4/0x860 [ 2998.122975] should_failslab+0x5/0x20 [ 2998.123473] kmem_cache_alloc+0x5b/0x310 [ 2998.123989] __kernfs_new_node+0xd4/0x860 [ 2998.124513] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2998.125124] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2998.125718] ? pcpu_alloc+0x12a/0x1240 [ 2998.126219] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2998.126886] kernfs_create_dir_ns+0x9c/0x230 [ 2998.127478] cgroup_mkdir+0x318/0xf50 [ 2998.127997] ? cgroup_destroy_locked+0x710/0x710 [ 2998.128601] kernfs_iop_mkdir+0x14d/0x1e0 [ 2998.129151] vfs_mkdir+0x493/0x700 [ 2998.129626] do_mkdirat+0x150/0x2b0 [ 2998.130103] ? user_path_create+0xf0/0xf0 [ 2998.130659] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2998.131356] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2998.131997] do_syscall_64+0x33/0x40 [ 2998.132473] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2998.133144] RIP: 0033:0x7fb73f007b19 [ 2998.133632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2998.136066] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2998.137080] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 2998.138032] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2998.138959] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2998.139905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2998.140841] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:22:22 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae891033", 0xbe}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:22:22 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0)=@v1={0x1000000, [{0xffffff80, 0x6}]}, 0xc, 0x2) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:22:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc570000) 20:22:22 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 17) [ 2998.292352] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:22:22 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x84100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x5, 0x2010, r3, 0x0) close(0xffffffffffffffff) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r7, r6) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1200000026ff00000600000000000000000000001800006908000000", @ANYRES32=0xee00, @ANYBLOB='\f\x00'/12], 0x2c}}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r6, 0x39, 0x0, 0xffffffff, 0x5, 0x1, {0x0, r4}}, 0x7fff) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000f, 0x4000010, r9, 0x8000000) 20:22:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x3, 0x0, 0x0, 0x8, 0x0, 0x0, {0x0, r3, r0}}, 0x80) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x10010, r0, 0x10000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2998.359288] FAULT_INJECTION: forcing a failure. [ 2998.359288] name failslab, interval 1, probability 0, space 0, times 0 [ 2998.360751] CPU: 1 PID: 38735 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 2998.361514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2998.362425] Call Trace: [ 2998.362727] dump_stack+0x107/0x167 [ 2998.363138] should_fail.cold+0x5/0xa [ 2998.363591] ? create_object.isra.0+0x3a/0xa20 [ 2998.364100] should_failslab+0x5/0x20 [ 2998.364523] kmem_cache_alloc+0x5b/0x310 [ 2998.364975] create_object.isra.0+0x3a/0xa20 [ 2998.365466] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2998.366040] kmem_cache_alloc+0x159/0x310 [ 2998.366508] __kernfs_new_node+0xd4/0x860 [ 2998.366970] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2998.367526] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2998.368067] ? pcpu_alloc+0x12a/0x1240 [ 2998.368521] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2998.369128] kernfs_create_dir_ns+0x9c/0x230 [ 2998.369639] cgroup_mkdir+0x318/0xf50 [ 2998.370075] ? cgroup_destroy_locked+0x710/0x710 [ 2998.370620] kernfs_iop_mkdir+0x14d/0x1e0 [ 2998.371096] vfs_mkdir+0x493/0x700 [ 2998.371517] do_mkdirat+0x150/0x2b0 [ 2998.371946] ? user_path_create+0xf0/0xf0 [ 2998.372425] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2998.373019] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2998.373618] do_syscall_64+0x33/0x40 [ 2998.374043] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2998.374633] RIP: 0033:0x7fb73f007b19 [ 2998.375058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2998.377079] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2998.377959] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 2998.378739] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2998.379568] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2998.380378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2998.381183] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:22:22 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000) 20:22:22 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf250d000000940003801400020076657468310000000000000000000000060007004e22000014000600ff01000000000000000000000000000114000600200100000000000000000000000000000800010001000000140002006272696467655f736c6176655f30000014000200697036746e6c300000000000000000ffffffffffffff000114000600fc01000000000000000000000000000108000600e50000002c000280080008000000000006000b000200000006000f0000000000080005000400000008000700ff01000008000500c4000000080005002b73582608000500000001000c00038005000800a7000000"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae891033", 0xbe}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2998.484299] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:22:22 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae891033", 0xbe}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:22:22 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) [ 2998.557909] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:22:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 18) 20:22:36 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x15570000) 20:22:36 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f000000) 20:22:36 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd, 0xfffffffffffff001, 0x0, 0x0, 0x1e, 0x1, {0x0, r7}}, 0x876f) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000040)='.\x00', 0x2000003) r10 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r11 = inotify_add_watch(r9, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(r10, r11) dup3(r10, r9, 0x0) io_uring_enter(r10, 0x7792, 0x4d48, 0x3, &(0x7f00000001c0)={[0x1d8]}, 0x8) r12 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x6, 0xfffffffffffffffc}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r8, r2, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r12, 0x401, &(0x7f00000000c0)=[{&(0x7f0000000000)="aec198fa175c18d958138e1c02a2ea3823a152d8fd2587adb4d157ac680d3607b251e1a48eba09a9d9a5d5c988318c30feee98a911a1a9143c72b5debed0c2f43bd78292", 0x44}], 0x1, 0x6, 0x1, {0x1}}, 0x6) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:22:36 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf250d000000940003801400020076657468310000000000000000000000060007004e22000014000600ff01000000000000000000000000000114000600200100000000000000000000000000000800010001000000140002006272696467655f736c6176655f30000014000200697036746e6c300000000000000000ffffffffffffff000114000600fc01000000000000000000000000000108000600e50000002c000280080008000000000006000b000200000006000f0000000000080005000400000008000700ff01000008000500c4000000080005002b73582608000500000001000c00038005000800a7000000"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9f", 0xcc}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:22:36 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = fork() ptrace(0x10, r1) fork() waitid(0x1, r1, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:22:36 executing program 0: r0 = syz_io_uring_setup(0x4d53, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:22:36 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bind(r5, &(0x7f0000000180)=@ll={0x11, 0x9, 0x0, 0x1, 0x1f}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x10, r0, 0x10000000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r10 = io_uring_setup(0x6f13, &(0x7f0000000340)={0x0, 0xe4b5, 0x1, 0x3, 0x188, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, r10, 0x8000000) syz_io_uring_submit(r1, r8, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r9}}, 0xfffffa78) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x8000000) fcntl$lock(r7, 0x25, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x9}) syz_io_uring_submit(r11, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd=r0, 0x2, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x2) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3012.345337] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 3012.384995] FAULT_INJECTION: forcing a failure. [ 3012.384995] name failslab, interval 1, probability 0, space 0, times 0 [ 3012.386794] CPU: 0 PID: 38794 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 3012.387660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3012.388660] Call Trace: [ 3012.388982] dump_stack+0x107/0x167 [ 3012.389423] should_fail.cold+0x5/0xa [ 3012.389882] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3012.390577] should_failslab+0x5/0x20 [ 3012.391056] kmem_cache_alloc+0x5b/0x310 [ 3012.391567] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3012.392256] radix_tree_extend+0x231/0x490 [ 3012.392781] idr_get_free+0x623/0x8f0 [ 3012.393254] idr_alloc_u32+0x170/0x2d0 [ 3012.393751] ? __fprop_inc_percpu_max+0x130/0x130 [ 3012.394341] ? lock_acquire+0x197/0x470 [ 3012.394816] ? __kernfs_new_node+0xff/0x860 [ 3012.395336] idr_alloc_cyclic+0x102/0x230 [ 3012.395828] ? idr_alloc+0x130/0x130 [ 3012.396288] ? rwlock_bug.part.0+0x90/0x90 [ 3012.396826] __kernfs_new_node+0x117/0x860 [ 3012.397374] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3012.397970] ? kmemleak_alloc_percpu+0xaf/0x100 [ 3012.398553] ? pcpu_alloc+0x12a/0x1240 [ 3012.399021] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 3012.399701] kernfs_create_dir_ns+0x9c/0x230 [ 3012.400258] cgroup_mkdir+0x318/0xf50 [ 3012.400726] ? cgroup_destroy_locked+0x710/0x710 [ 3012.401310] kernfs_iop_mkdir+0x14d/0x1e0 [ 3012.401840] vfs_mkdir+0x493/0x700 [ 3012.402305] do_mkdirat+0x150/0x2b0 [ 3012.402761] ? user_path_create+0xf0/0xf0 [ 3012.403274] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3012.403934] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3012.404558] do_syscall_64+0x33/0x40 [ 3012.405022] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3012.405669] RIP: 0033:0x7fb73f007b19 [ 3012.406122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3012.408391] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3012.409330] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 3012.410226] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 3012.411138] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3012.412043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3012.412949] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:22:36 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xe2, 0x81, 0x3, 0x6f, 0x0, 0x8, 0x40000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xb2, 0x0, @perf_bp, 0x1, 0x100000001, 0x6, 0x9, 0x4f, 0x1, 0x8e, 0x0, 0x2, 0x0, 0x3}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:22:36 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9f", 0xcc}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:22:36 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000) 20:22:36 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000280), 0xfff, 0x0) preadv(r4, 0x0, 0x0, 0x6, 0xfff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x81, 0x7, 0x0, 0x1, 0x0, 0x6, 0x1000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x9, 