000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xf0ffffffffffff, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:23:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:48 executing program 1: syz_open_dev$admmidi(0x0, 0x20, 0x10000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:48 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00?\x00\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:23:48 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x100000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:23:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x80ffff]}) 19:23:48 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:23:48 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x200000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1006.338596][ T4530] 9pnet_virtio: no channels available for device syz0 19:23:48 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:48 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x300000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:23:48 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:48 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:23:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0xfdfdffff]}) 19:23:48 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:23:48 executing program 1: syz_open_dev$admmidi(0x0, 0x20, 0x10000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x0, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:48 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x500000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:23:48 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) [ 1006.910742][ T4855] 9pnet_virtio: no channels available for device syz0 19:23:48 executing program 1: syz_open_dev$admmidi(0x0, 0x20, 0x10000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x0, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:48 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:23:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:49 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x600000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:23:49 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00L\x00\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:23:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0xffff8000]}) 19:23:49 executing program 1: syz_open_dev$admmidi(0x0, 0x20, 0x10000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x0, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:49 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x700000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1007.321830][ T5082] 9pnet_virtio: no channels available for device syz0 19:23:49 executing program 1: syz_open_dev$admmidi(0x0, 0x20, 0x10000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x15, 0x80005, 0x0) bind(0xffffffffffffffff, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:49 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x6}) memfd_create(0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:23:49 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x800000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:23:49 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00`\x00\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:23:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0xfffffdfd]}) 19:23:49 executing program 1: syz_open_dev$admmidi(0x0, 0x20, 0x10000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x15, 0x80005, 0x0) bind(0xffffffffffffffff, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) [ 1007.829518][ T5211] 9pnet_virtio: no channels available for device syz0 19:23:49 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x806000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:23:49 executing program 1: syz_open_dev$admmidi(0x0, 0x20, 0x10000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x15, 0x80005, 0x0) bind(0xffffffffffffffff, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) [ 1007.976438][ T5297] rds_bind: 13 callbacks suppressed [ 1007.976457][ T5297] RDS: rds_bind could not find a transport for 864:1f5c:14d5:57d5:200:5efe:123.184.11.134, load rds_tcp or rds_rdma? 19:23:50 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:23:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x80ffff00000000]}) 19:23:50 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xb00000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:23:50 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x6}) memfd_create(0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:23:50 executing program 1: syz_open_dev$admmidi(0x0, 0x20, 0x10000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, 0x0, 0x0) [ 1008.264149][ T5445] RDS: rds_bind could not find a transport for 864:1f5c:14d5:57d5:200:5efe:123.184.11.134, load rds_tcp or rds_rdma? [ 1008.335097][ T5442] 9pnet_virtio: no channels available for device syz0 19:23:50 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xd00000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:23:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:50 executing program 1: syz_open_dev$admmidi(0x0, 0x20, 0x10000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, 0x0, 0x0) 19:23:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0xfdfdffff00000000]}) 19:23:50 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00l\x00\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1008.589862][ C0] net_ratelimit: 17 callbacks suppressed [ 1008.589870][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1008.601353][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1008.607165][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1008.612974][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:23:50 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x1000000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1008.630506][ T5661] RDS: rds_bind could not find a transport for 864:1f5c:14d5:57d5:200:5efe:123.184.11.134, load rds_tcp or rds_rdma? 19:23:50 executing program 1: syz_open_dev$admmidi(0x0, 0x20, 0x10000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, 0x0, 0x0) [ 1008.669886][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1008.675770][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1008.749876][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1008.755777][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1008.756839][ T5665] 9pnet_virtio: no channels available for device syz0 19:23:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:50 executing program 1: syz_open_dev$admmidi(0x0, 0x20, 0x10000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0x0, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) [ 1008.935053][ T5770] RDS: rds_bind could not find a transport for 864:1f5c:14d5:57d5:200:5efe:123.184.11.134, load rds_tcp or rds_rdma? 19:23:50 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x1100000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:23:51 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x6}) memfd_create(0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:23:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:51 executing program 1: syz_open_dev$admmidi(0x0, 0x20, 0x10000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0x0, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x80ffff]}) 19:23:51 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:23:51 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x1400000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1009.350402][ T5794] 9pnet_virtio: no channels available for device syz0 19:23:51 executing program 1: syz_open_dev$admmidi(0x0, 0x20, 0x10000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0x0, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) [ 1009.469878][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1009.469914][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:23:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0xfdfdffff]}) 19:23:51 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2000000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:23:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) [ 1009.867784][ T6069] RDS: rds_bind could not find a transport for 864:1f5c:14d5:57d5:200:5efe:123.184.11.134, load rds_tcp or rds_rdma? 19:23:52 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00z\x00\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:23:52 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2800000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:23:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x0, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0xffff8000]}) 19:23:52 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x6}) memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:23:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) [ 1010.205362][ T6137] RDS: rds_bind could not find a transport for 864:1f5c:14d5:57d5:200:5efe:123.184.11.134, load rds_tcp or rds_rdma? [ 1010.243851][ T6141] 9pnet_virtio: no channels available for device syz0 19:23:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x0, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:52 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4000000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:23:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0xfffffdfd]}) 19:23:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x0, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:52 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4305000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1010.613661][ T6257] RDS: rds_bind could not find a transport for 864:1f5c:14d5:57d5:200:5efe:123.184.11.134, load rds_tcp or rds_rdma? 19:23:52 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000c0ed00000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:23:52 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x6}) memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:23:52 executing program 1: syz_open_dev$admmidi(0x0, 0x20, 0x10000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x15, 0x80005, 0x0) bind(0xffffffffffffffff, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:52 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x6000000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1010.905005][ T6297] 9pnet_virtio: no channels available for device syz0 [ 1010.933856][ T6329] RDS: rds_bind could not find a transport for 864:1f5c:14d5:57d5:200:5efe:123.184.11.134, load rds_tcp or rds_rdma? 19:23:52 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x6}) memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:23:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x15, 0x80005, 0x0) bind(0xffffffffffffffff, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:53 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x800e000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:23:53 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000010000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:23:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 19:23:53 executing program 1: syz_open_dev$admmidi(0x0, 0x20, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) [ 1011.239654][ T6497] RDS: rds_bind could not find a transport for 864:1f5c:14d5:57d5:200:5efe:123.184.11.134, load rds_tcp or rds_rdma? 19:23:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x15, 0x80005, 0x0) bind(0xffffffffffffffff, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) [ 1011.296970][ T6494] 9pnet_virtio: no channels available for device syz0 19:23:53 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8035000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:23:53 executing program 1: syz_open_dev$admmidi(0x0, 0x0, 0x10000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:53 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x6}) memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:23:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, 0x0, 0x0) [ 1011.574279][ T6697] RDS: rds_bind could not find a transport for 864:1f5c:14d5:57d5:200:5efe:123.184.11.134, load rds_tcp or rds_rdma? 19:23:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:23:53 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8100000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:23:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff0080ffff]}) 19:23:53 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000020000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:23:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, 0x0, 0x0) 19:23:53 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x6}) memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:23:53 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x86ddffff00000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:23:53 executing program 1: syz_open_dev$admmidi(0x0, 0x20, 0x10000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) [ 1012.017711][ T6825] 9pnet_virtio: no channels available for device syz0 19:23:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, 0x0, 0x0) 19:23:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 19:23:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:23:54 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000030000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:23:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0x0, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:54 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x6}) memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:23:54 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8847000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:23:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0x0, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) [ 1012.485839][ T7005] 9pnet_virtio: no channels available for device syz0 19:23:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 19:23:54 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8848000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:23:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0x0, "9bab822c32e608641f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf32b539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) 19:23:54 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x6}) memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:23:54 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8864000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:23:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 1013.629879][ C1] net_ratelimit: 20 callbacks suppressed [ 1013.629887][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1013.629938][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1013.635621][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1014.509859][ T12] Bluetooth: hci0: command 0x1003 tx timeout [ 1014.516167][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1014.829940][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1014.835795][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1014.841691][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1014.847729][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1014.909883][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1014.915792][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1014.999911][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1015.149917][ T12] Bluetooth: hci1: command 0x1003 tx timeout [ 1015.156093][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1016.589896][ T12] Bluetooth: hci0: command 0x1001 tx timeout [ 1016.595998][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1017.229992][ T12] Bluetooth: hci1: command 0x1001 tx timeout [ 1017.236114][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1018.669937][ T12] Bluetooth: hci0: command 0x1009 tx timeout [ 1018.989897][ C0] net_ratelimit: 17 callbacks suppressed [ 1018.995585][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1019.001379][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1019.007243][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1019.013025][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1019.069891][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1019.075711][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1019.149897][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1019.155679][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1019.309921][ T12] Bluetooth: hci1: command 0x1009 tx timeout [ 1019.869885][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1019.869906][ C0] protocol 88fb is buggy, dev hsr_slave_0 19:24:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:24:04 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000040000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:24:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) 19:24:04 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x88a8ffff00000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:24:04 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x6}) memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:04 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x88caffff00000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1022.732132][ T7205] 9pnet_virtio: no channels available for device syz0 [ 1022.768144][ T7789] Bluetooth: hci0: Frame reassembly failed (-84) 19:24:04 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8906000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:24:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 19:24:04 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x6}) memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:04 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000050000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:24:05 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xfffffffffffff000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1023.164074][ T7352] 9pnet_virtio: no channels available for device syz0 19:24:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 1024.029928][ C1] net_ratelimit: 22 callbacks suppressed [ 1024.029937][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1024.029980][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1024.035935][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1024.829939][ T2816] Bluetooth: hci0: command 0x1003 tx timeout [ 1024.836241][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1025.229959][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1025.235809][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1025.241797][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1025.247952][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1025.309924][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1025.315862][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1025.389985][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1025.549953][ T2816] Bluetooth: hci1: command 0x1003 tx timeout [ 1025.556190][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1026.909924][ T2816] Bluetooth: hci0: command 0x1001 tx timeout [ 1026.916457][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1027.629990][ T2816] Bluetooth: hci1: command 0x1001 tx timeout [ 1027.636205][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1028.989945][ T2597] Bluetooth: hci0: command 0x1009 tx timeout [ 1029.389966][ C0] net_ratelimit: 17 callbacks suppressed [ 1029.389975][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1029.401889][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1029.407767][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1029.413742][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1029.469882][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1029.476102][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1029.549936][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1029.556259][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1029.709988][ T2597] Bluetooth: hci1: command 0x1009 tx timeout [ 1030.269912][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1030.269919][ C0] protocol 88fb is buggy, dev hsr_slave_0 19:24:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:24:14 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x2, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:24:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 19:24:14 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x6}) memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:24:14 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000060000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:24:14 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x3, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1032.969306][ T7446] 9pnet_virtio: no channels available for device syz0 19:24:15 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x6}) memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:24:15 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x5, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:24:15 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:24:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:24:15 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x6, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1033.400882][ T7571] 9pnet_virtio: no channels available for device syz0 19:24:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 1034.202578][ T7789] Bluetooth: hci1: Frame reassembly failed (-84) [ 1034.429874][ C1] net_ratelimit: 22 callbacks suppressed [ 1034.429888][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1034.429937][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1034.435651][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1034.441461][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1035.069928][ T22] Bluetooth: hci0: command 0x1003 tx timeout [ 1035.076117][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1035.629899][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1035.635768][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1035.641618][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1035.647397][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1035.709897][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1035.715748][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1036.269926][ T22] Bluetooth: hci1: command 0x1003 tx timeout [ 1036.276100][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1037.149898][ T2597] Bluetooth: hci0: command 0x1001 tx timeout [ 1037.156059][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1038.349927][ T2597] Bluetooth: hci1: command 0x1001 tx timeout [ 1038.356028][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1039.229879][ T2597] Bluetooth: hci0: command 0x1009 tx timeout [ 1039.789901][ C0] net_ratelimit: 18 callbacks suppressed [ 1039.795587][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1039.801352][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1039.807135][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1039.812871][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1039.869888][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1039.875662][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1039.949876][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1039.955725][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1040.429942][ T22] Bluetooth: hci1: command 0x1009 tx timeout [ 1040.669881][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1040.669887][ C0] protocol 88fb is buggy, dev hsr_slave_0 19:24:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:24:25 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x6}) memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:24:25 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x7, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:24:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:24:25 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1043.157189][ T7703] 9pnet_virtio: no channels available for device syz0 19:24:25 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:24:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:24:25 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xb, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:24:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:24:25 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x2) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:24:25 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x40, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000240)={0x1, 0x1, [{r1, 0x0, 0x0, 0x2000}]}) write$binfmt_aout(r0, &(0x7f0000000300)={{0xcc, 0x3, 0x2, 0x22a, 0x175, 0xfffffffffffffffe, 0x341, 0x4b}, "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", [[], [], [], [], [], [], [], [], []]}, 0x1920) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x20001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ptrace$setregset(0x4205, r5, 0x203, &(0x7f00000001c0)={&(0x7f0000000140)="13689385c0ba43074cf86e9558621cd809b9c17b68013f09bcde40c1e27862c166b1ef018a12ad74e844f3f5ef3cbd621fa5b91a7ae17db2df0eca88e45203af4bf064565484cfc49c2a05ba1d23fa5d12926b7dc2da67a4aaefc8b4aa2e8d5d38beaafd64dc5afa063c90af30527ae16f", 0x71}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r4, 0xa}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:24:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:24:26 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:24:26 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x2) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:24:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:24:26 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xd, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:24:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x8000, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@int=0xafb, 0x4) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r3, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:24:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:24:26 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x2) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) [ 1044.517380][ T7980] 9pnet_virtio: no channels available for device syz0 19:24:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:24:26 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x10, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:24:26 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x2) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:24:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x202000, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:24:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 1044.829868][ C1] net_ratelimit: 22 callbacks suppressed [ 1044.829877][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1044.829909][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1044.835612][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:24:26 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:24:26 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x11, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:24:26 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:24:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:24:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:24:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) [ 1045.177453][ T8174] 9pnet_virtio: no channels available for device syz0 19:24:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:24:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x9, 0x7}) r2 = eventfd2(0x0, 0x2) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) write(r2, &(0x7f0000000140)="2715756bda37d3cd88bb65e721aa3a5ceab4c937cb80636df47e9939886eacd0f61351d0f47a45701310a32b7bc7a074ef4d8c2c48084a0e162b18999af0822f7e26cebf8bf2126225296b39a334957c33c9e0e0f05bc5ac5400a9c3e1c34502702cced32ec5b629be2391ba26e4a281bd6777c0f63aa13643b36cb2a6780b7c8b633c51c3fca9a4dd93639b18744735d1eb3a42c63809e8c60c5ac9d238a46955effec4448120d2fd2103d0202431a9545e2a07eca24f0e50a533cd2dde330a2e813f4e03f4e7b45d758ec4165c61d7718084090867af2097cc80ab6c83bc6265ec08b91912f0f094c025153987cf2a0517c5a458d4", 0xf6) 19:24:27 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x14, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:24:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:24:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:24:27 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c00000000000000000e0000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:24:27 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x28, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:24:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x4, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 1045.599531][ T8451] 9pnet_virtio: no channels available for device syz0 19:24:27 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:24:27 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:24:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:24:27 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x60, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:24:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:24:27 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000100000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1046.029873][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1046.035763][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1046.041625][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1046.047421][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:24:28 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xf0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1046.090090][ T8102] Bluetooth: hci0: Frame reassembly failed (-84) [ 1046.097423][ T8582] 9pnet_virtio: no channels available for device syz0 [ 1046.109882][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1046.115711][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:24:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) [ 1046.189873][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:24:28 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:24:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:24:28 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x300, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:24:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x1007fff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TCFLSH(r2, 0x540b, 0xf53) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r3, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 1046.491399][ T8692] 9pnet_virtio: no channels available for device syz0 19:24:28 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) [ 1048.110208][ T2597] Bluetooth: hci0: command 0x1003 tx timeout [ 1048.116382][T22101] Bluetooth: hci0: sending frame failed (-49) [ 1050.189957][ C0] net_ratelimit: 17 callbacks suppressed [ 1050.195681][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1050.201532][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1050.207366][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1050.213159][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1050.218996][ T2597] Bluetooth: hci0: command 0x1001 tx timeout [ 1050.225082][T22101] Bluetooth: hci0: sending frame failed (-49) [ 1050.269852][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1050.275623][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1050.349909][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1050.355799][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1051.069899][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1051.069907][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1052.269921][ T22] Bluetooth: hci0: command 0x1009 tx timeout [ 1055.229889][ C1] net_ratelimit: 21 callbacks suppressed [ 1055.229950][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1055.235616][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1055.247056][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1056.429924][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1056.435717][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1056.441574][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1056.447331][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:24:38 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x500, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:24:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:24:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:24:38 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:24:38 executing program 0: ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000000)=0x2) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:24:38 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000010200000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1056.509904][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1056.515762][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1056.589886][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:24:38 executing program 0: ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000000)=0x2) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:24:38 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:24:38 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x543, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1056.659842][ T8817] 9pnet_virtio: no channels available for device syz0 19:24:38 executing program 0: ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000000)=0x2) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:24:38 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x600, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:24:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffd, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:24:38 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x2) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:24:39 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x608, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:24:39 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00?