0xc836}, 0x42884, 0x0, 0x3, 0x9, 0x6, 0x40, 0x16f, 0x0, 0x40, 0x0, 0x5}, 0xffffffffffffffff, 0x9, r4, 0x3) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3012.583638] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:22:36 executing program 1: r0 = syz_io_uring_setup(0x39d8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x2000003) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(r4, r5) r6 = dup3(r4, r3, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x80) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r8 = fork() r9 = fork() ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000000)=0x0) ptrace(0x11, r10) ptrace(0x4207, r9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:22:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 19) [ 3012.686861] FAULT_INJECTION: forcing a failure. [ 3012.686861] name failslab, interval 1, probability 0, space 0, times 0 [ 3012.688180] CPU: 0 PID: 38950 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 3012.688908] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3012.689810] Call Trace: [ 3012.690103] dump_stack+0x107/0x167 [ 3012.690504] should_fail.cold+0x5/0xa [ 3012.690927] ? create_object.isra.0+0x3a/0xa20 [ 3012.691444] should_failslab+0x5/0x20 [ 3012.691855] kmem_cache_alloc+0x5b/0x310 [ 3012.692287] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3012.692809] create_object.isra.0+0x3a/0xa20 [ 3012.693280] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3012.693839] __kmalloc+0x16e/0x390 [ 3012.694239] selinux_kernfs_init_security+0x137/0x4c0 [ 3012.694798] ? selinux_file_mprotect+0x610/0x610 [ 3012.695316] ? find_held_lock+0x2c/0x110 [ 3012.695790] ? __kernfs_new_node+0x2ad/0x860 [ 3012.696266] ? lock_downgrade+0x6d0/0x6d0 [ 3012.696729] ? rwlock_bug.part.0+0x90/0x90 [ 3012.697203] security_kernfs_init_security+0x4e/0xb0 [ 3012.697767] __kernfs_new_node+0x531/0x860 [ 3012.698243] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3012.698776] ? kmemleak_alloc_percpu+0xaf/0x100 [ 3012.699298] ? pcpu_alloc+0x12a/0x1240 [ 3012.699739] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 3012.700332] kernfs_create_dir_ns+0x9c/0x230 [ 3012.700816] cgroup_mkdir+0x318/0xf50 [ 3012.701258] ? cgroup_destroy_locked+0x710/0x710 [ 3012.701768] kernfs_iop_mkdir+0x14d/0x1e0 [ 3012.702240] vfs_mkdir+0x493/0x700 [ 3012.702645] do_mkdirat+0x150/0x2b0 [ 3012.703053] ? user_path_create+0xf0/0xf0 [ 3012.703515] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3012.704107] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3012.704661] do_syscall_64+0x33/0x40 [ 3012.705083] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3012.705640] RIP: 0033:0x7fb73f007b19 [ 3012.706058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3012.708016] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3012.708872] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 3012.709670] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 3012.710461] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3012.711253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3012.712053] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:22:53 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 20) 20:22:53 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9f", 0xcc}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:22:53 executing program 4: r0 = syz_io_uring_setup(0x909, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) syz_io_uring_submit(r9, r7, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r1, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x4, 0x4004, @fd=r0, 0x4, &(0x7f0000000340)="fc4eef3020012cc0cff554e8d7a13537d066a8276a52458474eddf99e7c2d1a9ff4c3bff75117dcf46f248872ca9d26c1156993057e332f23f128c03375e4b8c612aaecfbc64c00aad92f2fcc4de367f16e9cf8102b4d021611cbd596562d73636a71ae5796211b27b1b5c0df22e02aca9dcd4d14a0318581d9d6158d5b11443783b3e1c3f7cac54bda20bd2e47334b4775dc0885e363922513f7498225da68f83528d164c44057370c4fa31631ca1b81fd84e", 0xb3, 0xa, 0x0, {0x0, r3}}, 0x10000) r10 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r13, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x0, r14}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x5, 0x1, &(0x7f0000000480)="b0e3493b439136207d20a546c531c18b73cb7d70fff4f7e3e2ba3478a727e935eeb565446b42b42a5c7af3ba206782427089c83dbb4504f86f666d194b02d922f7e1f9e9810c4fa34aaf5be20c3c19bef2a3acfa3b006daa836981121dcb4aa162287f683e253d224c47882443a05894c1d865444348f97303e4f8a8e19132710b71410282260fac69e5fb32fe523298e27be4ad3e80cc720692fa50b7e8f1179422c602df7cb7d7aa15f22433ed7bb37d66ad8c7f816fe4abdb17c987dfb0efdcf40cf19b5dcb70781e57", 0x1d51, 0x0, 0x1, {0x1, r14}}, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:22:53 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1b040000) 20:22:53 executing program 0: r0 = syz_io_uring_setup(0x50f3, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x2000003) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(r5, r6) r7 = dup3(r5, r4, 0x0) inotify_add_watch(r7, &(0x7f0000000080)='./file0\x00', 0x80) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000001000000180000003896be59f01a431ad73f2d38046056dceee010873d84b1afe46d08801d49f9e791584c28811462e531d2030b26befc177c307ce2f3fc4fa98f2cb95bc2e3bf72ceccc0ba07a9782f08c5c9634db8e9322e016e5a53746831520d22cbd1e8c1859242af71b3b2ab39298177a7585cbda9eb24efb99022005119fec257b546d00c0bd4ebc86d8c479002c65f5d7a64bc2c2188b88567dd05928973c8dbc01bd33a0eee2032516b44ad4dbab996232cd8860ce3c862c0dbf65bd55015e7", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:22:53 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = fork() ptrace(0x10, r1) fork() waitid(0x1, r1, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:22:53 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x93520000) 20:22:53 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) io_uring_enter(r5, 0x58ab, 0x0, 0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3029.009411] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 3029.106515] FAULT_INJECTION: forcing a failure. [ 3029.106515] name failslab, interval 1, probability 0, space 0, times 0 [ 3029.109410] CPU: 0 PID: 38983 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 3029.110837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3029.112570] Call Trace: [ 3029.113127] dump_stack+0x107/0x167 [ 3029.113891] should_fail.cold+0x5/0xa [ 3029.114682] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3029.115883] should_failslab+0x5/0x20 [ 3029.116680] kmem_cache_alloc+0x5b/0x310 [ 3029.117520] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3029.118685] idr_get_free+0x4b5/0x8f0 [ 3029.119486] idr_alloc_u32+0x170/0x2d0 [ 3029.120312] ? __fprop_inc_percpu_max+0x130/0x130 [ 3029.121301] ? lock_acquire+0x197/0x470 [ 3029.122124] ? __kernfs_new_node+0xff/0x860 [ 3029.123016] idr_alloc_cyclic+0x102/0x230 [ 3029.123894] ? idr_alloc+0x130/0x130 [ 3029.124667] ? rwlock_bug.part.0+0x90/0x90 [ 3029.125564] __kernfs_new_node+0x117/0x860 [ 3029.126444] ? kernfs_dop_revalidate+0x3a0/0x3a0 20:22:53 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf250d000000940003801400020076657468310000000000000000000000060007004e22000014000600ff01000000000000000000000000000114000600200100000000000000000000000000000800010001000000140002006272696467655f736c6176655f30000014000200697036746e6c300000000000000000ffffffffffffff000114000600fc01000000000000000000000000000108000600e50000002c000280080008000000000006000b000200000006000f0000000000080005000400000008000700ff01000008000500c4000000080005002b73582608000500000001000c00038005000800a7000000"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585c", 0xd3}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 3029.127648] ? kmemleak_alloc_percpu+0xaf/0x100 [ 3029.127718] ? pcpu_alloc+0x12a/0x1240 [ 3029.127747] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 3029.127781] kernfs_create_dir_ns+0x9c/0x230 [ 3029.127812] cgroup_mkdir+0x318/0xf50 [ 3029.127840] ? cgroup_destroy_locked+0x710/0x710 [ 3029.127865] kernfs_iop_mkdir+0x14d/0x1e0 [ 3029.127889] vfs_mkdir+0x493/0x700 [ 3029.127915] do_mkdirat+0x150/0x2b0 [ 3029.127939] ? user_path_create+0xf0/0xf0 [ 3029.127965] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3029.127983] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3029.128012] do_syscall_64+0x33/0x40 [ 3029.128030] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3029.128044] RIP: 0033:0x7fb73f007b19 [ 3029.128065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3029.128076] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3029.128098] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 3029.128110] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 3029.128121] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3029.128132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3029.128144] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 [ 3029.234999] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:22:53 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 21) 20:22:53 executing program 4: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(r1, r2) dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xcd27, 0x2, 0x2, 0x1, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) setxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x5) r7 = fsopen(&(0x7f0000000000)='ufs\x00', 0x1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:22:53 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = fork() ptrace(0x10, r1) fork() waitid(0x1, r1, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:22:53 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf250d000000940003801400020076657468310000000000000000000000060007004e22000014000600ff01000000000000000000000000000114000600200100000000000000000000000000000800010001000000140002006272696467655f736c6176655f30000014000200697036746e6c300000000000000000ffffffffffffff000114000600fc01000000000000000000000000000108000600e50000002c000280080008000000000006000b000200000006000f0000000000080005000400000008000700ff01000008000500c4000000080005002b73582608000500000001000c00038005000800a7000000"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585c", 0xd3}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:22:53 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1c040000) 20:22:53 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x97520000) 20:22:53 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3029.489199] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 3029.497385] FAULT_INJECTION: forcing a failure. 