\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1057.301553][ T9157] 9pnet_virtio: no channels available for device syz0 [ 1058.749852][T18376] Bluetooth: hci0: command 0x1003 tx timeout [ 1058.755990][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1058.909892][T18376] Bluetooth: hci1: command 0x1003 tx timeout [ 1058.916104][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1060.589919][ C0] net_ratelimit: 17 callbacks suppressed [ 1060.595619][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1060.601429][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1060.607251][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1060.613000][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1060.669866][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1060.679646][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1060.749883][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1060.755752][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1060.829890][T18376] Bluetooth: hci0: command 0x1001 tx timeout [ 1060.835989][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1060.989885][ T22] Bluetooth: hci1: command 0x1001 tx timeout [ 1060.996051][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1061.469897][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1061.470298][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1062.909890][ T22] Bluetooth: hci0: command 0x1009 tx timeout [ 1063.069948][T18376] Bluetooth: hci1: command 0x1009 tx timeout [ 1065.629885][ C1] net_ratelimit: 21 callbacks suppressed [ 1065.629894][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1065.629938][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1065.635646][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:24:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:24:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000100)={0x0, 0x2, 0x3995, 0x2, 0x7, 0x2}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r3, 0xa}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:24:48 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x2) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:24:48 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x689, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1066.829873][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1066.835732][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1066.841593][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1066.847359][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1066.909891][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1066.915750][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1066.989867][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:24:49 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:24:49 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:24:49 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x2) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:24:49 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x700, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:24:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xc1) write$sndseq(r3, &(0x7f0000000100)=[{0x10001, 0x6, 0x8, 0x1, @time={0x0, 0x989680}, {0x100000000, 0x6c9}, {0x0, 0x5}, @control={0xfd4, 0x3, 0xffff}}, {0x80, 0x1ff, 0x7, 0x400, @time={0x0, 0x1c9c380}, {0x8, 0x6}, {0xff, 0x1}, @result={0x81, 0x7}}, {0x5, 0x5, 0xff, 0xff, @tick=0x8, {0x2, 0x93}, {0x4, 0x2}, @connect={{0x2}, {0x9, 0x3}}}, {0x0, 0x1ff, 0x9be, 0x80, @tick=0x6, {0x1f, 0xffffffffffff47fc}, {0x8218, 0x8}, @raw32={[0xdd1, 0x5, 0xff]}}, {0x2, 0x9, 0x3, 0x279c3448, @tick=0x40, {0x6, 0x3}, {0x3}, @raw32={[0x9, 0xf365]}}, {0x4, 0x5, 0x4, 0xc6, @tick, {0x4, 0x3}, {0x4, 0x7ff}, @connect={{0x3023, 0x1}, {0x2, 0x100000000}}}, {0x5, 0x2, 0x10001, 0x0, @time, {0x800, 0x7}, {0x3, 0x69}, @raw8={"d9e4de421f5d8b0250375aa2"}}], 0x150) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:24:49 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000000)=0x2) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:24:49 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x806, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1067.514131][ T9278] 9pnet_virtio: no channels available for device syz0 19:24:49 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00L\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1067.842033][ T9494] 9pnet_virtio: no channels available for device syz0 [ 1068.990110][ T22] Bluetooth: hci0: command 0x1003 tx timeout [ 1068.996374][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1069.549914][ T22] Bluetooth: hci1: command 0x1003 tx timeout [ 1069.556115][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1070.989904][ C0] net_ratelimit: 17 callbacks suppressed [ 1070.995607][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1071.001399][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1071.007227][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1071.013010][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1071.069862][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1071.075642][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1071.081541][ T22] Bluetooth: hci0: command 0x1001 tx timeout [ 1071.087608][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1071.149899][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1071.155691][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1071.629847][ T22] Bluetooth: hci1: command 0x1001 tx timeout [ 1071.635991][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1071.869882][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1071.869915][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1073.149903][T18376] Bluetooth: hci0: command 0x1009 tx timeout [ 1073.709887][T18376] Bluetooth: hci1: command 0x1009 tx timeout [ 1076.029876][ C1] net_ratelimit: 22 callbacks suppressed [ 1076.029937][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1076.035585][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1076.047030][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:24:58 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:24:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x2, 0x112}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={r3, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000000240)=0x84) r4 = eventfd2(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r4, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:24:58 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:24:58 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xb00, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1077.067885][ T9501] 9pnet_virtio: no channels available for device syz0 [ 1077.229875][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1077.235718][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1077.241568][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1077.247335][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1077.309881][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1077.315725][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1077.389904][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:24:59 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:24:59 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000000)=0x2) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:24:59 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xd00, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:24:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000100)={0x400, 0x1, 0x0, [{0x1, 0xffffffffffff7fff, 0x8, 0x4, 0x0, 0x8000, 0x100000001}]}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:24:59 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:24:59 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xe80, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1077.734248][ T9614] 9pnet_virtio: no channels available for device syz0 19:24:59 executing program 5: r0 = accept4$inet(0xffffffffffffff9c, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0xf100, 0x0, 0x0, r3, 0xfffffffffffffffc}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:24:59 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x1100, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:24:59 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00l\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1078.171476][ T9809] 9pnet_virtio: no channels available for device syz0 [ 1079.229855][ T2816] Bluetooth: hci0: command 0x1003 tx timeout [ 1079.236099][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1079.869856][ T2816] Bluetooth: hci1: command 0x1003 tx timeout [ 1079.876076][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1081.309912][ T2816] Bluetooth: hci0: command 0x1001 tx timeout [ 1081.316117][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1081.389961][ C0] net_ratelimit: 17 callbacks suppressed [ 1081.395641][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1081.401479][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1081.407279][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1081.413023][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1081.469878][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1081.475684][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1081.549834][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1081.555626][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1081.949890][ T2597] Bluetooth: hci1: command 0x1001 tx timeout [ 1081.955988][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1082.269873][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1082.269879][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1083.389907][ T2597] Bluetooth: hci0: command 0x1009 tx timeout [ 1084.029921][ T2816] Bluetooth: hci1: command 0x1009 tx timeout [ 1086.429879][ C1] net_ratelimit: 22 callbacks suppressed [ 1086.429888][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1086.429908][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1086.435609][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1086.441350][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:25:09 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:25:09 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x1400, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:25:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 1087.629859][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1087.635632][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1087.641470][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1087.647266][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1087.709881][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1087.715665][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:25:09 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000000)=0x2) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:25:09 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:25:09 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:25:09 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x2000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:25:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x8000, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:25:09 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x2800, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1087.980406][ T9952] 9pnet_virtio: no channels available for device syz0 [ 1088.029934][ T7196] Bluetooth: hci1: sending frame failed (-49) 19:25:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xfffffffffffffffd, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) write$vnet(r2, &(0x7f00000001c0)={0x1, {&(0x7f0000000340)=""/18, 0x12, &(0x7f0000000100)=""/189, 0x10001, 0x1}}, 0x68) io_setup(0x3, &(0x7f0000000240)=0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) io_cancel(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x932, r2, &(0x7f0000000280)="bbb50bf3cace819666b7eb58de5be89d477727ff53097f5bd7f9b6b0e825ef8e77254c8fc0dd97018fd8ecb870e2d907cf556a20a5", 0x35, 0x100, 0x0, 0x2, r2}, &(0x7f0000000300)) 19:25:10 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x3580, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:25:10 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00z\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:25:10 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1088.437712][T10177] 9pnet_virtio: no channels available for device syz0 [ 1089.470003][ T2816] Bluetooth: hci0: command 0x1003 tx timeout [ 1089.476232][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1090.109938][ T2816] Bluetooth: hci1: command 0x1003 tx timeout [ 1090.116081][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1091.550007][ T2816] Bluetooth: hci0: command 0x1001 tx timeout [ 1091.556168][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1091.789892][ C0] net_ratelimit: 18 callbacks suppressed [ 1091.795578][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1091.801401][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1091.807282][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1091.813056][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1091.869854][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1091.875629][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1091.949895][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1091.955743][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1092.189909][ T2816] Bluetooth: hci1: command 0x1001 tx timeout [ 1092.196071][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1092.669884][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1092.669909][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1093.629976][ T2597] Bluetooth: hci0: command 0x1009 tx timeout [ 1094.270080][ T2597] Bluetooth: hci1: command 0x1009 tx timeout [ 1096.829906][ C1] net_ratelimit: 22 callbacks suppressed [ 1096.829915][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1096.829921][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1096.830011][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1096.835650][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:25:19 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:25:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x80, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000100)={0xe, 0x7, 0x7ff, 0x5, 0x1000, "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"}, 0x100c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r3, 0xa}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:25:19 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1097.588627][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 1098.029906][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1098.035721][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1098.041628][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1098.047416][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:25:20 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:25:20 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:25:20 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000ffffff8c0000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:25:20 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4788, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:25:20 executing program 5: io_setup(0x5e29, &(0x7f0000000000)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x80000000, r1, &(0x7f0000000180)="46212db4d7b83296e7f29ef396a470dd0367dc29f0a488acf5114769b88e6d70c44163ab4b0e859151cb3cd357e32217358ddede4cecada43bd57886f88e76e2fcd7020d85e714df25203648a15ff0b5e6047acb4ee28af5fc7a2532f63a3ade6921ca40fdc7c7a9d81a369b90057b9b46bee2920a052937f3aca0773fe0d8579063b901421b214fcc70fdd0b509a55f3f64568527ac5f26cae6f81f4a5a61c1cd1d1097849eceffff40625e4505fd", 0xaf, 0xdce5, 0x0, 0x1, 0xffffffffffffff9c}]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r4, 0xa}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 1098.109898][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1098.115760][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:25:20 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4888, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1098.225611][T10402] 9pnet_virtio: no channels available for device syz0 [ 1098.299531][ T2532] Bluetooth: hci1: Frame reassembly failed (-84) 19:25:20 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x6000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:25:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1000000000002003, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x2000040000000000, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffffffffffffff7f, 0x44002) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000000c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000140)={0x9, 0xc543, r4, 0x0, r5, 0x0, 0x8, 0x6}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:25:20 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c00000000000000edc00000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1098.694890][T10656] 9pnet_virtio: no channels available for device syz0 [ 1099.629854][ T2597] Bluetooth: hci0: command 0x1003 tx timeout [ 1099.636062][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1100.369835][ T2597] Bluetooth: hci1: command 0x1003 tx timeout [ 1100.375983][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1101.710359][T32487] Bluetooth: hci0: command 0x1001 tx timeout [ 1101.716505][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1102.189903][ C0] net_ratelimit: 18 callbacks suppressed [ 1102.195596][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1102.201388][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1102.207240][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1102.213034][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1102.269907][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1102.275689][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1102.349868][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1102.355702][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1102.429919][T32487] Bluetooth: hci1: command 0x1001 tx timeout [ 1102.436062][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1103.069878][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1103.069898][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1103.789867][T32487] Bluetooth: hci0: command 0x1009 tx timeout [ 1104.510019][T32487] Bluetooth: hci1: command 0x1009 tx timeout [ 1107.229882][ C1] net_ratelimit: 22 callbacks suppressed [ 1107.229934][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1107.235589][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1107.247026][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:25:29 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:25:29 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x6488, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:25:29 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000fffffff60000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1107.786009][T10730] 9pnet_virtio: no channels available for device syz0 [ 1107.844022][ T8102] Bluetooth: hci0: Frame reassembly failed (-84) 19:25:30 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:25:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x3000, &(0x7f00000000c0), 0x0, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:25:30 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:25:30 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x800e, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:25:30 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000fffffdf90000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:25:30 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8035, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1108.429901][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1108.433375][T10745] 9pnet_virtio: no channels available for device syz0 [ 1108.435719][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1108.435806][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1108.454073][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1108.511237][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1108.517462][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:25:30 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x10000, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000100)={0xff, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0xf88c) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r3, 0xa}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 1108.591086][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:25:30 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8100, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:25:30 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000f9fdffff0000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:25:30 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8847, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1108.908695][T10960] 9pnet_virtio: no channels available for device syz0 [ 1109.869937][T18376] Bluetooth: hci0: command 0x1003 tx timeout [ 1109.876062][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1110.589843][T18376] Bluetooth: hci1: command 0x1003 tx timeout [ 1110.596090][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1111.949919][ T22] Bluetooth: hci0: command 0x1001 tx timeout [ 1111.956056][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1112.589889][ C0] net_ratelimit: 17 callbacks suppressed [ 1112.595572][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1112.601384][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1112.607201][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1112.612939][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1112.669926][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1112.675713][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1112.681613][ T22] Bluetooth: hci1: command 0x1001 tx timeout [ 1112.687738][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1112.749872][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1112.755661][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1113.469881][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1113.469944][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1114.029903][T18376] Bluetooth: hci0: command 0x1009 tx timeout [ 1114.749895][T18376] Bluetooth: hci1: command 0x1009 tx timeout [ 1117.629890][ C1] net_ratelimit: 22 callbacks suppressed [ 1117.629899][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1117.629905][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1117.629993][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1117.635616][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:25:39 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:25:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x20000001) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) r4 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x205, 0x1) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r4, 0x800443d2, &(0x7f0000000140)={0x6, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x440040, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:25:39 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8848, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:25:39 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c00000000008cffffff0000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1118.075238][T10970] 9pnet_virtio: no channels available for device syz0 19:25:40 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:25:40 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:25:40 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8864, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:25:40 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000f6ffffff0000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:25:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @vbi={0x2, 0x3, 0x8, 0x0, [0x4, 0x3], [0x3ff, 0x4], 0x109}}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) eventfd2(0x8, 0x801) 19:25:40 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8906, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1118.706159][T11186] 9pnet_virtio: no channels available for device syz0 [ 1118.829896][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1118.835728][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1118.841595][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1118.847342][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:25:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 1118.909890][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1118.915781][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:25:40 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xf000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1120.109847][ T22] Bluetooth: hci0: command 0x1003 tx timeout [ 1120.116044][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1120.749870][ T22] Bluetooth: hci1: command 0x1003 tx timeout [ 1120.756223][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1122.189902][ T22] Bluetooth: hci0: command 0x1001 tx timeout [ 1122.196030][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1122.829891][ T22] Bluetooth: hci1: command 0x1001 tx timeout [ 1122.836057][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1122.989911][ C0] net_ratelimit: 18 callbacks suppressed [ 1122.995605][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1123.001421][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1123.007249][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1123.012998][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1123.069886][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1123.075684][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1123.149857][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1123.155631][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1123.869878][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1123.869884][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1124.269892][T18376] Bluetooth: hci0: command 0x1009 tx timeout [ 1124.909856][T18376] Bluetooth: hci1: command 0x1009 tx timeout [ 1128.029876][ C1] net_ratelimit: 22 callbacks suppressed [ 1128.029929][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1128.035585][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1128.047059][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:25:50 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:25:50 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c000000000000000000c0ed000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:25:50 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xf0ffff, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:25:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x84000, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x6, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) r4 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x600080) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r5, &(0x7f0000000280)=0x4) [ 1128.266837][T11509] 9pnet_virtio: no channels available for device syz0 19:25:50 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:25:50 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:25:50 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x1000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:25:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x1, 0x1, 0x100000000, 0x1, 0x8, 0x1, 0x80, 0x5, 0x6, 0x1, 0x2, 0x100000001}, {0x0, 0xf4d, 0xff, 0xfffffffffffffff7, 0x9, 0xafb, 0xecc, 0x8, 0x2, 0x5, 0xcc00, 0x228, 0x1}, {0x16a, 0x9, 0x101, 0xe0, 0x101, 0x8001, 0x6, 0x10001, 0x8a, 0x8, 0x2d, 0x84e}], 0x7a}) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) prctl$PR_GET_FP_MODE(0x2e) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x200000, 0x0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000180)={0x2, 0xfffffffffffff801, 0xa04, 0x2, 0x2}) 19:25:50 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000000000100"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1128.920443][T11623] 9pnet_virtio: no channels available for device syz0 19:25:50 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:25:50 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x2000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:25:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001100)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) preadv(r2, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x34) [ 1129.230746][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1129.237106][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1129.243607][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1129.250105][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1129.309899][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1129.315734][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1129.399924][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1130.349936][T32487] Bluetooth: hci0: command 0x1003 tx timeout [ 1130.356457][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1131.069967][T32487] Bluetooth: hci1: command 0x1003 tx timeout [ 1131.076256][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1132.429884][T32487] Bluetooth: hci0: command 0x1001 tx timeout [ 1132.436036][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1133.150005][T32487] Bluetooth: hci1: command 0x1001 tx timeout [ 1133.156199][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1133.389923][ C0] net_ratelimit: 17 callbacks suppressed [ 1133.395623][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1133.401456][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1133.407291][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1133.413069][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1133.469860][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1133.475634][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1133.549853][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1133.555651][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1134.269879][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1134.269885][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1134.509876][T32487] Bluetooth: hci0: command 0x1009 tx timeout [ 1135.230001][T32487] Bluetooth: hci1: command 0x1009 tx timeout 19:26:00 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000000000200"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:26:00 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x3000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:26:00 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:26:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x4, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 1138.429877][ C1] net_ratelimit: 22 callbacks suppressed [ 1138.429918][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1138.435573][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1138.441407][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1138.447073][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1138.547293][T11851] 9pnet_virtio: no channels available for device syz0 19:26:01 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:26:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:26:01 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x5000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:26:01 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x2) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:26:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:26:01 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000000000300"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1139.168850][T11967] 9pnet_virtio: no channels available for device syz0 19:26:01 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x2) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) [ 1139.218086][ T8102] Bluetooth: hci0: Frame reassembly failed (-84) 19:26:01 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x6000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:26:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff, r2, 0x100000000006, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:26:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:26:01 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x2) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:26:01 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000000000400"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1139.629890][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1139.635774][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1139.641661][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1139.647428][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1139.676259][ T8102] Bluetooth: hci1: Frame reassembly failed (-84) [ 1139.709940][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1139.715785][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1139.736551][T12321] 9pnet_virtio: no channels available for device syz0 [ 1141.229850][ T2597] Bluetooth: hci0: command 0x1003 tx timeout [ 1141.235992][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1141.709884][ T22] Bluetooth: hci1: command 0x1003 tx timeout [ 1141.716176][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1143.309860][ T22] Bluetooth: hci0: command 0x1001 tx timeout [ 1143.316036][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1143.789914][ C0] net_ratelimit: 18 callbacks suppressed [ 1143.789921][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1143.801376][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1143.807154][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1143.812952][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1143.818820][ T2597] Bluetooth: hci1: command 0x1001 tx timeout [ 1143.824928][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1143.872278][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1143.878034][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1143.949846][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1143.955617][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1144.669876][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1144.669882][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1145.389920][ T2597] Bluetooth: hci0: command 0x1009 tx timeout [ 1145.870123][ T2597] Bluetooth: hci1: command 0x1009 tx timeout [ 1148.829875][ C0] net_ratelimit: 22 callbacks suppressed [ 1148.829882][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1148.830279][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1148.835603][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1148.841321][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:26:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:26:11 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x7000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:26:11 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x2) readv(r0, 0x0, 0x0) 19:26:11 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x6000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = eventfd2(0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000100)=0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x320, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) flistxattr(r2, &(0x7f0000000180)=""/152, 0x98) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0), 0x2) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:26:11 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000000000500"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:26:11 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:26:11 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x2) readv(r0, 0x0, 0x0) [ 1149.413913][T12401] 9pnet_virtio: no channels available for device syz0 [ 1149.455765][ T8102] Bluetooth: hci0: Frame reassembly failed (-84) 19:26:11 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x80000, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f00000001c0)={0xa9020000, 0x80}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r3, 0xa}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) r4 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xb2e, 0x0) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000100)=""/71) 19:26:11 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000000000600"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1149.662275][T12623] 9pnet_virtio: no channels available for device syz0 19:26:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:26:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:26:11 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x2) readv(r0, 0x0, 0x0) [ 1150.029879][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1150.035729][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1150.041629][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1150.047435][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1150.109897][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1150.115796][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1151.479975][T32487] Bluetooth: hci0: command 0x1003 tx timeout [ 1151.486206][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1152.109934][T32487] Bluetooth: hci1: command 0x1003 tx timeout [ 1152.116141][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1153.549904][T32487] Bluetooth: hci0: command 0x1001 tx timeout [ 1153.556041][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1154.189881][T32487] Bluetooth: hci1: command 0x1001 tx timeout [ 1154.189903][ C0] net_ratelimit: 18 callbacks suppressed [ 1154.189910][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1154.200039][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1154.201636][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1154.219099][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1154.224990][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1154.269891][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1154.275719][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1154.349884][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1154.355700][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1155.069901][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1155.069907][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1155.629979][T18376] Bluetooth: hci0: command 0x1009 tx timeout [ 1156.273631][T32487] Bluetooth: hci1: command 0x1009 tx timeout [ 1159.229878][ C1] net_ratelimit: 22 callbacks suppressed [ 1159.229941][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1159.235575][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1159.247018][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:26:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:26:21 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8060000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:26:21 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:26:21 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x2) readv(r0, &(0x7f0000000240), 0x0) 19:26:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x10000, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000240)=0x5, 0x4) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) r4 = semget(0x2, 0x5, 0xb0) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f00000000c0)=""/194) r5 = dup3(r0, r2, 0x80000) ioctl$TCGETA(r5, 0x5405, &(0x7f00000001c0)) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:26:21 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x2) readv(r0, &(0x7f0000000240), 0x0) [ 1159.655985][T12841] 9pnet_virtio: no channels available for device syz0 19:26:21 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xb000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1159.702860][ T8102] Bluetooth: hci0: Frame reassembly failed (-84) 19:26:21 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x2) readv(r0, &(0x7f0000000240), 0x0) 19:26:21 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1159.957557][T13068] 9pnet_virtio: no channels available for device syz0 19:26:22 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xd000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:26:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:26:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0xf000, 0x0, 0x0, r3, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 1160.429920][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1160.435800][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1160.441681][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1160.447438][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1160.520110][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1160.525942][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1160.589871][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1161.709850][ T2597] Bluetooth: hci0: command 0x1003 tx timeout [ 1161.715971][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1162.349846][ T2597] Bluetooth: hci1: command 0x1003 tx timeout [ 1162.356002][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1163.789897][ T2816] Bluetooth: hci0: command 0x1001 tx timeout [ 1163.796028][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1164.429878][ T2816] Bluetooth: hci1: command 0x1001 tx timeout [ 1164.436014][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1164.589937][ C0] net_ratelimit: 17 callbacks suppressed [ 1164.595619][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1164.601445][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1164.607288][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1164.613070][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1164.669887][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1164.675697][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1164.749863][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1164.755658][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1165.469873][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1165.469879][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1165.869846][ T2597] Bluetooth: hci0: command 0x1009 tx timeout [ 1166.509877][ T2597] Bluetooth: hci1: command 0x1009 tx timeout [ 1169.629882][ C1] net_ratelimit: 22 callbacks suppressed [ 1169.629934][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1169.635611][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1169.647058][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:26:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:26:31 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x2) readv(r0, &(0x7f0000000240)=[{0x0}], 0x1) 19:26:31 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:26:31 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x10000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:26:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) dup3(r0, r0, 0x80000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:26:31 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x2) readv(r0, &(0x7f0000000240)=[{0x0}], 0x1) [ 1169.892793][T13189] 9pnet_virtio: no channels available for device syz0 19:26:31 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x11000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1169.953273][ T7196] Bluetooth: hci0: sending frame failed (-49) 19:26:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:26:31 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x2) readv(r0, &(0x7f0000000240)=[{0x0}], 0x1) 19:26:32 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x14000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:26:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x1b, &(0x7f0000000040)=r1, 0x52d) close(r1) 19:26:32 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x20000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1170.829868][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1170.835663][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1170.841532][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1170.847299][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1170.909859][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1170.915649][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1170.989854][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1172.029838][T32487] Bluetooth: hci0: command 0x1003 tx timeout [ 1172.035984][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1174.109836][T32487] Bluetooth: hci0: command 0x1001 tx timeout [ 1174.115979][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1174.989883][ C0] net_ratelimit: 17 callbacks suppressed [ 1174.989889][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1175.001345][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1175.007133][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1175.012938][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1175.069872][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1175.075692][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1175.149894][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1175.155713][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1175.869872][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1175.869878][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1176.189957][ T2597] Bluetooth: hci0: command 0x1009 tx timeout 19:26:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:26:41 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:26:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000100)={0x5, [0x1000, 0xfb9c, 0x7, 0x3, 0x10001]}, &(0x7f0000000140)=0xe) 19:26:41 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x28000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:26:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:26:41 executing program 0: syz_extract_tcp_res(0x0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$getregset(0x4204, 0x0, 0x206, &(0x7f0000000580)={&(0x7f0000001940)=""/4096, 0x1000}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netstat\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000092, 0x0) [ 1180.029892][ C1] net_ratelimit: 22 callbacks suppressed [ 1180.029949][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1180.035598][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1180.047072][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1180.172138][T13530] 9pnet_virtio: no channels available for device syz0 19:26:42 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x40000000001, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x20000000000000}, [@alu={0x8000000201a7f19, 0x3, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x1d', 0x80, 0x4e1, &(0x7f00001a7f05)=""/251}, 0x48) [ 1180.220606][ T8102] Bluetooth: hci1: Frame reassembly failed (-84) 19:26:42 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x40000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:26:42 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x43050000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:26:42 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000000000e00"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:26:42 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$inet_udplite(0x2, 0x2, 0x88) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) fallocate(0xffffffffffffffff, 0x40, 0x4, 0xfff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x2}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x0, 0x2, 0xc701, 0x6, r3}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x20403, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1000000000040000, 0x4) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000000c0)=""/18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0xd) quotactl(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, &(0x7f0000000400)) sendmsg$nl_generic(r5, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x24000811) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r6, 0x7001) ioctl$RTC_AIE_OFF(r6, 0x7002) 19:26:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) getpid() r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x100, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x300, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x3ff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x40800) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$CAPI_GET_ERRCODE(r3, 0x80024321, &(0x7f0000000380)) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000200)="73389cc2d89a2bcc", 0x8) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000280)={0xc, @output={0x0, 0x1, {0x1f, 0x5}, 0x3f, 0x94b}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x101, 0x30}, &(0x7f0000000400)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000440)={r5, @in6={{0xa, 0x4e21, 0x4, @empty, 0x6}}, 0x400, 0xee5}, &(0x7f0000000500)=0x90) [ 1180.631013][T13655] 9pnet_virtio: no channels available for device syz0 [ 1181.229887][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1181.235698][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1181.241549][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1181.247302][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1181.309905][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1181.315722][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1181.389957][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1182.189888][ T2816] Bluetooth: hci0: command 0x1003 tx timeout [ 1182.196042][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1182.269858][ T2816] Bluetooth: hci1: command 0x1003 tx timeout [ 1182.276046][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1184.269908][ T2816] Bluetooth: hci0: command 0x1001 tx timeout [ 1184.276066][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1184.349924][ T2816] Bluetooth: hci1: command 0x1001 tx timeout [ 1184.356330][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1185.389946][ C0] net_ratelimit: 17 callbacks suppressed [ 1185.389953][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1185.401376][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1185.407144][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1185.412919][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1185.469852][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1185.475639][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1185.549868][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1185.555706][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1186.269876][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1186.269882][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1186.349898][ T2816] Bluetooth: hci0: command 0x1009 tx timeout [ 1186.430589][ T2816] Bluetooth: hci1: command 0x1009 tx timeout 19:26:52 executing program 0: socketpair$unix(0x1, 0x400000005, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="230000002000ffae00060c00000f000081000000810000018701546fabca1b4e7d06a4", 0x23}], 0x1}, 0x0) 19:26:52 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x60000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:26:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x801, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000180)={0x6, 0x0, 0x54, 0x20}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x3000, &(0x7f00000000c0), 0x0, r2}) 19:26:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:26:52 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000000001000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:26:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 1190.339509][T13870] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. 19:26:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-cast6-avx)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="d9a34fff2d847238de8a96cedb1af0ab", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="08013fd184923a00ff01006400006908"], 0x10) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/176, 0xb0}], 0x1}}], 0x1, 0x0, 0x0) [ 1190.422188][T13875] 9pnet_virtio: no channels available for device syz0 [ 1190.429885][ C0] net_ratelimit: 22 callbacks suppressed [ 1190.429894][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1190.429989][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1190.449097][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1190.454919][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:26:52 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x800e0000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:26:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000002c0)={0x1, 0x0, {0x400, 0x6, 0x301b, 0x5, 0xc, 0x2, 0x2, 0x6}}) syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x3, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000100)={0x8, 0x8, 0x8, 0x3, [], [], [], 0xffff, 0x3f, 0x9, 0x1393901e, "ef751490648651402f80776f8d53d363"}) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000340)=0x7fffffff, 0x4) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x1, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000240)=0x1e) 19:26:52 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:26:52 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80350000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:26:52 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x81000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1190.885778][T14061] 9pnet_virtio: no channels available for device syz0 19:26:52 executing program 0: r0 = inotify_init() fchmod(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2000000002, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) write$P9_RFSYNC(r2, &(0x7f0000000100)={0x7, 0x33, 0x1}, 0x7) dup2(r1, r0) getgid() write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x2a}, 0xe7) write$P9_RRENAMEAT(r0, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) 19:26:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$addseals(r1, 0x409, 0x8) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r4, @ANYBLOB="020029bd7000fbdbdf2504000000600004003400070008000400080000000800020002000000080002007f000000080000000100000008000400040000000800030086ea4c0b14000700080001000400000008000200040000001400010062726f6164636173742d7c696e6b00001c0006000800018000000000000001000000000200040000000800020006000000000000000000000000000000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) r5 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) recvmsg(r5, &(0x7f0000000640)={&(0x7f0000000100)=@ax25={{0x3, @bcast}, [@netrom, @default, @rose, @bcast, @null, @null, @netrom, @rose]}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/255, 0xff}, {&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f0000000380)=""/36, 0x24}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/50, 0x32}, {&(0x7f0000000500)=""/60, 0x3c}, {&(0x7f0000000540)=""/69, 0x45}], 0x7}, 0x102) 19:26:53 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x86ddffff, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1191.629856][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1191.635709][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1191.641559][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1191.647339][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1191.709850][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1191.715729][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1192.519999][T32487] Bluetooth: hci0: command 0x1003 tx timeout [ 1192.526181][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1192.589901][T18376] Bluetooth: hci1: command 0x1003 tx timeout [ 1192.596129][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1194.590086][T18376] Bluetooth: hci0: command 0x1001 tx timeout [ 1194.596179][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1194.669882][T18376] Bluetooth: hci1: command 0x1001 tx timeout [ 1194.675975][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1195.789906][ C0] net_ratelimit: 18 callbacks suppressed [ 1195.795609][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1195.801371][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1195.807226][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1195.812984][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1195.869870][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1195.875684][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1195.949861][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1195.955689][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1196.669885][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1196.669986][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1196.681841][T18376] Bluetooth: hci0: command 0x1009 tx timeout [ 1196.749869][T18376] Bluetooth: hci1: command 0x1009 tx timeout 19:27:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:27:02 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000240)='./file0\x00') [ 1200.624499][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 1200.829866][ C1] net_ratelimit: 22 callbacks suppressed [ 1200.829874][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1200.829925][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1200.835624][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:27:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:27:03 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000000102000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:27:03 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x88470000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:27:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000001440)='/dev/vcs#\x00', 0x3ff, 0x0) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000001480)=0x100000000, &(0x7f00000014c0)=0x4) r3 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x78cc1fab, 0x2) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000200)=0xf28, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) r4 = eventfd2(0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000280)=""/4096) write$FUSE_IOCTL(r3, &(0x7f0000000240)={0x20, 0xfffffffffffffffe, 0x4, {0x10001, 0x4, 0x1000000000, 0x2}}, 0x20) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r4, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) timer_create(0x3, &(0x7f0000001380)={0x0, 0x2c, 0x0, @thr={&(0x7f0000001280)="dfa4030bacec019bd49e08616610b5196f78b5f68f46a7c63a5b0df954f6a55ea24e65428f5aa9b19dae42658ca1b56ee160788c3cbdf31f35a2401ce756ae39e9595b3d7a6790c1ace9640075f6f26f136b9089790c15407c416bd196d33d7bca8be2b388f8b9242db7bcbbe839636bfcff093f864564fbf045a81bd934de3a1a19e9cca7ef9d8f", &(0x7f0000001340)="b6d2319395c47280e28f500d06317fa1a76a67298f4d264621351126cba05b3e2abbc5f33f3c06cd6d6a8b8240b6df0aa5f42065c8da09f6e969"}}, &(0x7f00000013c0)=0x0) timer_gettime(r5, &(0x7f0000001400)) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000180)=0x2, &(0x7f00000001c0)=0x4) 19:27:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0xc0, 0x0}}], 0x57b, 0x0, 0x0) [ 1201.262697][T14247] 9pnet_virtio: no channels available for device syz0 19:27:03 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x88480000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1201.303828][ T8102] Bluetooth: hci1: Frame reassembly failed (-84) 19:27:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)={0x68, r1, 0x815, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x600, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 19:27:03 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x88640000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:27:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) mlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) memfd_create(0x0, 0x0) 19:27:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7, 0x80000) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000100)) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r3, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, 0x0, 0x4, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:27:03 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1201.718448][T14386] 9pnet_virtio: no channels available for device syz0 [ 1202.029914][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1202.035774][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1202.041681][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1202.047430][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1202.109886][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1202.115731][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1202.189896][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1202.669835][T32487] Bluetooth: hci0: command 0x1003 tx timeout [ 1202.676862][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1203.309869][T32487] Bluetooth: hci1: command 0x1003 tx timeout [ 1203.316125][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1204.749865][T11958] Bluetooth: hci0: command 0x1001 tx timeout [ 