20:22:53 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index, 0xfffffffffffffffd}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x6e75, &(0x7f0000000000)={0x0, 0xd040, 0x4, 0x2, 0x16c, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3029.497385] name failslab, interval 1, probability 0, space 0, times 0 [ 3029.500960] CPU: 0 PID: 39116 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 3029.502361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3029.504056] Call Trace: [ 3029.504598] dump_stack+0x107/0x167 [ 3029.505343] should_fail.cold+0x5/0xa [ 3029.506124] ? create_object.isra.0+0x3a/0xa20 [ 3029.507056] should_failslab+0x5/0x20 [ 3029.507834] kmem_cache_alloc+0x5b/0x310 [ 3029.508670] create_object.isra.0+0x3a/0xa20 [ 3029.509572] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3029.510609] kmem_cache_alloc+0x159/0x310 [ 3029.511464] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3029.512625] idr_get_free+0x4b5/0x8f0 [ 3029.513422] idr_alloc_u32+0x170/0x2d0 [ 3029.514225] ? __fprop_inc_percpu_max+0x130/0x130 [ 3029.515240] ? lock_acquire+0x197/0x470 [ 3029.516077] ? __kernfs_new_node+0xff/0x860 [ 3029.516979] idr_alloc_cyclic+0x102/0x230 [ 3029.517856] ? idr_alloc+0x130/0x130 [ 3029.518622] ? rwlock_bug.part.0+0x90/0x90 [ 3029.519518] __kernfs_new_node+0x117/0x860 [ 3029.520409] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3029.521374] ? kmemleak_alloc_percpu+0xaf/0x100 [ 3029.522328] ? pcpu_alloc+0x12a/0x1240 [ 3029.523136] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 3029.524219] kernfs_create_dir_ns+0x9c/0x230 [ 3029.525138] cgroup_mkdir+0x318/0xf50 [ 3029.525916] ? cgroup_destroy_locked+0x710/0x710 [ 3029.526907] kernfs_iop_mkdir+0x14d/0x1e0 [ 3029.527766] vfs_mkdir+0x493/0x700 [ 3029.528521] do_mkdirat+0x150/0x2b0 [ 3029.529268] ? user_path_create+0xf0/0xf0 [ 3029.530163] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3029.531238] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3029.532312] do_syscall_64+0x33/0x40 [ 3029.533066] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3029.534112] RIP: 0033:0x7fb73f007b19 [ 3029.534899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3029.538706] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3029.540288] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 3029.541779] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 3029.543237] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3029.544695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3029.546142] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:22:54 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585c", 0xd3}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 3029.781027] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:23:09 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10901, 0x8) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x10200, 0x100) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) fdatasync(r1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x35b, 0x1000}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:23:09 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xa0520000) 20:23:09 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1d040000) 20:23:09 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 22) 20:23:09 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x50000, 0x0, 0x0, 0x9, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x203a, &(0x7f0000000000)={0x0, 0xfc1f, 0x4, 0x3, 0x25d, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0x3, 0x4}, 0x6) dup2(r8, r7) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, r0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r8, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:23:09 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff", 0xd6}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:23:09 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r2, r1) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x12, 0x26, 0x0, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r4, r3) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x12, 0x26, 0x0, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x4000041) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r1, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:23:09 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = fork() ptrace(0x10, r1) fork() waitid(0x1, r1, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) [ 3045.014065] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 3045.033925] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 3045.044788] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 3045.090083] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 3045.113202] FAULT_INJECTION: forcing a failure. [ 3045.113202] name failslab, interval 1, probability 0, space 0, times 0 [ 3045.116248] CPU: 1 PID: 39276 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 3045.117779] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3045.119649] Call Trace: [ 3045.120301] dump_stack+0x107/0x167 [ 3045.121114] should_fail.cold+0x5/0xa [ 3045.121995] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3045.123262] should_failslab+0x5/0x20 [ 3045.124161] kmem_cache_alloc+0x5b/0x310 [ 3045.125206] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3045.126492] idr_get_free+0x4b5/0x8f0 [ 3045.127355] idr_alloc_u32+0x170/0x2d0 [ 3045.128335] ? __fprop_inc_percpu_max+0x130/0x130 [ 3045.129361] ? lock_acquire+0x197/0x470 [ 3045.130370] ? __kernfs_new_node+0xff/0x860 [ 3045.131309] idr_alloc_cyclic+0x102/0x230 [ 3045.132340] ? idr_alloc+0x130/0x130 [ 3045.133109] ? rwlock_bug.part.0+0x90/0x90 [ 3045.134111] __kernfs_new_node+0x117/0x860 [ 3045.135077] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3045.136139] ? kmemleak_alloc_percpu+0xaf/0x100 [ 3045.137240] ? pcpu_alloc+0x12a/0x1240 [ 3045.138045] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 3045.139213] kernfs_create_dir_ns+0x9c/0x230 [ 3045.140280] cgroup_mkdir+0x318/0xf50 [ 3045.141207] ? cgroup_destroy_locked+0x710/0x710 [ 3045.142240] kernfs_iop_mkdir+0x14d/0x1e0 [ 3045.143234] vfs_mkdir+0x493/0x700 [ 3045.144039] do_mkdirat+0x150/0x2b0 [ 3045.144863] ? user_path_create+0xf0/0xf0 [ 3045.145798] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3045.147025] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3045.148179] do_syscall_64+0x33/0x40 [ 3045.149073] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3045.150221] RIP: 0033:0x7fb73f007b19 [ 3045.151060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3045.155236] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3045.156934] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 3045.158556] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 3045.160101] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3045.161667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3045.163293] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:23:09 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x397c, &(0x7f0000000180)={0x0, 0xea2, 0x0, 0x1, 0x7d, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r3, r2, &(0x7f00000003c0)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000340)=@nfc={0x27, 0x0, 0x0, 0x4}}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000ffdbdf256600000008000300", @ANYRES32=r6, @ANYBLOB="0c009900000800b7000e00000008009f00050000000500180113000000050018010c00000008002700d50000000000000000000000000012000000000000000000"], 0x6c}}, 0x90) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) io_uring_enter(r0, 0xeba, 0xba49, 0x0, &(0x7f0000000400)={[0x8]}, 0x8) dup2(r7, r5) accept4(r7, &(0x7f0000000000)=@caif, &(0x7f00000000c0)=0x80, 0x800) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:23:09 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf250d000000940003801400020076657468310000000000000000000000060007004e22000014000600ff01000000000000000000000000000114000600200100000000000000000000000000000800010001000000140002006272696467655f736c6176655f30000014000200697036746e6c300000000000000000ffffffffffffff000114000600fc01000000000000000000000000000108000600e50000002c000280080008000000000006000b000200000006000f0000000000080005000400000008000700ff01000008000500c4000000080005002b73582608000500000001000c00038005000800a7000000"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff", 0xd6}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:23:09 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r7 = dup2(r6, r5) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="0c000000f4ffffff00000002fe4258c2e1abbc6319677109b22de33140125aa71b1538e5bdcffaff849de3ff369f58e6b56243"], 0x2c}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, {0x400}, 0x1, {0x0, r3}}, 0x80000001) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x3f8c8234) [ 3045.348080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=39410 comm=syz-executor.1 20:23:09 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = fork() ptrace(0x10, r1) fork() waitid(0x1, r1, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:23:09 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc020, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3045.398842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=39410 comm=syz-executor.1 [ 3045.406043] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:23:26 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000280), 0xfff, 0x0) preadv(r5, 0x0, 0x0, 0x6, 0xfff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_user}, {@cache_loose}, {@privport}, {@fscache}, {@mmap}, {@version_L}, {@version_L}, {@cache_fscache}, {@version_L}], [{@uid_lt={'uid<', 0xee01}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x34, 0x66, 0x31, 0x64, 0x33, 0x63, 0x62], 0x2d, [0x30, 0x32, 0x65, 0x61], 0x2d, [0x30, 0x32, 0x32, 0x37], 0x2d, [0x30, 0x7, 0x0, 0x38], 0x2d, [0x34, 0x64, 0x31, 0x35, 0x33, 0x61, 0x62]}}}]}}) 20:23:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = fork() ptrace(0x10, r1) fork() waitid(0x1, r1, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:23:26 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1e040000) 20:23:26 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xb0520000) 20:23:26 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 23) 20:23:26 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x39d1, 0xe6a6, 0x0, &(0x7f0000000000)={[0x9]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5b1790380318ffa8, 0x20010, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10040, 0x1, {0x1, r8}}, 0x20) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:23:26 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x8000000) r4 = syz_io_uring_setup(0x31f6, &(0x7f0000000000)={0x0, 0xa49a, 0x8, 0x2, 0x227}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x4000010, r4, 0x8000000) r5 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r8, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x1000, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1, 0x0, 0x1, {0x0, r9}}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:23:26 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf250d000000940003801400020076657468310000000000000000000000060007004e22000014000600ff01000000000000000000000000000114000600200100000000000000000000000000000800010001000000140002006272696467655f736c6176655f30000014000200697036746e6c300000000000000000ffffffffffffff000114000600fc01000000000000000000000000000108000600e50000002c000280080008000000000006000b000200000006000f0000000000080005000400000008000700ff01000008000500c4000000080005002b73582608000500000001000c00038005000800a7000000"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff", 0xd6}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 3062.554373] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 3062.594235] FAULT_INJECTION: forcing a failure. [ 3062.594235] name failslab, interval 1, probability 0, space 0, times 0 [ 3062.595510] CPU: 1 PID: 39550 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 3062.596227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3062.597082] Call Trace: [ 3062.597369] dump_stack+0x107/0x167 [ 3062.597751] should_fail.cold+0x5/0xa [ 3062.598142] ? create_object.isra.0+0x3a/0xa20 [ 3062.598602] should_failslab+0x5/0x20 [ 3062.598985] kmem_cache_alloc+0x5b/0x310 [ 3062.599406] ? mark_held_locks+0x9e/0xe0 [ 3062.599828] create_object.isra.0+0x3a/0xa20 [ 3062.600283] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3062.600797] kmem_cache_alloc+0x159/0x310 [ 3062.601217] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3062.601799] idr_get_free+0x4b5/0x8f0 [ 3062.602188] idr_alloc_u32+0x170/0x2d0 [ 3062.602581] ? __fprop_inc_percpu_max+0x130/0x130 [ 3062.603060] ? lock_acquire+0x197/0x470 [ 3062.603459] ? __kernfs_new_node+0xff/0x860 [ 