1204.755977][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1205.389934][T11958] Bluetooth: hci1: command 0x1001 tx timeout [ 1205.396029][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1206.189885][ C0] net_ratelimit: 15 callbacks suppressed [ 1206.195558][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.201297][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1206.207062][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.212788][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1206.269876][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.275656][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1206.350025][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.355804][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1206.829900][T32487] Bluetooth: hci0: command 0x1009 tx timeout [ 1207.069869][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1207.069875][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1207.469834][T32487] Bluetooth: hci1: command 0x1009 tx timeout 19:27:12 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x88a8ffff, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1211.229879][ C1] net_ratelimit: 22 callbacks suppressed [ 1211.229894][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1211.229964][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1211.235598][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1211.252717][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:27:13 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:27:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:27:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x420800, 0x0) r4 = dup2(r0, r2) r5 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000200)=@bcast) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000140)={r4, r5, 0x3, 0x7, &(0x7f0000000100)="1095c4bf3cb97c", 0xe4, 0x9f, 0x4, 0x0, 0x8000, 0x1, 0xb0e, 'syz0\x00'}) 19:27:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:27:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000002c0)={0x1, 0x0, {0x400, 0x6, 0x301b, 0x5, 0xc, 0x2, 0x2, 0x6}}) syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x3, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000100)={0x8, 0x8, 0x8, 0x3, [], [], [], 0xffff, 0x3f, 0x9, 0x1393901e, "ef751490648651402f80776f8d53d363"}) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000340)=0x7fffffff, 0x4) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x1, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000240)=0x1e) 19:27:13 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x88caffff, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1211.489858][T14506] 9pnet_virtio: no channels available for device syz0 19:27:13 executing program 0: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x28000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:27:13 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x89060000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:27:13 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:27:13 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0)='nfs4\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x2, &(0x7f0000000300)=[{&(0x7f0000000140)="e0dcdbc695246a2cf1e5431f1a389459bb5d22a0421d9cd7a05e1fd034bc0f3bd7d433af6588211a5f19208fc19f8193aae8fc4b83ab72f248fdbf5f4383b4b1565f4d50887ea4728e0eef91b00ac5fa1327d0a0f4f104ebce9a27ed9f9867a0e4f1794a39748ad67713c52a4b32b85665fad08007da8c8e691d2e947c8cab47b35bc789754dbb4a9cd44ce7388e4afec985a81a03b684fa0551cc3b8f6427f49e772f3b337474241cc5eb20dbd66675f3dbd6ea0009d421830066db7961f41130985e441a", 0xc5, 0x2}, {&(0x7f0000000240)="9cfaa05f092fc0a0e4b2bc73df8a601a079be68ab36d095fcfa63e6869f8a1f969e2ff4a08dcb6e8ab0ae037c313d5a7b499f8d0cc3b4ada63a2971d2de488d7995768af055d1d47972bf7a8a8bc7126d2a2314e7ee915df5b2b57ff429d5d2810bb027436c81adccb3ebc00547a320a5c688e1f2221e2370256dd06870d703f42d2d4c2b788deeef8f2e6ce01db3536b3e61bebc5b3830fcbafb7f82a0aa0f55a0a24eae19ad084f02e95ef9e511dbb14b576dba8ad6ade7f377168bba01cd4", 0xc0, 0x8}], 0x2000, &(0x7f0000000340)='/dev/kvm\x00') r1 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r1, 0xa}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000380)={0x0, 0x0, 0x0, r1, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:27:13 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xffffa888, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:27:13 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) [ 1211.886019][T14638] 9pnet_virtio: no channels available for device syz0 19:27:13 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xffffca88, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1212.429893][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1212.435681][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1212.441523][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1212.447274][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1212.509852][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1212.515648][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1213.549954][T18376] Bluetooth: hci0: command 0x1003 tx timeout [ 1213.556104][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1213.629861][T18376] Bluetooth: hci1: command 0x1003 tx timeout [ 1213.636013][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1215.629888][T18376] Bluetooth: hci0: command 0x1001 tx timeout [ 1215.635983][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1215.709890][T18376] Bluetooth: hci1: command 0x1001 tx timeout [ 1215.715992][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1216.589885][ C0] net_ratelimit: 18 callbacks suppressed [ 1216.595585][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.601363][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1216.607139][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.612899][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1216.669867][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.675677][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1216.749863][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.755651][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1217.469881][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1217.469887][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1217.709853][T18376] Bluetooth: hci0: command 0x1009 tx timeout [ 1217.789935][T18376] Bluetooth: hci1: command 0x1009 tx timeout [ 1221.629886][ C1] net_ratelimit: 22 callbacks suppressed [ 1221.629895][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1221.629926][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1221.635635][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:27:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:27:23 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:27:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:27:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x1) r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x20, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000140)={0x77e6, 0x9, 0x9229, 'queue0\x00', 0x200}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x3, r2}) 19:27:23 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xffffdd86, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:27:23 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1221.820644][T14765] 9pnet_virtio: no channels available for device syz0 19:27:23 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfffff000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:27:23 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:27:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x7, 0x404000) ioctl$VIDIOC_S_FBUF(r3, 0x4030560b, &(0x7f0000000180)={0x8, 0x11, &(0x7f0000000100)="53c8e67ca0f0509b9c721d8198840fd82c14ad23ce1d4e9cdb97b49e934e7413621fd8b345fb506e473fd748e854c52c678657564adbd5b16a45fcbe1549350d1148f408bee1de5b954820c3a4f9ee8af129b9667aff5f57316c2190abd8f0670b806fa6c18652", {0xe5, 0x8, 0x30383653, 0x2, 0xc62, 0x5, 0x3, 0x7}}) 19:27:24 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:27:24 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xf0ffffffffffff, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:27:24 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) [ 1222.242553][T14988] 9pnet_virtio: no channels available for device syz0 [ 1222.829894][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1222.835736][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1222.841619][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1222.847399][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1222.909849][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1222.915678][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1222.989840][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1223.869828][T11958] Bluetooth: hci0: command 0x1003 tx timeout [ 1223.875998][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1223.949859][T32487] Bluetooth: hci1: command 0x1003 tx timeout [ 1223.956014][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1225.949922][T32487] Bluetooth: hci0: command 0x1001 tx timeout [ 1225.956078][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1226.029928][T11958] Bluetooth: hci1: command 0x1001 tx timeout [ 1226.036033][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1226.989878][ C0] net_ratelimit: 17 callbacks suppressed [ 1226.989883][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1227.001338][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1227.007123][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1227.012945][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1227.069860][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1227.075649][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1227.152037][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1227.157858][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1227.869871][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1227.870259][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1228.029896][T11958] Bluetooth: hci0: command 0x1009 tx timeout [ 1228.109874][T11958] Bluetooth: hci1: command 0x1009 tx timeout 19:27:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:27:33 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x100000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1231.964695][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 1232.029871][ C0] net_ratelimit: 22 callbacks suppressed [ 1232.029880][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1232.029886][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1232.029930][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1232.035595][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:27:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:27:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) fgetxattr(r2, &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000100)=""/247, 0xf7) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:27:34 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:27:34 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:27:34 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x200000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:27:34 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x300000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1232.628338][T15109] 9pnet_virtio: no channels available for device syz0 19:27:34 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x500000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:27:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r3, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x50000, 0x0) 19:27:34 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:27:34 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x600000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1232.966236][T15235] 9pnet_virtio: no channels available for device syz0 [ 1233.239882][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1233.245757][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1233.251661][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1233.257408][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1233.309870][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1233.315841][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1234.029940][T32487] Bluetooth: hci0: command 0x1003 tx timeout [ 1234.036233][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1234.669890][T32487] Bluetooth: hci1: command 0x1003 tx timeout [ 1234.676187][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1236.110000][T32487] Bluetooth: hci0: command 0x1001 tx timeout [ 1236.116297][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1236.749943][T32487] Bluetooth: hci1: command 0x1001 tx timeout [ 1236.756086][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1237.389924][ C0] net_ratelimit: 18 callbacks suppressed [ 1237.395605][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.401351][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1237.407118][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.412857][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1237.469853][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.475633][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1237.549849][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.555638][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1238.189951][T32487] Bluetooth: hci0: command 0x1009 tx timeout [ 1238.269921][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1238.271750][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1238.829891][T32487] Bluetooth: hci1: command 0x1009 tx timeout 19:27:44 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x700000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:27:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="b373eb90b4de7bc5d9f11474ca119d6f3ac93d47e9b56a42a6dcfb4467f8b0c6d6ba42322cf324a96e9ad0e34dd9814bdbf7393912f4a3c964155abf1624eb3133f6bd509b3a07baaf7745601bf14f851cc5c0cfcf4546125432ece90bb4d07b999707c83efa99b8bde81496be6d846c40d0e87cd160604a136be93967364ec0203ce5c0d134378023c8ea0ac31fbabad01fadaa8b11974c86b145874ad1097e914695f0689d0f84687e687685d80d6a045c55527f45054aec2df2a774f26b4e164b9753ef4cc6906a45b873f2f6836aef977981516acb46850e63554d4984277ddcf76a194ffe474d925e784dd5aa791c9ed808", 0xf4}], 0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) r3 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@tipc, &(0x7f0000000140)=0x80) bind$isdn_base(r3, &(0x7f0000000180)={0x22, 0x7, 0x2, 0x7fffffff, 0x25}, 0x6) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x400042, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000000340)={0x0, 0x0, 0x2080}) [ 1242.429896][ C1] net_ratelimit: 22 callbacks suppressed [ 1242.429924][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1242.435603][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1242.441352][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1242.447012][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:27:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:27:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:27:44 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:27:44 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:27:44 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x800000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:27:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpid() r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:27:44 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x806000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1242.865944][T15449] 9pnet_virtio: no channels available for device syz0 19:27:44 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xb00000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:27:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xffffffff, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x3, 0x2400) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000100)=""/4096) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x3) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:27:44 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c000000000000000000ffffff8c00"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:27:45 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xd00000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1243.154663][T15664] 9pnet_virtio: no channels available for device syz0 19:27:45 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000100)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000300)={0xa0, 0xffffffffffffffda, 0x6, {{0x4, 0x3, 0xffffffffffffff00, 0x100000000, 0x7, 0x9, {0x3, 0x8, 0x5, 0x6, 0x7e0f, 0x7, 0x20, 0x9, 0x1, 0x60, 0x3, r1, r2, 0x5, 0x7c}}, {0x0, 0x4}}}, 0xa0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="8a00000006000000b93ecbb9b232141f061837a99c54ce1bc6290e632ea8f8995c05115dd20e175a6ff68aa3676b4e69457f34d7a4420a0b8232afc706c724d6c38bf004bd2b1b2c590af9e060919df89879f03d2cccd9e7fdb0a67b34e2e23ae5bffb46e0b750d1cba654a11ba569dd0b7c3b8a27b9485d8f02501ea62156456da1e8641066f85ac65112b1134ae49a45efa4100ca4e5c9"], &(0x7f00000004c0), 0x1000) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r5, 0xa}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r5, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 1243.629886][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1243.635728][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1243.641580][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1243.647336][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1243.709935][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1243.715763][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1244.919929][T32487] Bluetooth: hci0: command 0x1003 tx timeout [ 1244.926191][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1245.000085][T18376] Bluetooth: hci1: command 0x1003 tx timeout [ 1245.006239][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1246.989963][T18376] Bluetooth: hci0: command 0x1001 tx timeout [ 1246.996065][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1247.069958][T18376] Bluetooth: hci1: command 0x1001 tx timeout [ 1247.076065][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1247.789896][ C0] net_ratelimit: 18 callbacks suppressed [ 1247.789902][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1247.801430][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1247.807254][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1247.813180][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1247.869921][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1247.875745][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1247.949844][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1247.955628][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1248.669892][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1248.669898][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1249.069855][T18376] Bluetooth: hci0: command 0x1009 tx timeout [ 1249.149917][T18376] Bluetooth: hci1: command 0x1009 tx timeout [ 1252.829917][ C1] net_ratelimit: 22 callbacks suppressed [ 1252.829968][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1252.835632][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1252.847121][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:27:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:27:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:27:54 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x1000000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:27:54 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c000000000000000000fffffff600"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:27:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x4, 0x0, 0x4000000000, r2, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:27:54 executing program 0: ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) [ 1253.121287][T15879] 9pnet_virtio: no channels available for device syz0 19:27:55 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x1100000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:27:55 executing program 0: ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) [ 1253.190607][ T8102] Bluetooth: hci0: Frame reassembly failed (-84) 19:27:55 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x1400000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:27:55 executing program 0: ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:27:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000200)={0x1, 0x5}) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000240)=""/77) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x6, r3, 0xa}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000080)={0x0, @aes128, 0x2, "6c79e9677f97fff7"}) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) getsockname$tipc(r4, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:27:55 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1253.574023][T16005] QAT: Invalid ioctl [ 1253.584645][T16005] QAT: Invalid ioctl [ 1254.039875][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1254.045692][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1254.051562][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1254.057333][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1254.109880][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1254.115683][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1254.189846][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1255.229867][T11958] Bluetooth: hci0: command 0x1003 tx timeout [ 1255.229912][ T2816] Bluetooth: hci1: command 0x1003 tx timeout [ 1255.242131][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1255.248858][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1257.309857][ T2816] Bluetooth: hci1: command 0x1001 tx timeout [ 1257.315962][ T2816] Bluetooth: hci0: command 0x1001 tx timeout [ 1257.316062][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1257.328309][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1258.189899][ C0] net_ratelimit: 16 callbacks suppressed [ 1258.195572][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1258.201384][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1258.207249][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1258.213028][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1258.269911][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1258.277816][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1258.349936][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1258.355756][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1259.069895][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1259.069901][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1259.389935][T11958] Bluetooth: hci0: command 0x1009 tx timeout [ 1259.396021][T11958] Bluetooth: hci1: command 0x1009 tx timeout [ 1263.229918][ C1] net_ratelimit: 22 callbacks suppressed [ 1263.229968][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1263.235636][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1263.247109][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:28:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:28:05 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c000000000000000000fffffdf900"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:28:05 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:28:05 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x2800000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:28:05 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x204040) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000100)) 19:28:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:28:05 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) [ 1263.384355][T16117] 9pnet_virtio: no channels available for device syz0 19:28:05 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4000000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:28:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) r3 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x1, 0x20000) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000100)={'vcan0\x00', 0x6}) 19:28:05 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:28:05 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000200000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:28:05 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4305000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1263.769673][T16446] 9pnet_virtio: no channels available for device syz0 [ 1264.429914][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1264.435759][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1264.441654][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1264.447426][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1264.509882][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1264.515670][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1264.591989][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1265.389947][T18376] Bluetooth: hci0: command 0x1003 tx timeout [ 1265.396112][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1265.549850][T32487] Bluetooth: hci1: command 0x1003 tx timeout [ 1265.556015][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1267.470010][T32487] Bluetooth: hci0: command 0x1001 tx timeout [ 1267.476199][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1267.630273][T32487] Bluetooth: hci1: command 0x1001 tx timeout [ 1267.636447][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1268.589897][ C0] net_ratelimit: 17 callbacks suppressed [ 1268.589903][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1268.601346][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1268.607118][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1268.612875][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1268.669879][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1268.675674][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1268.755255][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1268.761113][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1269.470044][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1269.470236][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1269.550645][T32487] Bluetooth: hci0: command 0x1009 tx timeout [ 1269.709893][T32487] Bluetooth: hci1: command 0x1009 tx timeout [ 1273.629865][ C1] net_ratelimit: 22 callbacks suppressed [ 1273.629918][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1273.635570][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1273.647015][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:28:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:28:16 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000000)) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:28:16 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x6000000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:28:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x1, 0x0, 0xfff, 0x3, 0x2}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r3, 0xa}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:28:16 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000300000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:28:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 1274.195495][T16459] 9pnet_virtio: no channels available for device syz0 19:28:16 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x800e000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1274.288093][ T7789] Bluetooth: hci0: Frame reassembly failed (-84) 19:28:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0xf002, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:28:16 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8035000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:28:16 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000400000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:28:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 1274.699265][T16786] 9pnet_virtio: no channels available for device syz0 19:28:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 1274.741530][ T8102] Bluetooth: hci1: Frame reassembly failed (-84) [ 1274.832030][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.838686][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1274.845334][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.851214][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1274.909915][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.915781][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1274.989908][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1276.350027][T32487] Bluetooth: hci0: command 0x1003 tx timeout [ 1276.356399][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1276.749915][T32487] Bluetooth: hci1: command 0x1003 tx timeout [ 1276.756211][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1278.429868][T32487] Bluetooth: hci0: command 0x1001 tx timeout [ 1278.436023][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1278.829884][T32487] Bluetooth: hci1: command 0x1001 tx timeout [ 1278.836039][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1278.989860][ C0] net_ratelimit: 17 callbacks suppressed [ 1278.995543][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1279.001279][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1279.007044][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1279.012772][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1279.069910][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1279.075723][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1279.149880][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1279.155658][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1279.869877][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1279.869906][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1280.509850][T32487] Bluetooth: hci0: command 0x1009 tx timeout [ 1280.909872][T32487] Bluetooth: hci1: command 0x1009 tx timeout [ 1284.029911][ C1] net_ratelimit: 22 callbacks suppressed [ 1284.029919][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1284.029962][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1284.035653][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:28:26 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000500000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:28:26 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8100000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:28:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:28:26 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000000)) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:28:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x7, 0x800) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="05000480ad80000000000b7fcfbe284ef5154973ba95043768b7cf8c98f40c959cc4fb05fdd0ff10d41287c40bb7510207fa9ed4dc92d0dfcd6312c55e871017f0083482ed9ce68c7de85b7eaaf470801cda05c7110df4f2eb50d4958554c77c0d381ed9cecc8599bf90a42167aee871cbfa3d921d092eebd5514c8ce36bf1531f0d2aeb752a1e3cf2d285ca4a0e6c0578cbbf257f469a73d426d8cc2d0776c6ccd8647cbe43fb3a4e3a176618b4046c"], &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000100)={r3, @in={{0x2, 0x4e23, @local}}, 0x20000000000005, 0x4}, &(0x7f00000001c0)=0x90) syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0xffffffffffff67e0, 0x101000) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r4, 0x4, 0x10}, 0xc) r5 = eventfd2(0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r5, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff, r5, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 1284.456777][T16916] 9pnet_virtio: no channels available for device syz0 19:28:26 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x86ddffff00000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1284.503584][ T2532] Bluetooth: hci0: Frame reassembly failed (-84) 19:28:26 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8847000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:28:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000100)={0x4a, 0x3, 0x0, "03789084669d9df33d94f050ae8c13e3592d49d015c056b57e35d567fd389fdc2627a79c81c13559a72ec2300af36d3d39b32a74bd951a09c86150c3b005dd4f1a9c2fa1b56ae2b9df93"}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:28:26 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8848000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:28:26 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000600000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:28:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:28:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x5) 19:28:26 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8864000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1284.987541][T17233] 9pnet_virtio: no channels available for device syz0 19:28:27 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x88a8ffff00000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1285.229897][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1285.235709][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1285.241585][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1285.247365][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1285.309923][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1285.315778][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1285.389940][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1286.509858][T11958] Bluetooth: hci0: command 0x1003 tx timeout [ 1286.517291][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1287.310096][T11958] Bluetooth: hci1: command 0x1003 tx timeout [ 1287.316374][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1288.589885][T11958] Bluetooth: hci0: command 0x1001 tx timeout [ 1288.596023][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1289.389975][ C0] net_ratelimit: 17 callbacks suppressed [ 1289.395681][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1289.401473][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1289.407318][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1289.413094][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1289.419068][T11958] Bluetooth: hci1: command 0x1001 tx timeout [ 1289.425638][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1289.469857][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1289.475640][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1289.549835][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1289.555632][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1290.269867][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1290.269873][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1290.669857][T11958] Bluetooth: hci0: command 0x1009 tx timeout [ 1291.470279][T11958] Bluetooth: hci1: command 0x1009 tx timeout [ 1294.429866][ C1] net_ratelimit: 22 callbacks suppressed [ 1294.429892][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1294.435572][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1294.441321][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1294.446990][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:28:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:28:36 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:28:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x2, r2, 0xa}) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x400) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x1, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:28:36 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000000)) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:28:36 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x88caffff00000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:28:36 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8906000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1294.693477][T17355] 9pnet_virtio: no channels available for device syz0 19:28:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) r3 = dup(r1) write$cgroup_int(r3, &(0x7f00000000c0)=0xffffffffffffafed, 0x12) 19:28:36 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfffffffffffff000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1295.629883][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.635735][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1295.641643][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.647427][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1295.709865][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.715700][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:28:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:28:37 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:28:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) socketpair(0x2, 0x3, 0x8df8, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffff00100400ecfffe07ffff40fc2a7398b5544028843b5de958cc09d9972b18c208ef3e498c85a4a45777404224e0afaf3bd986aadc08861ff39bbd41ebddb9619896942ad73e44b434aee7b3eec691c022d2b29d704948fd9d58b9ae8144f78276bbaafb4511af25ec9be8721a441838a43ea2349bef4b0f835fbef80c7a8299e1efdd03b2c299271d039ce967d23182ed90b715f2ac3da3d4f235685b4a3ad0a482d2ef"], &(0x7f0000000140)=0x14) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:28:37 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:28:37 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1295.971887][T17580] 9pnet_virtio: no channels available for device syz0 [ 1295.994409][ T2532] Bluetooth: hci1: Frame reassembly failed (-84) [ 1296.829854][T32487] Bluetooth: hci0: command 0x1003 tx timeout [ 1296.836107][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1298.039901][T32487] Bluetooth: hci1: command 0x1003 tx timeout [ 1298.046086][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1298.911314][T11958] Bluetooth: hci0: command 0x1001 tx timeout [ 1298.917458][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1299.789946][ C0] net_ratelimit: 18 callbacks suppressed [ 1299.795698][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1299.801658][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1299.807827][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1299.813946][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1299.869874][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1299.875794][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1299.949894][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1299.955800][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1300.109969][T11958] Bluetooth: hci1: command 0x1001 tx timeout [ 1300.116498][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1300.669907][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1300.669914][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1300.989909][T32487] Bluetooth: hci0: command 0x1009 tx timeout [ 1302.189966][T32487] Bluetooth: hci1: command 0x1009 tx timeout 19:28:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:28:46 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x3, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:28:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) r3 = dup3(r0, r2, 0x80000) sendto$inet(r3, &(0x7f00000000c0)="d1f7a506bf290bd02e3e035c9ad1c74e4bae7d3672a90dc3fad21ce7bea34d2b233c3e86a8ab94903c430f25f8a2890a3121fbcd4969a3f58d184a6963835006a24e8d8ced01a5a3d2315d7afd72cf16ac2c20f56b25a03f37bd221326206b68c7fb822b628869cb3d1720a0accf14d1ad54990b8533321d15d23505e23bfb9648f4da9138920852ee7f1e649b91588ba76b9f1ef87ce055e6d1f6cbfa3e7dc1997123813718b4ebb73f5375729e056c1e381808879b65a66f4bcaa20006587d9b5d5d0a7bc83dfd23546c6a105f43f3dd8eddefdc07", 0xd6, 0x40000, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10) symlinkat(&(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000240)='./file0\x00') ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) setsockopt$inet_buf(r3, 0x0, 0x2c, &(0x7f0000000280)="5d53189b491bb57e94b2b70904491d6a3d1edb02588c63ae5010a7219237172b47f78392df85d7db1e5a19198c8d3f51f8acec5ae6997d511011c42b40a7fd066d05c3fb505b3b6dcfafec1869952f104773da358d9d24428e92be91523c1fc32e1f3d1250daeb2725", 0x69) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:28:46 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:28:46 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) [ 1304.829879][ C1] net_ratelimit: 22 callbacks suppressed [ 1304.829892][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1304.829961][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1304.835592][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1304.852756][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1304.963280][T17695] 9pnet_virtio: no channels available for device syz0 19:28:46 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1305.008839][ T7196] Bluetooth: hci0: sending frame failed (-49) 19:28:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000300)=0x80, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000480)={0xffffffffffffffff}) bind$xdp(r1, &(0x7f00000004c0)={0x2c, 0x5, r2, 0xb, r3}, 0x10) r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x100, 0x20) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000100)={0x401, 0xaf, "4fce00eef374d5c89429e0c5d904be43a1ea1f4f2171b5957ff285f8375ba2edb54564528febe7b8738b6a7633e9b21838e49fa1a646dd43a1a7911f29bf3be075b1de92276fec90d9413bc7c4e62c8729f259fa0f7d395248a8f201c710097494ea70bc4940337b97e5f322109f2469d79de50f34c0e9ab855d6325b676c4ca34ffdbdc154688f26609e6fac11e8b418e34a413bb2026a14f04c96a7803624398f1eb079b5d63c9f6360eb0dde2cf"}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r6, 0xa}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r6, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000001c0)=0x1212000, 0x4) [ 1306.029905][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.035694][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1306.041492][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.047222][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:28:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:28:48 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:28:48 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:28:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f00000000c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:28:48 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) [ 1306.109854][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.115624][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1306.208018][T17918] 9pnet_virtio: no channels available for device syz0 [ 1306.279243][ T2532] Bluetooth: hci1: Frame reassembly failed (-84) [ 1307.070029][T11958] Bluetooth: hci0: command 0x1003 tx timeout [ 1307.076494][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1308.350037][T11958] Bluetooth: hci1: command 0x1003 tx timeout [ 1308.356371][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1309.149857][T11958] Bluetooth: hci0: command 0x1001 tx timeout [ 1309.156762][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1310.189896][ C0] net_ratelimit: 18 callbacks suppressed [ 1310.195584][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1310.201362][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1310.207140][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1310.212875][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1310.269858][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1310.275668][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1310.349868][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1310.355649][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1310.429865][T11958] Bluetooth: hci1: command 0x1001 tx timeout [ 1310.435964][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1311.069877][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1311.069883][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1311.229888][ T2816] Bluetooth: hci0: command 0x1009 tx timeout [ 1312.509868][ T2816] Bluetooth: hci1: command 0x1009 tx timeout 19:28:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x400000, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000100)={0x2, 0xeb37, 0x0, 0x2, 0x6, 0xf1, 0x39a5268c, 0x8, 0x94, 0x101}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:28:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:28:57 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x7, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:28:57 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000e00000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:28:57 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) [ 1315.162665][T18035] 9pnet_virtio: no channels available for device syz0 19:28:57 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:28:57 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1315.214385][ T2532] Bluetooth: hci0: Frame reassembly failed (-84) [ 1315.229856][ C1] net_ratelimit: 22 callbacks suppressed [ 1315.229864][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1315.229929][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1315.235563][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1315.247712][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:28:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:28:58 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 19:28:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r3, 0xa}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:28:58 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000001000000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:28:58 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1316.425969][T18154] dccp_invalid_packet: P.Data Offset(66) too large [ 1316.429908][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1316.438372][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1316.444258][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1316.450098][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1316.451906][T18159] dccp_invalid_packet: P.Data Offset(66) too large 19:28:58 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x29, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1317.229930][T11958] Bluetooth: hci0: command 0x1003 tx timeout [ 1317.236109][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1319.309906][T32487] Bluetooth: hci0: command 0x1001 tx timeout [ 1319.316196][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1320.589871][ C0] net_ratelimit: 20 callbacks suppressed [ 1320.595769][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1320.601589][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1320.607430][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1320.613188][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1320.669883][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1320.675821][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1320.749911][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1320.755954][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1321.389957][T11958] Bluetooth: hci0: command 0x1009 tx timeout [ 1321.469930][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1321.469938][ C0] protocol 88fb is buggy, dev hsr_slave_0 19:29:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:07 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) readv(r0, 0x0, 0x0) 19:29:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x8, 0xa00) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r3, 0x800443d3, &(0x7f0000000100)={{0x7, 0xeb, 0x4, 0x1f, 0x7, 0x1}, 0x5, 0xfffffffffffffffe, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:29:07 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2b, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:07 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:29:07 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) readv(r0, 0x0, 0x0) 19:29:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:07 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1325.403822][T18378] 9pnet_virtio: no channels available for device syz0 19:29:07 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00L\x00\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:29:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffc, r2, 0xe}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:29:07 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1325.567138][T18497] 9pnet_virtio: no channels available for device syz0 [ 1325.629836][ C0] net_ratelimit: 22 callbacks suppressed [ 1325.629842][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1325.629880][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1325.635564][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1325.653155][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1326.829870][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1326.835673][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1326.841530][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1326.847278][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1326.909846][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1326.915680][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1327.469876][T32487] Bluetooth: hci0: command 0x1003 tx timeout [ 1327.476035][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1329.549879][ T2597] Bluetooth: hci0: command 0x1001 tx timeout [ 1329.555959][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1330.989909][ C0] net_ratelimit: 18 callbacks suppressed [ 1330.989915][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1331.001346][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1331.007267][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1331.013114][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1331.069898][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1331.075964][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1331.149858][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1331.155657][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1331.629890][T32487] Bluetooth: hci0: command 0x1009 tx timeout [ 1331.869884][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1331.869913][ C0] protocol 88fb is buggy, dev hsr_slave_0 19:29:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:17 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) readv(r0, 0x0, 0x0) 19:29:17 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x3a, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:17 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00`\x00\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:29:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) [ 1335.649693][T18716] 9pnet_virtio: no channels available for device syz0 19:29:17 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x3c, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:17 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) readv(r0, &(0x7f0000000240), 0x0) 19:29:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x5, 0x4a40) mq_timedreceive(r3, &(0x7f0000000100)=""/13, 0xd, 0x3ea7, 0x0) 19:29:17 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) readv(r0, &(0x7f0000000240), 0x0) 19:29:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:17 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:29:17 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:17 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) readv(r0, &(0x7f0000000240), 0x0) [ 1336.028918][T18909] 9pnet_virtio: no channels available for device syz0 [ 1336.029851][ C1] net_ratelimit: 22 callbacks suppressed [ 1336.029857][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1336.036761][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1336.041844][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1336.048081][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:29:18 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) readv(r0, &(0x7f0000000240)=[{0x0}], 0x1) 19:29:18 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x100000, 0x0, 0x0, r2, 0xa}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x89d2, 0xa, 0x4, 0x6420, {0x0, 0x2710}, {0x5, 0x8, 0x2, 0x9, 0x101, 0x9, "5a6cdbe2"}, 0x4, 0x0, @planes=&(0x7f00000000c0)={0x5, 0x8, @mem_offset=0x400, 0x3f}, 0x4}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) r3 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f00000001c0)={0xf0, 0x0, [], {0x0, @bt={0x5, 0x80000000, 0x0, 0x3, 0x6, 0x4, 0x1f, 0x5, 0x40, 0x4, 0x6, 0xfffffffffffffffe, 0x6, 0x100, 0xc}}}) 19:29:18 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00l\x00\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:29:18 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) readv(r0, &(0x7f0000000240)=[{0x0}], 0x1) 19:29:18 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xffffff89, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:18 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) readv(r0, &(0x7f0000000240)=[{0x0}], 0x1) [ 1336.537254][T19228] 9pnet_virtio: no channels available for device syz0 19:29:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0xffffffffffffffff) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x922, 0x101000) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r3, 0xa}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000140)=""/196) r4 = semget(0x1, 0x1, 0x40) semop(r4, &(0x7f0000000100)=[{0x3, 0x80, 0x800}, {0x3, 0x9, 0x800}, {0x4, 0x2, 0x1800}, {0x3, 0x6, 0x1000}, {0x2, 0xb95, 0x800}, {0x3, 0x7, 0x1800}], 0x6) 19:29:18 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x3, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:18 executing program 0: sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 19:29:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:18 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:29:18 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x13, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x100, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e23, @multicast1}], 0x10) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, 0x0, r3, 0xa}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 1337.051078][T19422] 9pnet_virtio: no channels available for device syz0 19:29:19 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:19 executing program 0: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) 19:29:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 1337.229852][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1337.235843][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1337.241761][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1337.247545][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:29:19 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00z\x00\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:29:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x0, 0x80) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="0f38f1ab4919f8b32e0f013e2664660f7d813a000000f3aa66420f388031f0450fba2e0e0f222048b85b000000000000000f23c00f21f835010004000f23f80fae4f06660f1a23", 0x47}], 0x1, 0x1, &(0x7f00000001c0)=[@flags={0x3, 0x80}], 0x1) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r3, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 1337.309876][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1337.315758][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:29:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:19 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x223, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000000003, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 19:29:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 1337.487281][T19749] 9pnet_virtio: no channels available for device syz0 19:29:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:19 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffff01000000}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:19 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000003000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:29:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:19 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xfffffffffcffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair(0x3, 0x8000f, 0x380000, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000180)={0x6d}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000001c0)={0x7, 0x0, 0xffffffff}) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r3, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x10, r4, 0x0) set_tid_address(&(0x7f0000000100)) [ 1337.852442][T19974] 9pnet_virtio: no channels available for device syz0 19:29:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:20 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xfffffffffffffffc}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:20 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000005000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:29:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:29:20 executing program 0: r0 = socket$inet(0x2, 0x3, 0x8) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x3) 19:29:20 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1=0xe0000002}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1338.633775][T20207] 9pnet_virtio: no channels available for device syz0 19:29:20 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1=0xe0000003}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:29:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:20 executing program 0: pipe(0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) 19:29:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x10000, 0x0) r2 = fcntl$getown(r0, 0x9) write$cgroup_pid(r1, &(0x7f0000000100)=r2, 0x12) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000140)={0x5, 0x6, 0x100000000, 0x500}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = eventfd2(0x0, 0x3) msgget$private(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r4, 0xa}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:29:20 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1=0xe0000006}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:20 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000006000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:29:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:29:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) [ 1339.162201][T20463] 9pnet_virtio: no channels available for device syz0 19:29:21 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1=0xe0000007}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x280000) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)={0x0}) r5 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x98, 0x0, &(0x7f0000000240)=[@increfs_done={0x40106308, r3, 0x2}, @increfs_done={0x40106308, r4, 0x1}, @reply_sg={0x40486312, {{0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0)=[0x20, 0x30]}, 0x81}}, @free_buffer={0x40086303, r5}, @increfs_done={0x40106308, r6, 0x4}, @register_looper], 0xcc, 0x0, &(0x7f0000000300)="3d93aa7259cbee5e4eb297af50a2bf674580877a2282b0465242331af0cd7ed43ff001bae532e99207f25fecefd20304a077edd99bb21dd75a62cae90a576b819dd9bca7b3279a183c62d66f112a99b4a8ee2e9f915261b3624c7111f2c6ef4b53613ee0c3702537fc9c62850d18cd3747b2301f77698b9633ec1fd4736fe70e3d3e4d7284ae37dbb66c2baa8c3de943b732da053ce01651a19144a339efbd1d48befd3b66124379281f79a20a9e4b3a97d1aaa2c1294b49d4d6dbb4811942d9e9333190572b5c5106ccc14f"}) r7 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r7, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r7, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:29:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 1339.290954][T31605] Bluetooth: hci0: sending frame failed (-49) 19:29:21 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1=0xe0000008}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:29:21 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1339.757897][T20766] 9pnet_virtio: no channels available for device syz0 19:29:21 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1=0xe000000f}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) r3 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x100, 0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x328, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x8810) r5 = dup(r0) getsockname$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:29:21 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$void(r1, 0x5451) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x238000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xa35) gettid() socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3e) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0x0) accept$unix(r5, &(0x7f0000000140)=@abs, &(0x7f0000000040)=0x6e) 19:29:21 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:29:22 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1=0xe0000012}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1340.098961][T20774] 9pnet_virtio: no channels available for device syz0 [ 1341.309917][ T2597] Bluetooth: hci0: command 0x1003 tx timeout [ 1341.316028][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1341.389915][ C0] net_ratelimit: 18 callbacks suppressed [ 1341.389925][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1341.401407][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1341.407190][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1341.412991][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1341.469866][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1341.475668][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1341.560300][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1341.566099][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1341.789905][ T2597] Bluetooth: hci1: command 0x1003 tx timeout [ 1341.796042][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1342.269886][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1342.275729][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1343.389973][ T2597] Bluetooth: hci0: command 0x1001 tx timeout [ 1343.396082][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1343.880065][ T2816] Bluetooth: hci1: command 0x1001 tx timeout [ 1343.886239][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1345.469925][ T2816] Bluetooth: hci0: command 0x1009 tx timeout [ 1345.949877][ T2816] Bluetooth: hci1: command 0x1009 tx timeout [ 1346.429901][ C1] net_ratelimit: 22 callbacks suppressed [ 1346.429911][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1346.429929][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1346.435659][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1346.441402][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1347.629919][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1347.635731][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1347.641497][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1347.647227][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1347.709849][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1347.715649][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:29:31 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1=0xe000f000}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:29:31 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:29:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0xffffffffffffffff) r3 