3062.603942] idr_alloc_cyclic+0x102/0x230 [ 3062.604368] ? idr_alloc+0x130/0x130 [ 3062.604739] ? rwlock_bug.part.0+0x90/0x90 [ 3062.605190] __kernfs_new_node+0x117/0x860 [ 3062.605635] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3062.606124] ? kmemleak_alloc_percpu+0xaf/0x100 [ 3062.606645] ? pcpu_alloc+0x12a/0x1240 [ 3062.607073] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 3062.607633] kernfs_create_dir_ns+0x9c/0x230 [ 3062.608124] cgroup_mkdir+0x318/0xf50 [ 3062.608522] ? cgroup_destroy_locked+0x710/0x710 [ 3062.609014] kernfs_iop_mkdir+0x14d/0x1e0 [ 3062.609447] vfs_mkdir+0x493/0x700 [ 3062.609818] do_mkdirat+0x150/0x2b0 [ 3062.610202] ? user_path_create+0xf0/0xf0 [ 3062.610648] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3062.611206] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3062.611743] do_syscall_64+0x33/0x40 [ 3062.612124] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3062.612654] RIP: 0033:0x7fb73f007b19 [ 3062.613046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3062.614947] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3062.615736] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 3062.616481] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 3062.617246] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3062.618014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3062.618744] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:23:27 executing program 0: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x74, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004880}, 0x40) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000000)) r4 = openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x8040, 0x10, 0xf}, 0x18) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:23:27 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a8", 0xd8}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 3062.756555] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:23:27 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 24) 20:23:27 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/2694], 0xa86) 20:23:27 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) 20:23:27 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xb6030000) 20:23:27 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x13, r0, 0x8000000) r5 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) syz_io_uring_submit(r9, r7, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r4, r7, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0}, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:23:27 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a8", 0xd8}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 3062.922327] FAULT_INJECTION: forcing a failure. [ 3062.922327] name failslab, interval 1, probability 0, space 0, times 0 [ 3062.925198] CPU: 0 PID: 39699 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 3062.926717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3062.928532] Call Trace: [ 3062.929113] dump_stack+0x107/0x167 [ 3062.929905] should_fail.cold+0x5/0xa [ 3062.930762] ? selinux_kernfs_init_security+0x137/0x4c0 [ 3062.931929] should_failslab+0x5/0x20 [ 3062.932802] __kmalloc+0x72/0x390 [ 3062.933587] selinux_kernfs_init_security+0x137/0x4c0 [ 3062.934724] ? selinux_file_mprotect+0x610/0x610 [ 3062.935761] ? find_held_lock+0x2c/0x110 [ 3062.936672] ? __kernfs_new_node+0x2ad/0x860 [ 3062.937637] ? lock_downgrade+0x6d0/0x6d0 [ 3062.938551] ? rwlock_bug.part.0+0x90/0x90 [ 3062.939500] security_kernfs_init_security+0x4e/0xb0 [ 3062.940653] __kernfs_new_node+0x531/0x860 [ 3062.941591] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3062.942628] ? kmemleak_alloc_percpu+0xaf/0x100 [ 3062.943656] ? pcpu_alloc+0x12a/0x1240 [ 3062.944527] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 3062.945667] kernfs_create_dir_ns+0x9c/0x230 [ 3062.946636] cgroup_mkdir+0x318/0xf50 [ 3062.947477] ? cgroup_destroy_locked+0x710/0x710 [ 3062.948523] kernfs_iop_mkdir+0x14d/0x1e0 [ 3062.949431] vfs_mkdir+0x493/0x700 [ 3062.950228] do_mkdirat+0x150/0x2b0 [ 3062.951040] ? user_path_create+0xf0/0xf0 [ 3062.951985] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3062.953147] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3062.954287] do_syscall_64+0x33/0x40 [ 3062.955107] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3062.956248] RIP: 0033:0x7fb73f007b19 [ 3062.957073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3062.961112] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3062.962793] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 3062.964346] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 3062.965916] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3062.967488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3062.969050] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 [ 3062.986753] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:23:27 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x2000003) creat(&(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x72be, 0x0, 0x0, 0x26c}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x10, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) syz_io_uring_submit(r8, r2, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x9, &(0x7f0000000040)={r9, r10+10000000}, 0x1, 0x1, 0x1}, 0x1) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:23:27 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = fork() ptrace(0x10, r1) fork() waitid(0x1, r1, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:23:40 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x31570000) 20:23:40 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = fork() ptrace(0x10, r1) fork() waitid(0x1, r1, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:23:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 25) 20:23:40 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x2000003) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(r4, r5) dup3(r4, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10010, r4, 0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x2, @perf_config_ext={0x5, 0xfffffffffffff125}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:23:40 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xb7030000) 20:23:40 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf250d000000940003801400020076657468310000000000000000000000060007004e22000014000600ff01000000000000000000000000000114000600200100000000000000000000000000000800010001000000140002006272696467655f736c6176655f30000014000200697036746e6c300000000000000000ffffffffffffff000114000600fc01000000000000000000000000000108000600e50000002c000280080008000000000006000b000200000006000f0000000000080005000400000008000700ff01000008000500c4000000080005002b73582608000500000001000c00038005000800a7000000"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a8", 0xd8}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:23:40 executing program 0: r0 = syz_io_uring_setup(0x321a, &(0x7f00000002c0)={0x0, 0x0, 0x418620c1c8164329, 0x4000000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005d40)={&(0x7f0000004cc0)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'caif0\x00'}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x40, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x10, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000d3cdb60ea2366a6836c5d6fd9c4e0800000000c2be3aa75fe1adb6c257ecbcf975856e03fc816a514a602be475f8d7e5ce4ea95caea0a651cfb97a51609349268a5ab93faf36e8a217ea571bacd053024e555726929d1f79bf4a13c4d91c873591d47cf2034d7a5a51fc34e316705d89df67057b9c9c37229d7b9647e092ab466e4900000000000000000000000000000000410700ca1a2db45592b3e8c7cb169b06ca273a2704aec4cb34be9226237c61677900"], 0x24}}, 0x20040800) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) dup2(r5, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x49e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20:23:40 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_open_dev$vcsa(&(0x7f0000000280), 0xfff, 0x0) preadv(r4, 0x0, 0x0, 0x6, 0xfff) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x2000003) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r7 = inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(r6, r7) dup3(r6, r5, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000006, 0x30, r6, 0x8000000) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x19) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3076.151762] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 3076.198492] FAULT_INJECTION: forcing a failure. [ 3076.198492] name failslab, interval 1, probability 0, space 0, times 0 [ 3076.201887] CPU: 0 PID: 39754 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 3076.203292] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3076.204999] Call Trace: [ 3076.205544] dump_stack+0x107/0x167 [ 3076.206289] should_fail.cold+0x5/0xa [ 3076.207059] ? create_object.isra.0+0x3a/0xa20 [ 3076.207991] should_failslab+0x5/0x20 [ 3076.208765] kmem_cache_alloc+0x5b/0x310 [ 3076.209590] create_object.isra.0+0x3a/0xa20 [ 3076.210470] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3076.211490] __kmalloc+0x16e/0x390 [ 3076.212255] selinux_kernfs_init_security+0x137/0x4c0 [ 3076.213306] ? selinux_file_mprotect+0x610/0x610 [ 3076.214305] ? find_held_lock+0x2c/0x110 [ 3076.215136] ? __kernfs_new_node+0x2ad/0x860 [ 3076.216061] ? lock_downgrade+0x6d0/0x6d0 [ 3076.216939] ? rwlock_bug.part.0+0x90/0x90 [ 3076.217811] security_kernfs_init_security+0x4e/0xb0 [ 3076.218877] __kernfs_new_node+0x531/0x860 [ 3076.219775] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3076.220781] ? kmemleak_alloc_percpu+0xaf/0x100 [ 3076.221753] ? pcpu_alloc+0x12a/0x1240 [ 3076.222569] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 3076.223613] kernfs_create_dir_ns+0x9c/0x230 [ 3076.224562] cgroup_mkdir+0x318/0xf50 [ 3076.225337] ? cgroup_destroy_locked+0x710/0x710 [ 3076.226301] kernfs_iop_mkdir+0x14d/0x1e0 [ 3076.227168] vfs_mkdir+0x493/0x700 [ 3076.227915] do_mkdirat+0x150/0x2b0 [ 3076.228658] ? user_path_create+0xf0/0xf0 [ 3076.229516] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3076.230582] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3076.231654] do_syscall_64+0x33/0x40 [ 3076.232432] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3076.233501] RIP: 0033:0x7fb73f007b19 [ 3076.234280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3076.238016] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3076.239587] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 3076.241083] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 3076.242560] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3076.244027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3076.245517] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:23:40 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d08", 0x6d}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 3076.514787] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes 20:23:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 26) 20:23:41 executing program 7: r0 = syz_io_uring_setup(0x40a6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, r5, {0x2800}}, './file0\x00'}) syz_io_uring_setup(0x3a73, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x1, 0x132, 0x0, r6}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) r10 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r13, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r10, 0x0) r14 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r10, 0x8000000) syz_io_uring_submit(0x0, r8, &(0x7f0000000540)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r9, 