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0xffffffffffffff56, 0xe0202) getsockopt$nfc_llcp(r3, 0x118, 0x3, &(0x7f0000000140)=""/24, 0x18) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:29:31 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$void(r1, 0x5451) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x238000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xa35) gettid() socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3e) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0x0) accept$unix(r5, &(0x7f0000000140)=@abs, &(0x7f0000000040)=0x6e) [ 1349.753918][T20902] 9pnet_virtio: no channels available for device syz0 [ 1349.784218][T20769] Bluetooth: hci0: Frame reassembly failed (-84) 19:29:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:29:32 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x2, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:32 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:29:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:29:32 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$void(r1, 0x5451) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x238000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xa35) gettid() socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3e) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0x0) accept$unix(r5, &(0x7f0000000140)=@abs, &(0x7f0000000040)=0x6e) [ 1350.386939][T21118] 9pnet_virtio: no channels available for device syz0 19:29:32 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x3, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1350.434937][ T2532] Bluetooth: hci1: Frame reassembly failed (-84) 19:29:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:29:32 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c000000000000000e000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1350.746669][T21343] 9pnet_virtio: no channels available for device syz0 [ 1351.789899][ C0] net_ratelimit: 17 callbacks suppressed [ 1351.789905][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1351.801402][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1351.807219][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1351.813015][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1351.818863][T18376] Bluetooth: hci0: command 0x1003 tx timeout [ 1351.825000][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1351.869913][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1351.875733][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1351.959852][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1351.965641][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1352.509931][T18376] Bluetooth: hci1: command 0x1003 tx timeout [ 1352.516080][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1352.669859][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1352.669880][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1353.870280][T18376] Bluetooth: hci0: command 0x1001 tx timeout [ 1353.876409][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1354.589882][T18376] Bluetooth: hci1: command 0x1001 tx timeout [ 1354.596006][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1355.950309][T18376] Bluetooth: hci0: command 0x1009 tx timeout [ 1356.669905][T18376] Bluetooth: hci1: command 0x1009 tx timeout [ 1356.829912][ C1] net_ratelimit: 22 callbacks suppressed [ 1356.829921][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1356.829961][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1356.835648][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1358.029875][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1358.035743][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1358.041572][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1358.047360][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1358.109853][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1358.115645][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1358.189846][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:29:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) 19:29:41 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x5, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) getpeername$unix(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x2000, 0x0) getsockopt$packet_int(r3, 0x107, 0x9, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 19:29:41 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000002010000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1359.978458][T21543] 9pnet_virtio: no channels available for device syz0 [ 1360.026424][T18947] Bluetooth: hci0: Frame reassembly failed (-84) 19:29:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:29:42 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$void(r1, 0x5451) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x238000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xa35) gettid() socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3e) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0x0) accept$unix(r5, &(0x7f0000000140)=@abs, &(0x7f0000000040)=0x6e) 19:29:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x1000000000000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:29:42 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:29:42 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x6, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1360.632705][T21659] 9pnet_virtio: no channels available for device syz0 19:29:42 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x7, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:42 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000001020000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:29:42 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000100)={0x7, 0x4b, 0x1}, 0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r3, 0xa}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 1361.022902][T21775] 9pnet_virtio: no channels available for device syz0 [ 1362.029922][T32487] Bluetooth: hci0: command 0x1003 tx timeout [ 1362.036209][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1362.189891][ C0] net_ratelimit: 17 callbacks suppressed [ 1362.189901][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1362.201428][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1362.207213][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1362.213057][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1362.269844][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1362.275630][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1362.349878][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1362.355717][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1362.679894][T32487] Bluetooth: hci1: command 0x1003 tx timeout [ 1362.686154][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1363.069986][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1363.075789][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1364.109877][T32487] Bluetooth: hci0: command 0x1001 tx timeout [ 1364.116026][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1364.749902][T32487] Bluetooth: hci1: command 0x1001 tx timeout [ 1364.756077][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1366.189878][T18376] Bluetooth: hci0: command 0x1009 tx timeout [ 1366.829898][T18376] Bluetooth: hci1: command 0x1009 tx timeout [ 1367.229907][ C0] net_ratelimit: 22 callbacks suppressed [ 1367.230271][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1367.235707][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1367.241515][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1367.247536][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1368.429958][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1368.435815][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1368.441588][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1368.447328][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1368.509843][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1368.515655][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:29:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) 19:29:52 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x8, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xc3, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r3, 0xa}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:29:52 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$void(r1, 0x5451) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x238000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xa35) gettid() socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3e) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0x0) 19:29:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) 19:29:52 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00?\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:29:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x40, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000100)={0x30000000, 0x1, 0x40}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe, r3, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000140)={0x3, r2}) 19:29:52 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0xb, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:52 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$void(r1, 0x5451) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x238000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xa35) gettid() socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3e) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r4, 0xa, 0x12) [ 1370.856516][T22105] 9pnet_virtio: no channels available for device syz0 [ 1370.895989][ T7789] Bluetooth: hci1: Frame reassembly failed (-84) 19:29:52 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0xd, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:52 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x10, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:29:52 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1371.161586][T22321] 9pnet_virtio: no channels available for device syz0 [ 1372.269860][ T2816] Bluetooth: hci0: command 0x1003 tx timeout [ 1372.276109][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1372.589917][ C0] net_ratelimit: 18 callbacks suppressed [ 1372.589926][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1372.601463][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1372.607246][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1372.613068][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1372.669838][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1372.675770][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1372.749830][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1372.755627][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1372.909937][ T2816] Bluetooth: hci1: command 0x1003 tx timeout [ 1372.916218][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1373.469879][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1373.469899][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1374.349950][ T2816] Bluetooth: hci0: command 0x1001 tx timeout [ 1374.356331][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1374.989963][ T2816] Bluetooth: hci1: command 0x1001 tx timeout [ 1374.996122][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1376.429895][ T2816] Bluetooth: hci0: command 0x1009 tx timeout [ 1377.069961][ T2816] Bluetooth: hci1: command 0x1009 tx timeout [ 1377.629882][ C1] net_ratelimit: 22 callbacks suppressed [ 1377.629907][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1377.635601][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1377.641380][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1377.647020][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1378.829901][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1378.835768][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1378.841618][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1378.847366][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1378.909871][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1378.915680][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:30:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) 19:30:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000002380)=[{&(0x7f0000000140)="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", 0x1000, 0x6}, {&(0x7f0000001140), 0x0, 0x1aa5}, {&(0x7f0000001180)="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", 0x1000, 0xffffffffffffff91}, {&(0x7f0000002180)="3664bfd63ecabb6c0fab7444ec4a8fa1b89f514f9d1f7aaaae1ac6a64e3c1446a3b96ff2cfcdb37dbae2921eb4a5e4a7e91da270a94bef2f14e2bcb8f51d9b6994fa6aa1136e55f5ffc8c33029f08c68fa5cb09fe09e573eb7f874dc1739b7106f1e11bdfa199608b5cd8bca7fbf57bed63d227e5f5b7b8cb314c27c2a0d27e8695168d043ad8007ddf04abb2bdf594edbd7cc7ec64f7613d2cb525335c8c5c9", 0xa0, 0x3}, {&(0x7f0000002240)="b25abeee4985025d880f32a694cc7927d234b6bee31951d4", 0x18, 0x6}, {&(0x7f0000002280)="febfce517bf4277afd6920891916725390a705a3dc86d2f82275bd50813cac8fed4b19ce05a7f936932f1223a00d546c78671a20da86a7bd4e2a4b9a2fa1e1a334327dcb76fb9e643a4863edadd6fccc181dafdbdb7102c3c4424fde3edd13e5278566b8909230e717367b6ff37026cc3a79a35e3737f58627ba4342449adaf92a3bff1a0e7676764c19cb9414d841c934a578c22cf0da827d077e25b729a7155eec54b24d4b6be68466989e0ab4d01a90dbd40b7f94eec59a52b6f7b9f162406462e5a1", 0xc4, 0x401}], 0x20002, &(0x7f0000002440)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}, {@dots='dots'}, {@nodots='nodots'}, {@nodots='nodots'}], [{@dont_hash='dont_hash'}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/kvm\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@subj_type={'subj_type', 0x3d, '/dev/kvm\x00'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7000, 0x0, 0x0, r2, 0xa}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:30:02 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x11, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:30:02 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00L\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1380.460135][T22330] 9pnet_virtio: no channels available for device syz0 [ 1380.519961][ T7789] Bluetooth: hci0: Frame reassembly failed (-84) 19:30:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) 19:30:02 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x14, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:30:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x1, &(0x7f00000000c0), 0x2, r2, 0xc}) 19:30:02 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:30:02 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$void(r1, 0x5451) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x238000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xa35) gettid() socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3e) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000fb9000)) [ 1381.076136][T22447] 9pnet_virtio: no channels available for device syz0 19:30:03 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x28, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:30:03 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1381.168986][ T7789] Bluetooth: hci1: Frame reassembly failed (-84) 19:30:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x80000, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x5) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 1381.357571][T22561] 9pnet_virtio: no channels available for device syz0 [ 1382.589867][ T2816] Bluetooth: hci0: command 0x1003 tx timeout [ 1382.596129][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1382.989866][ C0] net_ratelimit: 18 callbacks suppressed [ 1382.995584][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1383.001349][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1383.007122][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1383.012860][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1383.069911][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1383.075733][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1383.149842][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1383.155634][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1383.229846][ T2816] Bluetooth: hci1: command 0x1003 tx timeout [ 1383.236003][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1383.869860][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1383.869887][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1384.670836][ T2816] Bluetooth: hci0: command 0x1001 tx timeout [ 1384.676970][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1385.309906][ T2597] Bluetooth: hci1: command 0x1001 tx timeout [ 1385.316104][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1386.749899][ T2597] Bluetooth: hci0: command 0x1009 tx timeout [ 1387.389913][ T2816] Bluetooth: hci1: command 0x1009 tx timeout [ 1388.029889][ C1] net_ratelimit: 22 callbacks suppressed [ 1388.029897][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1388.029954][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1388.035619][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1389.229883][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1389.235659][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1389.241471][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1389.247202][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1389.309895][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1389.315670][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1389.389908][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:30:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0x1}) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:30:12 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x60, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:30:12 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$void(r1, 0x5451) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x238000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xa35) gettid() socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3e) 19:30:12 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00l\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1390.663767][T22674] 9pnet_virtio: no channels available for device syz0 19:30:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) 19:30:13 executing program 1: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$void(r1, 0x5451) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x238000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xa35) gettid() socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3e) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r4, 0xa, 0x12) 19:30:13 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0xf0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:30:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 19:30:13 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:30:13 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$void(r1, 0x5451) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x238000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xa35) gettid() socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000100)) [ 1391.371752][T22792] 9pnet_virtio: no channels available for device syz0 19:30:13 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x300, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:30:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:30:13 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00z\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:30:13 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x500, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1391.718954][ T7789] Bluetooth: hci1: Frame reassembly failed (-84) [ 1391.783181][T23112] 9pnet_virtio: no channels available for device syz0 19:30:13 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x543, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:30:13 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c000000000000c0ed000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1392.151662][T23121] 9pnet_virtio: no channels available for device syz0 [ 1393.389936][ C0] net_ratelimit: 17 callbacks suppressed [ 1393.389946][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1393.401462][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1393.407272][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1393.413087][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1393.469903][ T2597] Bluetooth: hci0: command 0x1003 tx timeout [ 1393.469925][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1393.477009][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1393.482693][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1393.559877][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1393.565932][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1393.789929][ T2597] Bluetooth: hci1: command 0x1003 tx timeout [ 1393.796084][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1394.269861][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1394.269881][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1395.549870][ T2597] Bluetooth: hci0: command 0x1001 tx timeout [ 1395.555979][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1395.869887][ T2597] Bluetooth: hci1: command 0x1001 tx timeout [ 1395.875969][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1397.629969][ T2816] Bluetooth: hci0: command 0x1009 tx timeout [ 1397.949882][ T2816] Bluetooth: hci1: command 0x1009 tx timeout [ 1398.429886][ C1] net_ratelimit: 22 callbacks suppressed [ 1398.429896][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1398.429936][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1398.435618][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1399.629900][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1399.635744][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1399.641520][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1399.647248][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1399.709843][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1399.715663][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1399.789839][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:30:23 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000100000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:30:23 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x600, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:30:23 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$void(r1, 0x5451) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x238000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xa35) gettid() 19:30:23 executing program 1: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$void(r1, 0x5451) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x238000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xa35) gettid() socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3e) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r4, 0xa, 0x12) 19:30:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 1401.558673][T23134] 9pnet_virtio: no channels available for device syz0 19:30:23 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x608, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1401.606800][ T7789] Bluetooth: hci0: Frame reassembly failed (-84) 19:30:23 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000200000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1401.807936][T23244] 9pnet_virtio: no channels available for device syz0 19:30:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:30:24 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x689, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:30:24 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000300000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:30:24 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$void(r1, 0x5451) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x238000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xa35) 19:30:24 executing program 1: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$void(r1, 0x5451) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x238000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000240)=0xa35) gettid() socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3e) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r4, 0xa, 0x12) [ 1402.256170][T23250] 9pnet_virtio: no channels available for device syz0 19:30:24 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x700, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1402.307107][ T8102] Bluetooth: hci1: Frame reassembly failed (-84) 19:30:24 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000400000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:30:24 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x806, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1402.514209][T23317] 9pnet_virtio: no channels available for device syz0 19:30:24 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0xb00, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1403.629878][ T2597] Bluetooth: hci0: command 0x1003 tx timeout [ 1403.636117][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1403.789873][ C0] net_ratelimit: 17 callbacks suppressed [ 1403.789878][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1403.801370][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1403.807151][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1403.812947][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1403.869859][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1403.875651][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1403.949840][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1403.955631][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1404.349863][ T2597] Bluetooth: hci1: command 0x1003 tx timeout [ 1404.356764][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1404.669868][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1404.675686][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1405.709895][ T2597] Bluetooth: hci0: command 0x1001 tx timeout [ 1405.715996][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1406.429915][ T2597] Bluetooth: hci1: command 0x1001 tx timeout [ 1406.436008][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1407.789916][ T2597] Bluetooth: hci0: command 0x1009 tx timeout [ 1408.509898][ T2816] Bluetooth: hci1: command 0x1009 tx timeout [ 1408.829908][ C1] net_ratelimit: 22 callbacks suppressed [ 1408.829966][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1408.835636][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1408.847081][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1410.029903][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1410.035688][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1410.041553][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1410.047326][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1410.109863][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1410.115665][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1410.189862][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:30:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:30:33 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000500000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:30:33 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$void(r1, 0x5451) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x238000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) [ 1411.784365][T23381] 9pnet_virtio: no channels available for device syz0 [ 1411.874224][ T8102] Bluetooth: hci0: Frame reassembly failed (-84) 19:30:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:30:34 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0xd00, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:30:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:30:34 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000600000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:30:34 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$void(r1, 0x5451) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x238000, 0x0) 19:30:34 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0xe80, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1412.472754][T23398] 9pnet_virtio: no channels available for device syz0 [ 1412.537469][ T7789] Bluetooth: hci2: Frame reassembly failed (-84) 19:30:34 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x1100, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:30:34 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:30:34 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x1400, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1412.919405][T23416] 9pnet_virtio: no channels available for device syz0 [ 1413.949829][T18376] Bluetooth: hci0: command 0x1003 tx timeout [ 1413.955982][T16111] Bluetooth: hci0: sending frame failed (-49) [ 1414.199893][ C0] net_ratelimit: 17 callbacks suppressed [ 1414.199899][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1414.211419][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1414.217201][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1414.222997][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1414.269890][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1414.275703][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1414.349860][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1414.355705][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1414.509925][T18376] Bluetooth: hci1: command 0x1003 tx timeout [ 1414.516270][T16111] Bluetooth: hci1: sending frame failed (-49) [ 1414.589896][T32487] Bluetooth: hci2: command 0x1003 tx timeout [ 1414.596095][T16111] Bluetooth: hci2: sending frame failed (-49) [ 1415.069859][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1415.069884][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1416.029830][T32487] Bluetooth: hci0: command 0x1001 tx timeout [ 1416.036000][T16111] Bluetooth: hci0: sending frame failed (-49) [ 1416.589849][T32487] Bluetooth: hci1: command 0x1001 tx timeout [ 1416.595978][T16111] Bluetooth: hci1: sending frame failed (-49) [ 1416.669905][T32487] Bluetooth: hci2: command 0x1001 tx timeout [ 1416.676036][T16111] Bluetooth: hci2: sending frame failed (-49) [ 1418.109889][T18376] Bluetooth: hci0: command 0x1009 tx timeout [ 1418.669905][T18376] Bluetooth: hci1: command 0x1009 tx timeout [ 1418.749936][T18376] Bluetooth: hci2: command 0x1009 tx timeout [ 1419.229879][ C1] net_ratelimit: 22 callbacks suppressed [ 1419.229907][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1419.235576][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1419.241374][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1419.247004][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1420.430176][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1420.435948][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1420.441790][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1420.447541][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1420.509878][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1420.515692][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:30:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:30:43 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$void(r1, 0x5451) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$tipc2(0x0) 19:30:43 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x2000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1422.119214][T18947] Bluetooth: hci0: Frame reassembly failed (-84) 19:30:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:30:44 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:30:44 executing program 1: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x600000000000000, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:30:44 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x2800, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:30:44 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$void(r1, 0x5451) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) [ 1422.677486][T23433] 9pnet_virtio: no channels available for device syz0 19:30:44 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:30:44 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x3580, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:30:44 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x4000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1423.009227][ T8102] Bluetooth: hci2: Frame reassembly failed (-84) 19:30:45 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x4305, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:30:45 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1423.290384][T23561] 9pnet_virtio: no channels available for device syz0 [ 1424.189862][T11958] Bluetooth: hci0: command 0x1003 tx timeout [ 1424.196039][T16111] Bluetooth: hci0: sending frame failed (-49) [ 1424.589911][ C0] net_ratelimit: 18 callbacks suppressed [ 1424.589920][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1424.601487][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1424.607327][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1424.613146][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1424.669888][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1424.675707][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1424.749839][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1424.755637][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1424.829824][T11958] Bluetooth: hci1: command 0x1003 tx timeout [ 1424.835953][T16111] Bluetooth: hci1: sending frame failed (-49) [ 1425.069880][T11958] Bluetooth: hci2: command 0x1003 tx timeout [ 1425.076098][T16111] Bluetooth: hci2: sending frame failed (-49) [ 1425.469880][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1425.469886][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1426.269865][T11958] Bluetooth: hci0: command 0x1001 tx timeout [ 1426.275974][T16111] Bluetooth: hci0: sending frame failed (-49) [ 1426.909878][T11958] Bluetooth: hci1: command 0x1001 tx timeout [ 1426.915980][T16111] Bluetooth: hci1: sending frame failed (-49) [ 1427.149866][ T22] Bluetooth: hci2: command 0x1001 tx timeout [ 1427.156016][T16111] Bluetooth: hci2: sending frame failed (-49) [ 1428.349924][ T22] Bluetooth: hci0: command 0x1009 tx timeout [ 1428.989849][ T22] Bluetooth: hci1: command 0x1009 tx timeout [ 1429.229850][T11958] Bluetooth: hci2: command 0x1009 tx timeout [ 1429.629895][ C1] net_ratelimit: 22 callbacks suppressed [ 1429.629904][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1429.629947][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1429.635632][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1430.829978][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1430.835789][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1430.841620][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1430.847363][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1430.909914][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1430.915687][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1430.989856][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:30:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:30:54 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$void(r1, 0x5451) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:30:54 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:30:54 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x4788, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:30:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:30:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:30:54 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$void(r1, 0x5451) [ 1432.962452][T23580] 9pnet_virtio: no channels available for device syz0 19:30:55 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:30:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:30:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:30:55 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000e00000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:30:55 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x4888, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:30:55 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:30:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:30:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:30:55 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x6000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1433.611294][T23599] 9pnet_virtio: no channels available for device syz0 [ 1433.647155][T18947] Bluetooth: hci0: Frame reassembly failed (-84) 19:30:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 19:30:55 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000001000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:30:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 1434.001309][T23717] 9pnet_virtio: no channels available for device syz0 [ 1434.989872][ C0] net_ratelimit: 17 callbacks suppressed [ 1434.995554][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1435.001304][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1435.007068][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1435.012839][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1435.069873][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1435.075670][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1435.149827][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1435.155618][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1435.709889][T18376] Bluetooth: hci0: command 0x1003 tx timeout [ 1435.716018][T22101] Bluetooth: hci0: sending frame failed (-49) [ 1435.869887][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1435.869894][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1437.789919][T18376] Bluetooth: hci0: command 0x1001 tx timeout [ 1437.796018][T22101] Bluetooth: hci0: sending frame failed (-49) [ 1439.869916][T18376] Bluetooth: hci0: command 0x1009 tx timeout [ 1440.029885][ C1] net_ratelimit: 22 callbacks suppressed [ 1440.029934][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1440.035592][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1440.047030][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1441.229874][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1441.235795][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1441.241671][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1441.247429][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1441.309876][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1441.315653][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1441.389926][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:31:05 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:31:05 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x6488, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:31:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 19:31:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:31:05 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:31:05 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1443.813664][T23733] 9pnet_virtio: no channels available for device syz0 19:31:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 19:31:05 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x800e, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:31:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) [ 1443.868696][ T7789] Bluetooth: hci0: Frame reassembly failed (-84) 19:31:05 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:31:06 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 19:31:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) [ 1445.389906][ C0] net_ratelimit: 17 callbacks suppressed [ 1445.389916][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1445.401407][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1445.407203][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1445.413011][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1445.469869][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1445.475663][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1445.549851][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1445.555678][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1445.869853][T17693] Bluetooth: hci0: command 0x1003 tx timeout [ 1445.876040][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1446.269863][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1446.269926][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1446.281519][T18376] Bluetooth: hci1: command 0x1003 tx timeout [ 1446.287704][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1447.949864][T18376] Bluetooth: hci0: command 0x1001 tx timeout [ 1447.955979][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1448.350046][T18376] Bluetooth: hci1: command 0x1001 tx timeout [ 1448.356281][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1450.029883][T17693] Bluetooth: hci0: command 0x1009 tx timeout [ 1450.429925][ C1] net_ratelimit: 22 callbacks suppressed [ 1450.429933][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1450.429978][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1450.435658][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1450.453018][T17693] Bluetooth: hci1: command 0x1009 tx timeout [ 1451.629908][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1451.635741][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1451.641626][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1451.647379][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1451.709883][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1451.715689][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1451.789843][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:31:15 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:31:15 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000102000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:31:15 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x8035, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:31:15 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:31:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) [ 1454.034318][T23770] 9pnet_virtio: no channels available for device syz0 19:31:16 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:31:16 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x8100, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:31:16 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:31:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:31:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:31:16 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:31:16 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:31:16 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 19:31:16 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x8847, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:31:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:31:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:31:16 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:31:16 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x8848, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1454.691226][T23802] 9pnet_virtio: no channels available for device syz0 [ 1454.716991][T18947] Bluetooth: hci1: Frame reassembly failed (-84) 19:31:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1455.789875][ C0] net_ratelimit: 17 callbacks suppressed [ 1455.789881][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1455.801391][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1455.807280][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1455.813045][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1455.869930][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1455.875919][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1455.949882][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1455.955749][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1456.269890][T17693] Bluetooth: hci0: command 0x1003 tx timeout [ 1456.276097][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1456.669881][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1456.669916][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1456.749908][T17693] Bluetooth: hci1: command 0x1003 tx timeout [ 1456.756099][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1458.349891][T17693] Bluetooth: hci0: command 0x1001 tx timeout [ 1458.356075][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1458.829909][ T2597] Bluetooth: hci1: command 0x1001 tx timeout [ 1458.836033][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1460.439965][ T2597] Bluetooth: hci0: command 0x1009 tx timeout [ 1460.829880][ C1] net_ratelimit: 22 callbacks suppressed [ 1460.829889][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1460.829932][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1460.835617][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1460.909943][T17693] Bluetooth: hci1: command 0x1009 tx timeout [ 1462.029868][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1462.035648][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1462.041508][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1462.047257][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1462.109863][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1462.115640][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1462.189844][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:31:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:31:26 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:31:26 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x8864, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:31:26 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:31:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:31:26 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 19:31:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) [ 1464.965239][T23926] 9pnet_virtio: no channels available for device syz0 19:31:26 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x8906, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1465.033114][ T2532] Bluetooth: hci0: Frame reassembly failed (-84) 19:31:27 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/168, &(0x7f0000000500)=0xa8) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:31:27 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) [ 1465.086551][ T2532] Bluetooth: hci1: Frame reassembly failed (-84) 19:31:27 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:31:27 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0xf000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1465.282592][T24052] 9pnet_virtio: no channels available for device syz0 [ 1466.189879][ C0] net_ratelimit: 17 callbacks suppressed [ 1466.189889][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1466.201391][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1466.207201][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1466.213015][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1466.269911][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1466.275726][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1466.349867][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1466.355686][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1467.069889][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1467.069942][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1467.081607][T23762] Bluetooth: hci0: command 0x1003 tx timeout [ 1467.087774][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1467.149849][T23762] Bluetooth: hci1: command 0x1003 tx timeout [ 1467.156027][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1469.150027][T23762] Bluetooth: hci0: command 0x1001 tx timeout [ 1469.156208][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1469.229881][T23762] Bluetooth: hci1: command 0x1001 tx timeout [ 1469.235983][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1471.229909][ C1] net_ratelimit: 22 callbacks suppressed [ 1471.229918][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1471.229964][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1471.235643][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1471.252982][ T22] Bluetooth: hci0: command 0x1009 tx timeout [ 1471.309999][ T22] Bluetooth: hci1: command 0x1009 tx timeout [ 1472.429914][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1472.435692][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1472.441488][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1472.447219][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1472.510087][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1472.515903][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1472.589891][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:31:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:31:37 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:31:37 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0xf0ffff, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:31:37 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:31:37 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:31:37 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 19:31:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:31:37 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x1000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1475.810529][ T7789] Bluetooth: hci1: Frame reassembly failed (-84) [ 1475.820686][ T8102] Bluetooth: hci0: Frame reassembly failed (-84) [ 1475.842045][T24068] 9pnet_virtio: no channels available for device syz0 19:31:37 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:31:37 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:31:37 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x2000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:31:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:31:38 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) truncate(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 1476.065319][T24186] 9pnet_virtio: no channels available for device syz0 [ 1476.589882][ C0] net_ratelimit: 17 callbacks suppressed [ 1476.589888][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1476.601466][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1476.607338][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1476.613143][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1476.669874][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1476.675718][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1476.749835][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1476.755634][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1477.469857][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1477.469878][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1477.869880][ T22] Bluetooth: hci0: command 0x1003 tx timeout [ 1477.876211][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1477.882776][ T22] Bluetooth: hci1: command 0x1003 tx timeout [ 1477.888879][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1479.949854][ T22] Bluetooth: hci0: command 0x1001 tx timeout [ 1479.949861][T23762] Bluetooth: hci1: command 0x1001 tx timeout [ 1479.949937][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1479.955981][T16111] Bluetooth: hci0: sending frame failed (-49) [ 1481.629871][ C1] net_ratelimit: 22 callbacks suppressed [ 1481.629880][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1481.629900][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1481.635610][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1481.641348][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1482.029860][ T22] Bluetooth: hci0: command 0x1009 tx timeout [ 1482.029894][T23762] Bluetooth: hci1: command 0x1009 tx timeout [ 1482.829917][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1482.835751][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1482.841575][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1482.847350][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1482.909859][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1482.915631][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:31:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:31:47 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:31:47 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x3000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:31:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:31:47 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 19:31:47 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r0 = syz_open_procfs(0x0, 0x0) write(r0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 1486.106735][T24205] 9pnet_virtio: no channels available for device syz0 19:31:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:31:48 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x5000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:31:48 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 1486.152929][ T2532] Bluetooth: hci1: Frame reassembly failed (-84) 19:31:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:31:48 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:31:48 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x6000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1486.446229][T24333] 9pnet_virtio: no channels available for device syz0 [ 1486.989869][ C0] net_ratelimit: 18 callbacks suppressed [ 1486.989875][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1487.001363][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1487.007196][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1487.013014][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1487.069847][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1487.075703][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1487.149878][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1487.155652][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1487.869867][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1487.870220][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1488.189871][ T22] Bluetooth: hci0: command 0x1003 tx timeout [ 1488.189879][ T2597] Bluetooth: hci1: command 0x1003 tx timeout [ 1488.190010][T16111] Bluetooth: hci1: sending frame failed (-49) [ 1488.199997][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1490.269858][ T2597] Bluetooth: hci1: command 0x1001 tx timeout [ 1490.269882][ T22] Bluetooth: hci0: command 0x1001 tx timeout [ 1490.279531][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1490.288205][T16111] Bluetooth: hci0: sending frame failed (-49) [ 1492.029837][ C1] net_ratelimit: 22 callbacks suppressed [ 1492.029865][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1492.035525][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1492.041310][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1492.046951][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1492.349904][ T22] Bluetooth: hci1: command 0x1009 tx timeout [ 1492.349921][ T2597] Bluetooth: hci0: command 0x1009 tx timeout [ 1493.229894][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1493.235737][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1493.241633][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1493.247402][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1493.309839][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1493.315633][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:31:58 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 19:31:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:31:58 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:31:58 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x7000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:31:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:31:58 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1496.278905][T24343] 9pnet_virtio: no channels available for device syz0 19:31:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:31:58 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x8000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:31:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:31:58 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:31:58 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c000000000000ffffff8c00000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:31:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1496.527870][T24367] 9pnet_virtio: no channels available for device syz0 [ 1497.389961][ C0] net_ratelimit: 18 callbacks suppressed [ 1497.395814][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1497.401617][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1497.407396][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1497.413147][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1497.469857][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1497.475641][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1497.549854][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1497.555739][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1498.269855][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1498.269915][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1498.349933][T17693] Bluetooth: hci0: command 0x1003 tx timeout [ 1498.356982][T22101] Bluetooth: hci0: sending frame failed (-49) [ 1500.430031][T17693] Bluetooth: hci0: command 0x1001 tx timeout [ 1500.436226][T22101] Bluetooth: hci0: sending frame failed (-49) [ 1502.429899][ C1] net_ratelimit: 22 callbacks suppressed [ 1502.429949][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1502.435689][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1502.447139][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1502.509980][T17693] Bluetooth: hci0: command 0x1009 tx timeout [ 1503.629875][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1503.635669][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1503.641479][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1503.647209][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1503.710149][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1503.715966][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1503.789910][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:32:08 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 19:32:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:32:08 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x8060000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:32:08 executing program 0: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:32:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:32:08 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000edc000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:32:08 executing program 0: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:32:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1506.526957][T24383] 9pnet_virtio: no channels available for device syz0 19:32:08 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0xb000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:32:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1506.632258][ T7789] Bluetooth: hci0: Frame reassembly failed (-84) 19:32:08 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0xd000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:32:08 executing program 0: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 1507.789844][ C0] net_ratelimit: 17 callbacks suppressed [ 1507.789851][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1507.801317][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1507.807104][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1507.812914][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1507.869867][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1507.875633][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1507.949862][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1507.955656][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1508.669855][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1508.669884][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1508.681570][T23762] Bluetooth: hci0: command 0x1003 tx timeout [ 1508.687763][T22101] Bluetooth: hci0: sending frame failed (-49) [ 1510.750062][T23762] Bluetooth: hci0: command 0x1001 tx timeout [ 1510.756215][T22101] Bluetooth: hci0: sending frame failed (-49) [ 1512.829891][ C1] net_ratelimit: 22 callbacks suppressed [ 1512.829900][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1512.829939][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1512.835645][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1512.841385][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1512.847203][ T22] Bluetooth: hci0: command 0x1009 tx timeout [ 1514.029930][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1514.035790][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1514.041588][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1514.047322][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1514.109882][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1514.115669][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:32:18 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 19:32:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:32:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:32:18 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c000000000000fffffff600000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:32:18 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:32:18 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x10000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:32:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1516.757366][T24420] 9pnet_virtio: no channels available for device syz0 19:32:18 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x11000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:32:18 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:32:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:32:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:32:18 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 1518.189896][ C0] net_ratelimit: 17 callbacks suppressed [ 1518.189902][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1518.201417][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1518.207212][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1518.213014][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1518.269837][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1518.275624][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1518.349932][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1518.355739][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1518.909938][T17693] Bluetooth: hci0: command 0x1003 tx timeout [ 1518.916177][T22101] Bluetooth: hci0: sending frame failed (-49) [ 1519.069868][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1519.069878][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1520.989904][T17693] Bluetooth: hci0: command 0x1001 tx timeout [ 1520.996042][T22101] Bluetooth: hci0: sending