0x0, &(0x7f0000000480)="7f4d45b62b809fe877a8d8f8b59f73e4928e738d3eaba1ada8753d75d6f1b8b87447959ddb239c70a72a33bb9a3caaa6d5d82274914a769c2036c072ba7bfa402bcdf78e180faf2f4fe07e582385a72e5d804b9996cff839df81c0cfc9ab1778939f257397ed009c00c02121fb03f8606eecb5ca116bc50f25f724d2b2cb8fbbbf24ef0db513da6b857e87a4a58c508584", 0x91, 0x20040000, 0x1}, 0x7ff) syz_io_uring_submit(r4, r12, &(0x7f0000000180), 0x800) syz_io_uring_submit(r14, r12, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r7, r12, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)="086b470554b512c6e7c8a4fb3098e7ca65473485a4c1c0968076d46f20712f540f6f2a741560ccfa967c47a008f8a9e55bdfeef9850d40d3ba3a5ef30c8634976216baaaf0368babfaa3eab10e6f62f258817782e262b79e7571e60a6270165bdeb199ffcf6de2db71ee62ad1726eea62f29e92a94b8a310ffc685326ff662e924528e4b3a2c7f10ebdd51a7ff36f4a2d0126e740aff374b3b1bb5de41ca38b29cfc6ac43932bf302096658dd96dc752d428e0", 0xb3, 0x0, 0x1, {0x0, r3}}, 0x5) 20:23:41 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3c570000) 20:23:41 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = fork() ptrace(0x10, r1) fork() waitid(0x1, r1, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) [ 3076.782400] FAULT_INJECTION: forcing a failure. [ 3076.782400] name failslab, interval 1, probability 0, space 0, times 0 [ 3076.785380] CPU: 0 PID: 39915 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 3076.787073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3076.788825] Call Trace: [ 3076.789471] dump_stack+0x107/0x167 [ 3076.790258] should_fail.cold+0x5/0xa [ 3076.791205] should_failslab+0x5/0x20 [ 3076.792152] __kmalloc_track_caller+0x79/0x370 [ 3076.793099] ? security_context_to_sid_core+0xb4/0x890 [ 3076.794384] kmemdup_nul+0x2d/0xa0 [ 3076.795256] security_context_to_sid_core+0xb4/0x890 [ 3076.796326] ? security_compute_sid.part.0+0x16e0/0x16e0 [ 3076.797653] ? do_raw_spin_lock+0x121/0x260 [ 3076.798547] ? rwlock_bug.part.0+0x90/0x90 [ 3076.799434] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3076.800462] ? do_raw_spin_unlock+0x4f/0x220 [ 3076.801372] ? _raw_spin_unlock+0x1a/0x30 [ 3076.802234] security_context_to_sid+0x35/0x50 [ 3076.803187] selinux_kernfs_init_security+0x19d/0x4c0 [ 3076.804274] ? selinux_file_mprotect+0x610/0x610 [ 3076.805258] ? find_held_lock+0x2c/0x110 [ 3076.806123] ? __kernfs_new_node+0x2ad/0x860 [ 3076.807049] ? lock_downgrade+0x6d0/0x6d0 [ 3076.807914] ? rwlock_bug.part.0+0x90/0x90 [ 3076.808821] security_kernfs_init_security+0x4e/0xb0 [ 3076.809877] __kernfs_new_node+0x531/0x860 [ 3076.810764] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3076.811753] ? kmemleak_alloc_percpu+0xaf/0x100 [ 3076.812730] ? pcpu_alloc+0x12a/0x1240 [ 3076.813555] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 3076.814645] kernfs_create_dir_ns+0x9c/0x230 [ 3076.815575] cgroup_mkdir+0x318/0xf50 [ 3076.816390] ? cgroup_destroy_locked+0x710/0x710 [ 3076.817370] kernfs_iop_mkdir+0x14d/0x1e0 [ 3076.818241] vfs_mkdir+0x493/0x700 [ 3076.819004] do_mkdirat+0x150/0x2b0 [ 3076.819782] ? user_path_create+0xf0/0xf0 [ 3076.820682] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3076.821765] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3076.822849] do_syscall_64+0x33/0x40 [ 3076.823624] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3076.824699] RIP: 0033:0x7fb73f007b19 [ 3076.825472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3076.829265] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3076.830857] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 3076.832340] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 3076.833817] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3076.835308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3076.836778] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:23:41 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xb8030000) 20:23:41 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20}, 0x0, 0xffffffffffffffff, r3, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000000)=0x3, 0x6, 0x2) 20:23:41 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x34a1, &(0x7f0000000000)={0x0, 0xa629, 0x8, 0x2, 0x23d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd_index, 0x1, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x9) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001, 0x2010, r3, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {r6}}, './file0\x00'}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x67, 0x3f, 0xf7, 0x0, 0x1, 0x200, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x6, 0x101}, 0x1000, 0x11fb, 0x80, 0x2, 0x8, 0x100, 0x2, 0x0, 0x101, 0x0, 0x2}, 0xffffffffffffffff, 0x3, r7, 0x8) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000380)=r7, 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:23:41 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:23:57 executing program 3: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = fork() ptrace(0x10, r1) fork() waitid(0x1, r1, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:23:57 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = dup2(r5, r4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$batadv(0x0, r6) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0x8, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r8, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0xfec6, 0x39, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r11, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000080)={r11, 0x1, 0x6, @dev}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r8, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x40040) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @remote}, r11}, 0x14) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x820}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r12, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:23:57 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xb8520000) 20:23:57 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000340)={0x0, 0x5207}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x100010, r0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8689dabbdb04155, 0x12, r0, 0x10000000) r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(0xffffffffffffffff, r6) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r7, &(0x7f0000000080)='./file0\x00', 0x80) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000140)='./file0\x00', 0x30, 0x442040, 0x12345, {0x0, r8}}, 0x400) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r10, r9) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1200000026ecff000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="0c5d571841000000e123bbe0fbf2fa1819f04cc359cf9f1e080fc3b0578d6a3630810000002704449f738be39300a62e4bcf452b71289c51116458967c3b8811590278341679b3bb14d08e1fe047726576d11f59d5eb10d010b2d0317d8a98ccefa655ebfa5e45732b0bea9ce3f206e71aabf3d7596e114052240500812a4e3545af84e87b19a0e906670cf7ce11b028b3c1e2bc2b8d6abc82ad8cfb275891d44638127f144035d91cfad925ec126930a4b6ff0400"/194], 0x2c}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4007, @fd=r9, 0x7f, 0x4, 0x8, 0x10, 0x1, {0x3}}, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:23:57 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) pread64(r0, &(0x7f0000000000)=""/15, 0xf, 0x3ff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x2000003) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(r5, r6) r7 = dup3(r5, r4, 0x0) inotify_add_watch(r7, &(0x7f0000000080)='./file0\x00', 0x80) io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:23:57 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f000000) 20:23:57 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r3 = fork() ptrace(0x10, r3) kcmp(0x0, r3, 0x6, r0, r0) r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000040)={0x1, 0x3, 0x6}) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = fork() ptrace(0x10, r6) wait4(r6, &(0x7f00000000c0), 0x40000000, &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000f, 0x110, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfc}, 0x1101, 0x0, 0x0, 0x0, 0x61}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000180), 0xff, 0x28280) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x110, r0, 0x8000000) ptrace$cont(0x1f, r6, 0x2, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:23:57 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 27) [ 3093.121003] FAULT_INJECTION: forcing a failure. [ 3093.121003] name failslab, interval 1, probability 0, space 0, times 0 [ 3093.123829] CPU: 1 PID: 40086 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 3093.125279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3093.126977] Call Trace: [ 3093.127518] dump_stack+0x107/0x167 [ 3093.128270] should_fail.cold+0x5/0xa [ 3093.129063] ? create_object.isra.0+0x3a/0xa20 [ 3093.130008] should_failslab+0x5/0x20 [ 3093.130790] kmem_cache_alloc+0x5b/0x310 [ 3093.131636] create_object.isra.0+0x3a/0xa20 [ 3093.132570] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3093.133628] __kmalloc_track_caller+0x177/0x370 [ 3093.134599] ? security_context_to_sid_core+0xb4/0x890 [ 3093.135704] kmemdup_nul+0x2d/0xa0 [ 3093.136435] security_context_to_sid_core+0xb4/0x890 [ 3093.137470] ? security_compute_sid.part.0+0x16e0/0x16e0 [ 3093.138578] ? do_raw_spin_lock+0x121/0x260 [ 3093.139459] ? rwlock_bug.part.0+0x90/0x90 [ 3093.140340] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3093.141331] ? do_raw_spin_unlock+0x4f/0x220 [ 3093.142224] ? _raw_spin_unlock+0x1a/0x30 [ 3093.143078] security_context_to_sid+0x35/0x50 [ 3093.144021] selinux_kernfs_init_security+0x19d/0x4c0 [ 3093.145118] ? selinux_file_mprotect+0x610/0x610 [ 3093.146086] ? find_held_lock+0x2c/0x110 [ 3093.146961] ? __kernfs_new_node+0x2ad/0x860 [ 3093.147872] ? lock_downgrade+0x6d0/0x6d0 [ 3093.148754] ? rwlock_bug.part.0+0x90/0x90 [ 3093.149641] security_kernfs_init_security+0x4e/0xb0 [ 3093.150720] __kernfs_new_node+0x531/0x860 [ 3093.151600] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3093.152583] ? kmemleak_alloc_percpu+0xaf/0x100 [ 3093.153557] ? pcpu_alloc+0x12a/0x1240 [ 3093.154372] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 3093.155454] kernfs_create_dir_ns+0x9c/0x230 [ 3093.156377] cgroup_mkdir+0x318/0xf50 [ 3093.157170] ? cgroup_destroy_locked+0x710/0x710 [ 3093.158144] kernfs_iop_mkdir+0x14d/0x1e0 [ 3093.158998] vfs_mkdir+0x493/0x700 [ 3093.159736] do_mkdirat+0x150/0x2b0 [ 3093.160521] ? user_path_create+0xf0/0xf0 [ 3093.161386] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3093.162477] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3093.163548] do_syscall_64+0x33/0x40 [ 3093.164344] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3093.165391] RIP: 0033:0x7fb73f007b19 [ 3093.166192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3093.169960] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3093.171521] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 3093.173064] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 3093.174590] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3093.176080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3093.176330] device lo entered promiscuous mode [ 3093.177555] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:23:57 executing program 3: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = fork() ptrace(0x10, r1) fork() waitid(0x1, r1, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:23:57 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xb9030000) 20:23:57 executing program 0: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x800) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3093.440392] device lo left promiscuous mode 20:23:57 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 28) 20:23:57 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000) 20:23:57 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) r2 = fork() fork() waitid(0x1, r2, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:23:57 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x5776, &(0x7f0000000000)={0x0, 0xcc67, 0x20, 0x1, 0x3e3, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r6 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r9, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x0, 0x0, {0x0, r10}}, 0x7fff) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3093.605110] FAULT_INJECTION: forcing a failure. [ 3093.605110] name failslab, interval 1, probability 0, space 0, times 0 [ 3093.608226] CPU: 1 PID: 40283 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 3093.609688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3093.611384] Call Trace: [ 3093.611935] dump_stack+0x107/0x167 [ 3093.612715] should_fail.cold+0x5/0xa [ 3093.613509] should_failslab+0x5/0x20 [ 3093.614289] __kmalloc_track_caller+0x79/0x370 [ 3093.615231] ? sidtab_sid2str_get+0x17e/0x720 [ 3093.616156] kmemdup+0x23/0x50 [ 3093.616826] sidtab_sid2str_get+0x17e/0x720 [ 3093.617712] sidtab_entry_to_string+0x33/0x110 [ 3093.618653] security_sid_to_context_core+0x33c/0x5d0 [ 3093.619762] selinux_kernfs_init_security+0x239/0x4c0 [ 3093.620839] ? selinux_file_mprotect+0x610/0x610 [ 3093.621828] ? find_held_lock+0x2c/0x110 [ 3093.622668] ? __kernfs_new_node+0x2ad/0x860 [ 3093.623580] ? rwlock_bug.part.0+0x90/0x90 [ 3093.624465] security_kernfs_init_security+0x4e/0xb0 [ 3093.625504] __kernfs_new_node+0x531/0x860 [ 3093.626374] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3093.627346] ? kmemleak_alloc_percpu+0xaf/0x100 [ 3093.628384] ? pcpu_alloc+0x12a/0x1240 [ 3093.629375] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 3093.630636] kernfs_create_dir_ns+0x9c/0x230 [ 3093.631716] cgroup_mkdir+0x318/0xf50 [ 3093.632682] ? cgroup_destroy_locked+0x710/0x710 [ 3093.633842] kernfs_iop_mkdir+0x14d/0x1e0 [ 3093.634844] vfs_mkdir+0x493/0x700 [ 3093.635717] do_mkdirat+0x150/0x2b0 [ 3093.636612] ? user_path_create+0xf0/0xf0 [ 3093.637627] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3093.638896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3093.640153] do_syscall_64+0x33/0x40 [ 3093.641057] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3093.642291] RIP: 0033:0x7fb73f007b19 [ 3093.643194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3093.647252] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3093.648814] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 3093.650270] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 3093.651770] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3093.653227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3093.654706] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:23:58 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) syz_io_uring_submit(r9, r7, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0xfffffffa) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_aout(r4, &(0x7f0000001500)={{0x3, 0x0, 0x98, 0xee, 0x331, 0x400, 0x166, 0x400}, "ba722dcdcafd87b796d94498bb6460a80fb62270e24b322374a3abc83bb9458bdf6a320f98df8c2e56273b5ecf8c9338ffcec9d7d40aef84706afb9db2b898f1f53b23c17c912deb5290813e4d8c11cac8e0da471800b9c53e6bff2181a2b4d610b281aca1dcc14715d867d44ac5d10651177fd5bab706bf0dbe7d6d5c25c4fed91ac0b382", ['\x00']}, 0x1a5) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r0, 0x0) syz_io_uring_submit(r11, r2, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="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", 0x1000}], 0x1, &(0x7f0000001340)=[{0x88, 0x10a, 0x3, "e367b0a4d859e686b64f7ff074a05595f710c0a53b88ef5536707a9fb5730a0915e8380f8d958732cad127df3bd29aa10ec3251e2b899d94ddd5942fb5773d60c12aabdbd07aafdbdda76c4589b11e308626048c763a4a255403a76e604f684dc877c98a02ef268b0e45491f4fd7294e15"}, {0x80, 0x3a, 0x2, "6860a70e1ceefa012f17b7a20d988a3234d8adebc696b35c16243c15808bb8d1dd0b03f3b5ee72b6a3662417e154d7227d798c07bb7b06dddab06ef16e7e093e7b2ee2c9626c2b3207b2c1bf97cc397906879a5731ece04759bc640969becbf8cade3bbdf7dbcad597a411"}, {0x88, 0x104, 0x0, "fc8b0be6f2c56ce679d76355e77944a2e4c3ed00c69b880f1ee5685e72d93840efb9dd0678def78a205dc7c44fac32d106d960af7acc7e0ee2265a9b53d5b380b793f755b2768a1e047c1fb4b0c02372ed680ed1fa2cd8c99c37fcccdc0ebd13d81e67f4c717ecb0627b0a3404dfb36a49196e8fd422b29c"}], 0x190}, 0x0, 0x0, 0x1}, 0x20) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r12 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r12, 0x4008f510, &(0x7f0000000280)=0x2653b8d7) io_uring_enter(r12, 0x58fb, 0x4157, 0x1, &(0x7f0000000080)={[0x3]}, 0x8) 20:24:14 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xba030000) 20:24:14 executing program 7: prctl$PR_GET_TIMERSLACK(0x1e) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r6, r5) syz_io_uring_submit(r1, r2, &(0x7f0000002600)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0xe3b, 0x0, 0xb53, 0x0, 0x1, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000280), 0xfff, 0x0) preadv(r7, 0x0, 0x0, 0x6, 0xfff) clock_gettime(0x0, &(0x7f0000002580)={0x0, 0x0}) recvmmsg$unix(r7, &(0x7f0000002400)=[{{&(0x7f0000000340), 0x6e, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000013c0)=""/22, 0x16}, {&(0x7f0000001400)=""/51, 0x33}, {&(0x7f0000001440)=""/170, 0xaa}], 0x3, &(0x7f0000001540)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001580), 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001600)=""/13, 0xd}, {&(0x7f0000001640)=""/215, 0xd7}, {&(0x7f0000001740)=""/54, 0x36}, {&(0x7f0000001780)=""/155, 0x9b}, {&(0x7f0000001840)=""/94, 0x5e}, {&(0x7f00000018c0)=""/145, 0x91}, {&(0x7f0000001980)=""/41, 0x29}, {&(0x7f00000019c0)=""/12, 0xc}, {&(0x7f0000001a00)=""/70, 0x46}], 0x9}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001bc0)=""/138, 0x8a}, {&(0x7f0000001c80)=""/74, 0x4a}, {&(0x7f0000001e00)=""/157, 0x9d}], 0x3}}, {{&(0x7f0000001ec0)=@abs, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001f40)=""/185, 0xb9}, {&(0x7f0000002000)=""/235, 0xeb}, {&(0x7f0000002100)=""/69, 0x45}], 0x3, &(0x7f0000002180)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002280)=""/49, 0x31}, {&(0x7f00000022c0)=""/190, 0xbe}], 0x2, &(0x7f00000023c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x6, 0x0, &(0x7f00000025c0)={r8, r9+60000000}) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00022abd7000fedbdf250100000008000600ac1414bb050d04000000000014000700fc00000000000000000000000000000104000500050003003b00def6e6cf1110114586b5"], 0x4c}, 0x1, 0x0, 0x0, 0xfad0c0fdf2f3cf2b}, 0x4c000) 20:24:14 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r5 = dup2(r4, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd=r4, 0xb43, 0x6000000000000000, 0x6, 0x4, 0x1, {0x3}}, 0x80) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x4010, r0, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x81, 0xfe, 0x6, 0x4, 0x0, 0x7e3f, 0x0, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4d0e, 0x1, @perf_bp, 0xa842, 0x20, 0x8, 0x0, 0x8, 0x4, 0x40, 0x0, 0x8, 0x0, 0xffff}, 0x0, 0x6, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x6a52, &(0x7f0000000240)={0x0, 0x7844, 0x2, 0x1, 0x2a7, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r7, {0x9}}, './file0\x00'}) connect$inet6(r8, &(0x7f00000003c0)={0xa, 0x4e23, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000480)=0x0) r10 = syz_open_dev$vcsa(&(0x7f0000000280), 0xfff, 0x0) preadv(r10, 0x0, 0x0, 0x6, 0xfff) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0xd, 0x9, 0x0, 0x1, 0x0, 0x101, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x2, @perf_config_ext={0x1, 0x4}, 0x5800, 0x9, 0x8, 0x6, 0x4, 0x800, 0x401, 0x0, 0x1, 0x0, 0x7fffffff}, r9, 0x5, r10, 0xb) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:24:14 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 29) 20:24:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = fork() ptrace(0x10, r1) fork() waitid(0x1, r1, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:24:14 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40010002}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r8, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x2202}, 0x1}, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:24:14 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb, 0x10010, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000340)="96f57c4d46674bb28be31e0e3d709df06f1ae309d8634954362f3a1fa4883060b880647bd6eb2edffbd56a81502dafacea80addbb0ad1b627893ef9934d4d6c65cf49f5892f1afaca8d51f7e50e17194327e49c9d424cfe693b136bccf2254efd12b5ac0e5c78daaea0d1386e2ac020e2a2fd5070e9d760c2b1325658ba7f069e7cecf7aa342eec78bf484f91b0931ba3194f045a10c7088393bea54e601722bb7b50649ab11f7b79dba592626fc087fced4cf0718ac239d461e292913f83f2abd51a9a2e2d57a46466dbcd7fb5f9dc044cd039377d1ad7bf5daa41e78d3e730473c75dfc32e305cbca1a8750d51", 0x57ba, 0x0, 0x0, {0x1}}, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:24:14 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff) [ 3110.350125] FAULT_INJECTION: forcing a failure. [ 3110.350125] name failslab, interval 1, probability 0, space 0, times 0 [ 3110.352762] CPU: 0 PID: 40392 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 3110.354376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3110.354410] Call Trace: [ 3110.354435] dump_stack+0x107/0x167 [ 3110.354466] should_fail.cold+0x5/0xa [ 3110.354490] ? create_object.isra.0+0x3a/0xa20 [ 3110.354514] should_failslab+0x5/0x20 [ 3110.354533] kmem_cache_alloc+0x5b/0x310 [ 3110.354554] ? sidtab_sid2str_get+0x65/0x720 [ 3110.354580] create_object.isra.0+0x3a/0xa20 [ 3110.354600] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3110.354629] __kmalloc_track_caller+0x177/0x370 [ 3110.354647] ? sidtab_sid2str_get+0x17e/0x720 [ 3110.354678] kmemdup+0x23/0x50 [ 3110.354700] sidtab_sid2str_get+0x17e/0x720 [ 3110.354728] sidtab_entry_to_string+0x33/0x110 [ 3110.354756] security_sid_to_context_core+0x33c/0x5d0 [ 3110.354788] selinux_kernfs_init_security+0x239/0x4c0 [ 3110.354808] ? selinux_file_mprotect+0x610/0x610 [ 3110.354828] ? find_held_lock+0x2c/0x110 [ 3110.354859] ? __kernfs_new_node+0x2ad/0x860 [ 3110.354895] ? rwlock_bug.part.0+0x90/0x90 [ 3110.354928] security_kernfs_init_security+0x4e/0xb0 [ 3110.354953] __kernfs_new_node+0x531/0x860 [ 3110.354982] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3110.355004] ? kmemleak_alloc_percpu+0xaf/0x100 [ 3110.355031] ? pcpu_alloc+0x12a/0x1240 [ 3110.355061] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 3110.355096] kernfs_create_dir_ns+0x9c/0x230 [ 3110.355127] cgroup_mkdir+0x318/0xf50 [ 3110.355155] ? cgroup_destroy_locked+0x710/0x710 [ 3110.355181] kernfs_iop_mkdir+0x14d/0x1e0 [ 3110.355204] vfs_mkdir+0x493/0x700 [ 3110.355231] do_mkdirat+0x150/0x2b0 [ 3110.355254] ? user_path_create+0xf0/0xf0 [ 3110.355281] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3110.355300] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3110.355328] do_syscall_64+0x33/0x40 [ 3110.355347] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3110.355361] RIP: 0033:0x7fb73f007b19 [ 3110.355381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3110.355393] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3110.355415] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 20:24:14 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 30) [ 3110.355426] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 3110.355438] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3110.355450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3110.355461] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 20:24:15 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (fail_nth: 1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:24:15 executing program 1: r0 = syz_io_uring_setup(0x4c4f, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x1, 0xa1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:24:15 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x145040, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000340)={0xc5, 0x29, 0x2, {0x6, [{{0x8, 0x1}, 0x101, 0x20, 0x7, './file0'}, {{0x1, 0x4, 0x1}, 0x100000001, 0x3, 0x7, './file0'}, {{0x80, 0x0, 0x6}, 0xffffffffffffffff, 0x2, 0x7, './file0'}, {{0x10, 0x4, 0x8}, 0x1, 0x5, 0x7, './file0'}, {{0x40, 0x4, 0x2}, 0x9, 0xee, 0x7, './file0'}, {{0x2, 0x4, 0x7}, 0x200, 0x9, 0x7, './file0'}]}}, 0xc5) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:24:15 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff) 20:24:15 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = fork() ptrace(0x10, r1) fork() waitid(0x1, r1, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:24:15 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:24:15 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffe4) [ 3110.749653] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 3110.750011] FAULT_INJECTION: forcing a failure. [ 3110.750011] name failslab, interval 1, probability 0, space 0, times 0 [ 3110.754103] CPU: 0 PID: 40555 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 3110.755551] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3110.757337] Call Trace: [ 3110.757901] dump_stack+0x107/0x167 [ 3110.758680] should_fail.cold+0x5/0xa [ 3110.759493] ? __kernfs_iattrs+0xbc/0x470 [ 3110.760381] should_failslab+0x5/0x20 [ 3110.761192] kmem_cache_alloc+0x5b/0x310 [ 3110.762036] __kernfs_iattrs+0xbc/0x470 [ 3110.762868] kernfs_xattr_set+0x2b/0x80 [ 3110.763704] selinux_kernfs_init_security+0x26d/0x4c0 [ 3110.764807] ? selinux_file_mprotect+0x610/0x610 [ 3110.765786] ? find_held_lock+0x2c/0x110 [ 3110.766633] ? __kernfs_new_node+0x2ad/0x860 [ 3110.767553] ? rwlock_bug.part.0+0x90/0x90 [ 3110.768457] security_kernfs_init_security+0x4e/0xb0 [ 3110.769530] __kernfs_new_node+0x531/0x860 [ 3110.770410] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3110.771383] ? kmemleak_alloc_percpu+0xaf/0x100 [ 3110.772349] ? pcpu_alloc+0x12a/0x1240 [ 3110.773184] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 3110.774256] kernfs_create_dir_ns+0x9c/0x230 [ 3110.775191] cgroup_mkdir+0x318/0xf50 [ 3110.775997] ? cgroup_destroy_locked+0x710/0x710 [ 3110.776992] kernfs_iop_mkdir+0x14d/0x1e0 [ 3110.777867] vfs_mkdir+0x493/0x700 [ 3110.778607] do_mkdirat+0x150/0x2b0 [ 3110.779362] ? user_path_create+0xf0/0xf0 [ 3110.780233] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3110.781357] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3110.782451] do_syscall_64+0x33/0x40 [ 3110.783225] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3110.784281] RIP: 0033:0x7fb73f007b19 [ 3110.785065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3110.788837] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3110.790409] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 3110.791884] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 3110.793361] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3110.794864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3110.796373] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 [ 3110.846331] FAULT_INJECTION: forcing a failure. [ 3110.846331] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 3110.848274] CPU: 1 PID: 40559 Comm: syz-executor.7 Not tainted 5.10.204 #1 [ 3110.849316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3110.850501] Call Trace: [ 3110.850890] dump_stack+0x107/0x167 [ 3110.851402] should_fail.cold+0x5/0xa [ 3110.851931] _copy_from_user+0x2e/0x1b0 [ 3110.852489] move_addr_to_kernel.part.0+0x31/0x110 [ 3110.853218] __sys_connect+0xda/0x1a0 [ 3110.853784] ? __sys_connect_file+0x1a0/0x1a0 [ 3110.854409] ? rcu_read_lock_any_held+0x75/0xa0 [ 3110.855090] ? vfs_write+0x354/0xa70 [ 3110.855621] ? fput_many+0x2f/0x1a0 [ 3110.856138] ? ksys_write+0x1a9/0x260 [ 3110.856680] ? __ia32_sys_read+0xb0/0xb0 [ 3110.857250] __x64_sys_connect+0x6f/0xb0 [ 3110.857829] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3110.858569] do_syscall_64+0x33/0x40 [ 3110.859096] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3110.859830] RIP: 0033:0x7fd1edab8b19 [ 3110.860356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3110.863217] RSP: 002b:00007fd1eb02e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 3110.864313] RAX: ffffffffffffffda RBX: 00007fd1edbcbf60 RCX: 00007fd1edab8b19 [ 3110.865350] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000006 [ 3110.866367] RBP: 00007fd1eb02e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3110.867402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3110.868438] R13: 00007fffaf06b1df R14: 00007fd1eb02e300 R15: 0000000000022000 20:24:15 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x100}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:24:15 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = dup3(r0, r0, 0x0) fsetxattr(r3, &(0x7f0000000180)=@random={'btrfs.', '\x00'}, &(0x7f00000001c0)='/\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000340)=""/157) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) fchmod(r5, 0x0) r6 = inotify_init1(0x0) syz_io_uring_setup(0x2240, &(0x7f0000000240)={0x0, 0x58e7, 0x8, 0x1, 0x8c}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) inotify_add_watch(r6, &(0x7f0000000040)='.\x00', 0x2000003) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r8 = inotify_add_watch(r6, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(r7, r8) r9 = dup3(r7, r6, 0x0) inotify_add_watch(r9, &(0x7f0000000080)='./file0\x00', 0x80) io_uring_enter(r9, 0x3e40, 0x0, 0x0, 0x0, 0x0) 20:24:31 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (fail_nth: 2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:24:31 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000280), 0xfff, 0x0) preadv(r4, 0x0, 0x0, 0x6, 0xfff) openat(r4, &(0x7f0000000000)='./file0\x00', 0x1, 0xea) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:24:31 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x400}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:24:31 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffe4) 20:24:31 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = fork() ptrace(0x10, r1) fork() waitid(0x1, r1, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:24:31 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8de7, 0x0, 0x0, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x1, 0x0) faccessat2(r4, &(0x7f0000000180)='./file0\x00', 0x10c, 0x1200) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x2000003) r6 = creat(&(0x7f0000000380)='./file0\x00', 0x0) r7 = inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(r6, r7) dup3(r6, 0xffffffffffffffff, 0x80000) io_uring_enter(r6, 0x56f9, 0x6eaf, 0x1, &(0x7f00000001c0)={[0x3]}, 0x8) r8 = syz_open_dev$vcsn(&(0x7f0000000000), 0x40, 0x200000) r9 = syz_open_dev$vcsa(&(0x7f0000000280), 0xfff, 0x0) preadv(r9, 0x0, 0x0, 0x6, 0xfff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r9, 0x89fa, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x1a, 0x0, 0x1a, 0x0, @mcast2, @mcast1, 0x80, 0x1, 0x7e, 0x3ff}}) io_uring_enter(r8, 0x3b23, 0x653a, 0x2, &(0x7f0000000040)={[0x101]}, 0x8) 20:24:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 31) 20:24:31 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1000000000000) [ 3127.352360] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 3127.404471] FAULT_INJECTION: forcing a failure. [ 3127.404471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3127.411182] CPU: 1 PID: 40740 Comm: syz-executor.7 Not tainted 5.10.204 #1 [ 3127.412840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3127.414729] Call Trace: [ 3127.415338] dump_stack+0x107/0x167 [ 3127.416185] should_fail.cold+0x5/0xa [ 3127.417101] _copy_to_user+0x2e/0x180 [ 3127.417970] simple_read_from_buffer+0xcc/0x160 [ 3127.419085] proc_fail_nth_read+0x198/0x230 [ 3127.420057] ? proc_sessionid_read+0x230/0x230 [ 3127.421186] ? security_file_permission+0x24e/0x570 [ 3127.422332] ? perf_trace_initcall_start+0x101/0x380 [ 3127.423529] ? proc_sessionid_read+0x230/0x230 [ 3127.424591] vfs_read+0x228/0x580 [ 3127.425438] ksys_read+0x12d/0x260 [ 3127.426269] ? vfs_write+0xa70/0xa70 [ 3127.427147] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3127.428365] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3127.429591] do_syscall_64+0x33/0x40 [ 3127.430458] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3127.431625] RIP: 0033:0x7fd1eda6b69c [ 3127.432485] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3127.436738] RSP: 002b:00007fd1eb02e170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3127.438495] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd1eda6b69c [ 3127.440242] RDX: 000000000000000f RSI: 00007fd1eb02e1e0 RDI: 0000000000000007 [ 3127.440276] RBP: 00007fd1eb02e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3127.440290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3127.440304] R13: 00007fffaf06b1df R14: 00007fd1eb02e300 R15: 0000000000022000 [ 3127.461429] FAULT_INJECTION: forcing a failure. [ 3127.461429] name failslab, interval 1, probability 0, space 0, times 0 [ 3127.461453] CPU: 1 PID: 40742 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 3127.461470] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3127.461477] Call Trace: 20:24:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 32) [ 3127.461498] dump_stack+0x107/0x167 [ 3127.461527] should_fail.cold+0x5/0xa [ 3127.461552] ? __kernfs_iattrs+0xbc/0x470 [ 3127.461578] should_failslab+0x5/0x20 [ 3127.461600] kmem_cache_alloc+0x5b/0x310 [ 3127.461633] __kernfs_iattrs+0xbc/0x470 [ 3127.461662] kernfs_xattr_set+0x2b/0x80 [ 3127.461694] selinux_kernfs_init_security+0x26d/0x4c0 [ 3127.461717] ? selinux_file_mprotect+0x610/0x610 [ 3127.461738] ? find_held_lock+0x2c/0x110 [ 3127.461770] ? __kernfs_new_node+0x2ad/0x860 [ 3127.461802] ? rwlock_bug.part.0+0x90/0x90 [ 3127.461836] security_kernfs_init_security+0x4e/0xb0 [ 3127.461864] __kernfs_new_node+0x531/0x860 [ 3127.461896] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3127.461918] ? kmemleak_alloc_percpu+0xaf/0x100 [ 3127.461948] ? pcpu_alloc+0x12a/0x1240 [ 3127.461979] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 3127.462017] kernfs_create_dir_ns+0x9c/0x230 [ 3127.462051] cgroup_mkdir+0x318/0xf50 [ 3127.462083] ? cgroup_destroy_locked+0x710/0x710 [ 3127.462111] kernfs_iop_mkdir+0x14d/0x1e0 [ 3127.462137] vfs_mkdir+0x493/0x700 [ 3127.462167] do_mkdirat+0x150/0x2b0 [ 3127.462193] ? user_path_create+0xf0/0xf0 20:24:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 33) [ 3127.462222] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3127.462243] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3127.462274] do_syscall_64+0x33/0x40 [ 3127.462295] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3127.462309] RIP: 0033:0x7fb73f007b19 [ 3127.462332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:24:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = fork() ptrace(0x10, r1) fork() waitid(0x1, r1, &(0x7f00000001c0), 0x8, &(0x7f00000003c0)) 20:24:32 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(r1, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="12000000260000000000000000000000000000001800008008000000", @ANYRES32=0xee00, @ANYBLOB="7beb490744a7d9844923aa4d315fe09dbb1d2c2d6ca47f547f9ca597341e931e155958fec348d369b4d9b0531bc120b4a647e629d9fdc774f515f80d0460d4357aee776867f9a9e680e2ed923051485c4dde969a3b80d2bbb6e7a3e8a059ec59893c211a4df539744cd62e61d855df8fa1ec7737ca90386ec83e2294e5b29c1876fbe58a78d37c1a34d6171cdd2187df29b3fff432d9f16707ce9ea2ad6e4b8a"], 0x2c}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f2912f157eabfffffbf4a2a7bd426cbc0364116cae32cd80eb7c38196628e0db8f344f128d82ff2f68092b1c011293143b16aba6797c37b71d891e6acbfe33bb55d0457877b7166428d7b7aaddd114c8d4526b3d3a8ec2548e0a21d51ebca5f67c7ae9684653e17a890803abba42ff9d631865defc077de94ec82db8b1bec2", @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf2509000000080004000900000008000600000100000400028004000380080004007f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20018884) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 3127.462344] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3127.462369] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 3127.462382] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 3127.462396] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3127.462409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3127.462423] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 [ 3127.639920] FAULT_INJECTION: forcing a failure. [ 3127.639920] name failslab, interval 1, probability 0, space 0, times 0 [ 3127.639963] CPU: 1 PID: 40877 Comm: syz-executor.2 Not tainted 5.10.204 #1 20:24:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="f3b22589f1ca811ece04cb3b20c8a902653500d9c3839e0818679313289361ab7551bd2cf1bace38027cddc65ab82d7fe4df1ce801b0fbda5be288d0500eb155d08cf5ea30981bd351b80d9c85f5752103300993c9cc53e75e4a56a94d15797038b85a2a784ed0a93bb9c613d4352123240bde0f01d691d92067699bc0fe5422b39168fb85f5891252464bd607", 0x8d, 0x1}, {&(0x7f0000000300)="372c111923d48d02000000000000a0c82f73ef6ac30000fb7f5664026913b4a4e4bf7305", 0x24, 0x9}, {&(0x7f0000000480)="181ddb4088a9fe68e87df520", 0xc, 0x6aad}], 0x11064, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000040000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000061616161616161616161616161616161616161616161616161616161616161610f6c9743c90fd39b7828e4ff3131313131313131313131313131313131313131"]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xca\xe5\x00\x00\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000600)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) dup2(r2, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r3], 0x2) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 34) [ 3127.639974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3127.639981] Call Trace: [ 3127.640006] dump_stack+0x107/0x167 [ 3127.640033] should_fail.cold+0x5/0xa [ 3127.640056] ? create_object.isra.0+0x3a/0xa20 [ 3127.640079] should_failslab+0x5/0x20 [ 3127.640098] kmem_cache_alloc+0x5b/0x310 [ 3127.640126] create_object.isra.0+0x3a/0xa20 [ 3127.640146] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3127.640173] kmem_cache_alloc+0x159/0x310 [ 3127.640208] __kernfs_iattrs+0xbc/0x470 [ 3127.640232] kernfs_xattr_set+0x2b/0x80 [ 3127.640261] selinux_kernfs_init_security+0x26d/0x4c0 [ 3127.640282] ? selinux_file_mprotect+0x610/0x610 [ 3127.640301] ? find_held_lock+0x2c/0x110 [ 3127.640330] ? __kernfs_new_node+0x2ad/0x860 [ 3127.640358] ? rwlock_bug.part.0+0x90/0x90 [ 3127.640389] security_kernfs_init_security+0x4e/0xb0 [ 3127.640413] __kernfs_new_node+0x531/0x860 [ 3127.640446] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3127.640466] ? kmemleak_alloc_percpu+0xaf/0x100 [ 3127.640497] ? pcpu_alloc+0x12a/0x1240 [ 3127.640526] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 3127.640561] kernfs_create_dir_ns+0x9c/0x230 [ 3127.640590] cgroup_mkdir+0x318/0xf50 [ 3127.640618] ? cgroup_destroy_locked+0x710/0x710 [ 3127.640644] kernfs_iop_mkdir+0x14d/0x1e0 [ 3127.640666] vfs_mkdir+0x493/0x700 [ 3127.640692] do_mkdirat+0x150/0x2b0 [ 3127.640726] ? user_path_create+0xf0/0xf0 [ 3127.640752] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3127.640770] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3127.640798] do_syscall_64+0x33/0x40 [ 3127.640817] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3127.640830] RIP: 0033:0x7fb73f007b19 [ 3127.640851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3127.640862] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3127.640885] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 3127.640897] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 3127.640908] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3127.640920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3127.640932] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 [ 3127.747134] FAULT_INJECTION: forcing a failure. [ 3127.747134] name failslab, interval 1, probability 0, space 0, times 0 [ 3127.747161] CPU: 1 PID: 40882 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 3127.747176] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3127.747185] Call Trace: [ 3127.747212] dump_stack+0x107/0x167 [ 3127.747246] should_fail.cold+0x5/0xa [ 3127.747273] ? create_object.isra.0+0x3a/0xa20 [ 3127.747302] should_failslab+0x5/0x20 [ 3127.747324] kmem_cache_alloc+0x5b/0x310 [ 3127.747350] ? lock_downgrade+0x6d0/0x6d0 [ 3127.747379] create_object.isra.0+0x3a/0xa20 [ 3127.747402] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3127.747430] __kmalloc_node+0x1ae/0x420 [ 3127.747467] kvmalloc_node+0x119/0x170 [ 3127.747490] simple_xattr_alloc+0x43/0xa0 [ 3127.747512] simple_xattr_set+0x75/0x610 [ 3127.747544] kernfs_xattr_set+0x50/0x80 [ 3127.747572] selinux_kernfs_init_security+0x26d/0x4c0 [ 3127.747592] ? selinux_file_mprotect+0x610/0x610 [ 3127.747610] ? find_held_lock+0x2c/0x110 [ 3127.747639] ? __kernfs_new_node+0x2ad/0x860 [ 3127.747667] ? rwlock_bug.part.0+0x90/0x90 [ 3127.747698] security_kernfs_init_security+0x4e/0xb0 [ 3127.747722] __kernfs_new_node+0x531/0x860 [ 3127.747750] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3127.747771] ? kmemleak_alloc_percpu+0xaf/0x100 [ 3127.747797] ? pcpu_alloc+0x12a/0x1240 [ 3127.747826] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 3127.747859] kernfs_create_dir_ns+0x9c/0x230 [ 3127.747887] cgroup_mkdir+0x318/0xf50 [ 3127.747916] ? cgroup_destroy_locked+0x710/0x710 [ 3127.747940] kernfs_iop_mkdir+0x14d/0x1e0 [ 3127.747963] vfs_mkdir+0x493/0x700 [ 3127.747989] do_mkdirat+0x150/0x2b0 [ 3127.748012] ? user_path_create+0xf0/0xf0 [ 3127.748037] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3127.748056] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3127.748083] do_syscall_64+0x33/0x40 [ 3127.748101] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3127.748115] RIP: 0033:0x7fb73f007b19 [ 3127.748136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3127.748147] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3127.748173] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 3127.748185] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000007 [ 3127.748196] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3127.748208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3127.748220] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 [ 3127.835652] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 38 bytes [ 3127.908967] FAULT_INJECTION: forcing a failure. [ 3127.908967] name failslab, interval 1, probability 0, space 0, times 0 [ 3127.908985] CPU: 0 PID: 40899 Comm: syz-executor.2 Not tainted 5.10.204 #1 [ 3127.908994] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3127.908999] Call Trace: [ 3127.909020] dump_stack+0x107/0x167 [ 3127.909047] should_fail.cold+0x5/0xa [ 3127.909073] should_failslab+0x5/0x20 [ 3127.909089] __kmalloc_track_caller+0x79/0x370 [ 3127.909104] ? simple_xattr_set+0x93/0x610 [ 3127.909126] kstrdup+0x36/0x70 [ 3127.909140] simple_xattr_set+0x93/0x610 [ 3127.909164] kernfs_xattr_set+0x50/0x80 [ 3127.909186] selinux_kernfs_init_security+0x26d/0x4c0 [ 3127.909201] ? selinux_file_mprotect+0x610/0x610 [ 3127.909215] ? find_held_lock+0x2c/0x110 [ 3127.909236] ? __kernfs_new_node+0x2ad/0x860 [ 3127.909256] ? rwlock_bug.part.0+0x90/0x90 [ 3127.909279] security_kernfs_init_security+0x4e/0xb0 [ 3127.909296] __kernfs_new_node+0x531/0x860 [ 3127.909316] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3127.909333] ? kmemleak_alloc_percpu+0xaf/0x100 [ 3127.909351] ? pcpu_alloc+0x12a/0x1240 [ 3127.909373] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 3127.909397] kernfs_create_dir_ns+0x9c/0x230 [ 3127.909418] cgroup_mkdir+0x318/0xf50 [ 3127.909439] ? cgroup_destroy_locked+0x710/0x710 [ 3127.909456] kernfs_iop_mkdir+0x14d/0x1e0 [ 3127.909474] vfs_mkdir+0x493/0x700 [ 3127.909492] do_mkdirat+0x150/0x2b0 [ 3127.909508] ? user_path_create+0xf0/0xf0 [ 3127.909527] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3127.909540] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3127.909561] do_syscall_64+0x33/0x40 [ 3127.909575] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3127.909585] RIP: 0033:0x7fb73f007b19 [ 3127.909600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3127.909608] RSP: 002b:00007fb73c57d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3127.909624] RAX: ffffffffffffffda RBX: 00007fb73f11af60 RCX: 00007fb73f007b19 [ 3127.909632] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 3127.909641] RBP: 00007fb73c57d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3127.909649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3127.909658] R13: 00007ffe71aa649f R14: 00007fb73c57d300 R15: 0000000000022000 [ 3140.589746] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88800ea75b60 (size 144): comm "syz-executor.2", pid 40899, jiffies 4297794979 (age 22.096s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 59 7f 65 00 00 00 00 .........Y.e.... 17 e7 b5 11 00 00 00 00 00 59 7f 65 00 00 00 00 .........Y.e.... backtrace: [<0000000029041e75>] __kernfs_iattrs+0xbc/0x470 [<00000000dc630ee2>] kernfs_xattr_set+0x2b/0x80 [<00000000b8a5979f>] selinux_kernfs_init_security+0x26d/0x4c0 [<00000000d3fe80b0>] security_kernfs_init_security+0x4e/0xb0 [<000000002ff9577e>] __kernfs_new_node+0x531/0x860 [<00000000d653c4f0>] kernfs_create_dir_ns+0x9c/0x230 [<00000000eb7e6677>] cgroup_mkdir+0x318/0xf50 [<000000004bdfdefb>] kernfs_iop_mkdir+0x14d/0x1e0 [<00000000f767df10>] vfs_mkdir+0x493/0x700 [<000000002ce491ab>] do_mkdirat+0x150/0x2b0 [<0000000027eb7fc1>] do_syscall_64+0x33/0x40 [<00000000fb7f6091>] entry_SYSCALL_64_after_hwframe+0x62/0xc7 BUG: leak checking failed VM DIAGNOSIS: 20:24:54 Registers: info registers vcpu 0 RAX=ffffffff83e5d490 RBX=0000000000000000 RCX=ffffffff83e4554c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e5da98 RBP=fffffbfff09c6450 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85672788 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e5d49e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f365ec81df8 CR3=0000000015af2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004184aaf740000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e5d490 RBX=0000000000000001 RCX=ffffffff83e4554c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e5da98 RBP=ffffed100112f000 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85672788 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e5d49e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe1100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff69f4aff0 CR3=000000000c8bc000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=2934343120657a697328203036623537 XMM03=3420646970202c22322e726f74756365 XMM04=2e2e2e2e2e2e2e202030302030302030 XMM05=20303020303020303020303020303020 XMM06=65747962203233207473726966282070 XMM07=32322065676128203937393439373739 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000