frame failed (-49) [ 1523.069872][T23762] Bluetooth: hci0: command 0x1009 tx timeout [ 1523.229859][ C1] net_ratelimit: 22 callbacks suppressed [ 1523.229913][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1523.235567][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1523.247008][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1524.429929][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1524.435737][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1524.441626][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1524.447378][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1524.509911][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1524.515754][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1524.589871][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:32:28 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 19:32:28 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x14000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:32:28 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c000000000000fffffdf900000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:32:28 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:32:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:32:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1526.992249][T24455] 9pnet_virtio: no channels available for device syz0 19:32:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:32:28 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x20000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:32:29 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 1527.045550][ T2532] Bluetooth: hci0: Frame reassembly failed (-84) 19:32:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:32:29 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c000000000000f9fdffff00000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:32:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1527.329372][T24580] 9pnet_virtio: no channels available for device syz0 [ 1528.589867][ C0] net_ratelimit: 16 callbacks suppressed [ 1528.589873][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1528.601325][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1528.607130][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1528.612958][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1528.669867][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1528.675652][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1528.749868][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1528.755665][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1529.069853][ T22] Bluetooth: hci0: command 0x1003 tx timeout [ 1529.076122][T22101] Bluetooth: hci0: sending frame failed (-49) [ 1529.469858][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1529.469864][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1531.149843][ T22] Bluetooth: hci0: command 0x1001 tx timeout [ 1531.155990][T22101] Bluetooth: hci0: sending frame failed (-49) [ 1533.229850][T23762] Bluetooth: hci0: command 0x1009 tx timeout [ 1533.629863][ C1] net_ratelimit: 22 callbacks suppressed [ 1533.629919][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1533.635571][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1533.647024][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1534.829964][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1534.835813][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1534.841693][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1534.847501][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1534.909879][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1534.915659][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1534.989893][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:32:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:32:39 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x28000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:32:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:32:39 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:32:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:32:39 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000008cffffff00000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:32:39 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x40000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:32:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:32:39 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 1537.280120][T24693] 9pnet_virtio: no channels available for device syz0 [ 1537.310356][ T8102] Bluetooth: hci1: Frame reassembly failed (-84) 19:32:39 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x43050000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:32:39 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x60000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:32:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1538.989939][ C0] net_ratelimit: 17 callbacks suppressed [ 1538.989948][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1539.001571][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1539.007398][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1539.013230][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1539.069838][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1539.075637][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1539.149842][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1539.155661][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1539.309874][ T22] Bluetooth: hci0: command 0x1003 tx timeout [ 1539.309882][T23762] Bluetooth: hci1: command 0x1003 tx timeout [ 1539.310011][T16111] Bluetooth: hci1: sending frame failed (-49) [ 1539.316250][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1539.869851][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1539.869890][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1541.389933][ T22] Bluetooth: hci0: command 0x1001 tx timeout [ 1541.389993][T23762] Bluetooth: hci1: command 0x1001 tx timeout [ 1541.396077][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1541.402035][T16111] Bluetooth: hci1: sending frame failed (-49) [ 1543.469912][ T22] Bluetooth: hci0: command 0x1009 tx timeout [ 1543.469919][T23762] Bluetooth: hci1: command 0x1009 tx timeout [ 1544.029872][ C1] net_ratelimit: 21 callbacks suppressed [ 1544.029881][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1544.029925][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1544.035613][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1545.229914][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1545.235734][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1545.241560][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1545.247300][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1545.309852][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1545.315738][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1545.389955][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:32:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:32:49 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c000000000000f6ffffff00000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:32:49 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x800e0000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:32:49 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:32:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:32:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:32:49 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:32:49 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x80350000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1547.524044][T24732] 9pnet_virtio: no channels available for device syz0 19:32:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:32:49 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:32:49 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x81000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:32:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) [ 1549.389903][ C0] net_ratelimit: 17 callbacks suppressed [ 1549.389910][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1549.401435][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1549.407232][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1549.413030][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1549.469883][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1549.475707][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1549.559857][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1549.565709][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1549.629853][T18376] Bluetooth: hci1: command 0x1003 tx timeout [ 1549.635999][T16111] Bluetooth: hci1: sending frame failed (-49) [ 1549.642509][T18376] Bluetooth: hci0: command 0x1003 tx timeout [ 1549.648627][T16111] Bluetooth: hci0: sending frame failed (-49) [ 1549.869844][T18376] Bluetooth: hci2: command 0x1003 tx timeout [ 1549.875988][T16111] Bluetooth: hci2: sending frame failed (-49) [ 1550.269866][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1550.275689][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1551.709885][T18376] Bluetooth: hci0: command 0x1001 tx timeout [ 1551.715941][T18376] Bluetooth: hci1: command 0x1001 tx timeout [ 1551.715997][T16111] Bluetooth: hci0: sending frame failed (-49) [ 1551.728964][T16111] Bluetooth: hci1: sending frame failed (-49) [ 1551.949875][T17693] Bluetooth: hci2: command 0x1001 tx timeout [ 1551.956028][T16111] Bluetooth: hci2: sending frame failed (-49) [ 1553.789873][T17693] Bluetooth: hci1: command 0x1009 tx timeout [ 1553.795968][T17693] Bluetooth: hci0: command 0x1009 tx timeout [ 1554.029859][T18376] Bluetooth: hci2: command 0x1009 tx timeout [ 1554.429864][ C1] net_ratelimit: 22 callbacks suppressed [ 1554.429996][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1554.435579][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1554.441360][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1554.446998][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1555.629954][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1555.635792][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1555.641664][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1555.647439][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1555.709877][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1555.715673][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:32:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:32:59 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c00000000000000000000c0ed0000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:32:59 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x86ddffff, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:32:59 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) 19:32:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) [ 1557.749450][T24762] 9pnet_virtio: no channels available for device syz0 19:32:59 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x88470000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:32:59 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 1557.790638][ T7789] Bluetooth: hci0: Frame reassembly failed (-84) 19:32:59 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r0, 0x0, 0x0, 0x0) 19:32:59 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x88480000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:32:59 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000000000001"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:33:00 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r0, 0x0, 0x0, 0x0) [ 1558.106202][T24786] 9pnet_virtio: no channels available for device syz0 19:33:00 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x88640000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1559.789897][ C0] net_ratelimit: 18 callbacks suppressed [ 1559.789903][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1559.801417][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1559.807366][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1559.813180][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1559.819054][ T2597] Bluetooth: hci0: command 0x1003 tx timeout [ 1559.825214][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1559.869868][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1559.875703][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1559.881649][T17693] Bluetooth: hci1: command 0x1003 tx timeout [ 1559.887748][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1559.949851][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1559.955678][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1560.669857][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1560.669863][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1561.869908][T17693] Bluetooth: hci0: command 0x1001 tx timeout [ 1561.876050][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1561.952557][T17693] Bluetooth: hci1: command 0x1001 tx timeout [ 1561.958955][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1563.949936][T17693] Bluetooth: hci0: command 0x1009 tx timeout [ 1564.029975][ T2597] Bluetooth: hci1: command 0x1009 tx timeout [ 1564.829885][ C1] net_ratelimit: 22 callbacks suppressed [ 1564.829894][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1564.829938][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1564.835612][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1566.029885][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1566.035756][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1566.041638][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1566.047461][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1566.109860][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1566.115762][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1566.189858][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:33:09 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r0, 0x0, 0x0, 0x0) 19:33:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:33:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:33:09 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x88a8ffff, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:33:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 19:33:09 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000000000002"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1568.018922][T24806] 9pnet_virtio: no channels available for device syz0 19:33:10 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x88caffff, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:33:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x4000001, 0x182) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r1, r0, 0x0) 19:33:10 executing program 0: 19:33:10 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x89060000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:33:10 executing program 0: 19:33:10 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000000000003"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:33:10 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0xffffa888, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1568.456419][T24829] 9pnet_virtio: no channels available for device syz0 [ 1570.029887][ T2597] Bluetooth: hci0: command 0x1003 tx timeout [ 1570.036181][T16111] Bluetooth: hci0: sending frame failed (-49) [ 1570.109865][ T2597] Bluetooth: hci1: command 0x1003 tx timeout [ 1570.109916][T23432] Bluetooth: hci2: command 0x1003 tx timeout [ 1570.121674][T16111] Bluetooth: hci1: sending frame failed (-49) [ 1570.128426][T16111] Bluetooth: hci2: sending frame failed (-49) [ 1570.189928][ C0] net_ratelimit: 17 callbacks suppressed [ 1570.189938][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1570.201452][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1570.207263][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1570.213020][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1570.269876][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1570.275700][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1570.359915][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1570.365826][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1571.069859][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1571.070107][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1572.109879][T23432] Bluetooth: hci0: command 0x1001 tx timeout [ 1572.116011][T16111] Bluetooth: hci0: sending frame failed (-49) [ 1572.189861][ T2597] Bluetooth: hci2: command 0x1001 tx timeout [ 1572.195955][ T2597] Bluetooth: hci1: command 0x1001 tx timeout [ 1572.196011][T16111] Bluetooth: hci2: sending frame failed (-49) [ 1572.208975][T16111] Bluetooth: hci1: sending frame failed (-49) [ 1574.189876][ T2597] Bluetooth: hci0: command 0x1009 tx timeout [ 1574.270058][T23432] Bluetooth: hci1: command 0x1009 tx timeout [ 1574.276171][T23432] Bluetooth: hci2: command 0x1009 tx timeout [ 1575.229874][ C0] net_ratelimit: 22 callbacks suppressed [ 1575.231173][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1575.235569][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1575.241295][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1575.247003][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1576.429995][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1576.435848][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1576.441707][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1576.447451][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1576.509962][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1576.515735][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:33:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:33:20 executing program 0: 19:33:20 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0xffffca88, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:33:20 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000000000004"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:33:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 19:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:33:20 executing program 0: [ 1578.281085][T24847] 9pnet_virtio: no channels available for device syz0 19:33:20 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0xffffdd86, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:33:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_emit_ethernet(0x3e, &(0x7f0000000640)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0) 19:33:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 19:33:20 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0xfffff000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:33:20 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000000000005"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:33:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b) listen(r0, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) [ 1578.656242][T24964] syz-executor.0 (24964) used greatest stack depth: 22264 bytes left 19:33:20 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0xf0ffffffffffff, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1578.753216][T24971] 9pnet_virtio: no channels available for device syz0 [ 1578.766702][T24975] syz-executor.0 (24975) used greatest stack depth: 21464 bytes left 19:33:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4000010004002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1001, 0x2000000000071, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8ccc8a43a4b722aad26a207ba5f73a433cd8863368a09708f37997559ae0b7fca4dab3fe6d9c62e4231f79b174bba913ffdf9be26a0a531abe129fa6601000", "601694926e8ffb73e0e200"}) 19:33:20 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x100000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1580.349875][T24838] Bluetooth: hci1: command 0x1003 tx timeout [ 1580.349897][T23435] Bluetooth: hci0: command 0x1003 tx timeout [ 1580.358536][T24835] Bluetooth: hci1: sending frame failed (-49) [ 1580.362368][T24813] Bluetooth: hci0: sending frame failed (-49) [ 1580.589902][ C0] net_ratelimit: 18 callbacks suppressed [ 1580.589907][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1580.601573][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1580.607399][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1580.613217][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1580.669876][T24838] Bluetooth: hci2: command 0x1003 tx timeout [ 1580.670031][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1580.681752][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1580.687727][T24813] Bluetooth: hci2: sending frame failed (-49) [ 1580.749889][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1580.755728][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1581.469847][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1581.469855][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1582.429916][T24838] Bluetooth: hci1: command 0x1001 tx timeout [ 1582.429928][T23435] Bluetooth: hci0: command 0x1001 tx timeout [ 1582.430017][T24813] Bluetooth: hci0: sending frame failed (-49) [ 1582.435990][T24835] Bluetooth: hci1: sending frame failed (-49) [ 1582.750104][T23435] Bluetooth: hci2: command 0x1001 tx timeout [ 1582.756295][T24835] Bluetooth: hci2: sending frame failed (-49) [ 1584.509923][T23435] Bluetooth: hci0: command 0x1009 tx timeout [ 1584.509933][T24838] Bluetooth: hci1: command 0x1009 tx timeout [ 1584.829916][T24838] Bluetooth: hci2: command 0x1009 tx timeout [ 1585.629850][ C0] net_ratelimit: 22 callbacks suppressed [ 1585.629856][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1585.629907][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1585.635566][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1586.829909][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1586.835732][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1586.841528][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1586.847317][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1586.909900][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1586.915720][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1586.989892][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:33:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 19:33:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:33:30 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x200000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:33:30 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000000000006"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:33:30 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x182) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r1, r0, 0x0) [ 1588.421887][T24992] 9pnet_virtio: no channels available for device syz0 [ 1588.466990][ T2532] Bluetooth: hci1: Frame reassembly failed (-84) 19:33:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 19:33:30 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f00000003c0), 0x0}, 0x18) 19:33:30 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x300000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:33:30 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:33:30 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x500000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:33:31 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1589.037042][T25109] 9pnet_virtio: no channels available for device syz0 19:33:31 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x600000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1590.509850][T23432] Bluetooth: hci1: command 0x1003 tx timeout [ 1590.515988][T23432] Bluetooth: hci0: command 0x1003 tx timeout [ 1590.516118][T24813] Bluetooth: hci1: sending frame failed (-49) [ 1590.528509][T24813] Bluetooth: hci0: sending frame failed (-49) [ 1590.989964][ C0] net_ratelimit: 16 callbacks suppressed [ 1590.989974][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1591.001451][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1591.007255][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1591.013055][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1591.069864][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1591.075690][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1591.149887][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1591.155736][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1591.161650][T23432] Bluetooth: hci2: command 0x1003 tx timeout [ 1591.167819][T24813] Bluetooth: hci2: sending frame failed (-49) [ 1591.229880][T24838] Bluetooth: hci3: command 0x1003 tx timeout [ 1591.236029][T24813] Bluetooth: hci3: sending frame failed (-49) [ 1591.869868][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1591.869874][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1592.589926][T24838] Bluetooth: hci0: command 0x1001 tx timeout [ 1592.596023][T24813] Bluetooth: hci0: sending frame failed (-49) [ 1592.602182][T24838] Bluetooth: hci1: command 0x1001 tx timeout [ 1592.608236][T24813] Bluetooth: hci1: sending frame failed (-49) [ 1593.229872][T24838] Bluetooth: hci2: command 0x1001 tx timeout [ 1593.235978][T24813] Bluetooth: hci2: sending frame failed (-49) [ 1593.309891][T24838] Bluetooth: hci3: command 0x1001 tx timeout [ 1593.316007][T24813] Bluetooth: hci3: sending frame failed (-49) [ 1594.669889][T23432] Bluetooth: hci1: command 0x1009 tx timeout [ 1594.669897][T24838] Bluetooth: hci0: command 0x1009 tx timeout [ 1595.310074][T23432] Bluetooth: hci2: command 0x1009 tx timeout [ 1595.389928][T23432] Bluetooth: hci3: command 0x1009 tx timeout [ 1596.029875][ C1] net_ratelimit: 22 callbacks suppressed [ 1596.029903][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1596.035589][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1596.041377][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1596.047009][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1597.229899][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1597.235677][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1597.241528][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1597.247318][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1597.309873][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1597.315700][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:33:40 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:33:40 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x700000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:33:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:33:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x2, 0x112}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={r3, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000000240)=0x84) r4 = eventfd2(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r4, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 1598.683649][T25130] 9pnet_virtio: no channels available for device syz0 19:33:40 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x800000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:33:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 19:33:41 executing program 4: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x8906000000000000, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:33:41 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x806000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:33:41 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:33:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:33:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 1599.333622][T25148] 9pnet_virtio: no channels available for device syz0 19:33:41 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0xb00000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1599.398591][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1599.463129][ T2532] Bluetooth: hci2: Frame reassembly failed (-84) 19:33:41 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0xd00000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:33:41 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1599.647330][T25270] 9pnet_virtio: no channels available for device syz0 [ 1600.749906][T23762] Bluetooth: hci0: command 0x1003 tx timeout [ 1600.756191][T22101] Bluetooth: hci0: sending frame failed (-49) [ 1601.389928][ C0] net_ratelimit: 18 callbacks suppressed [ 1601.389938][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1601.401481][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1601.407319][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1601.413083][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1601.469885][T23762] Bluetooth: hci2: command 0x1003 tx timeout [ 1601.476026][T23762] Bluetooth: hci1: command 0x1003 tx timeout [ 1601.476187][T22101] Bluetooth: hci2: sending frame failed (-49) [ 1601.482145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1601.482202][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1601.482754][T24813] Bluetooth: hci1: sending frame failed (-49) [ 1601.549892][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1601.555817][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1602.269878][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1602.269884][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1602.829936][T23762] Bluetooth: hci0: command 0x1001 tx timeout [ 1602.836041][T24813] Bluetooth: hci0: sending frame failed (-49) [ 1603.549909][T23762] Bluetooth: hci1: command 0x1001 tx timeout [ 1603.550090][T23435] Bluetooth: hci2: command 0x1001 tx timeout [ 1603.556003][T24813] Bluetooth: hci1: sending frame failed (-49) [ 1603.569578][T24813] Bluetooth: hci2: sending frame failed (-49) [ 1604.909963][T23762] Bluetooth: hci0: command 0x1009 tx timeout [ 1605.629960][T23762] Bluetooth: hci2: command 0x1009 tx timeout [ 1605.636289][T23762] Bluetooth: hci1: command 0x1009 tx timeout [ 1606.429894][ C1] net_ratelimit: 22 callbacks suppressed [ 1606.429901][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1606.439933][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1606.441709][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1606.447383][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1607.629967][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1607.635793][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1607.641674][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1607.647523][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1607.709907][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1607.715695][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:33:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:33:50 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x6}) memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:33:50 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x1000000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:33:51 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x1100000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:33:51 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c000000000000000000000000000e"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:33:51 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:33:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:33:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$packet(0x11, 0x2, 0x300) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) r4 = syz_open_dev$sndpcmp(&(0x7f0000001440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x4000000000002c7, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000400)="c28e2d935866e5f2d88cdc7dec3cfc3b215bfad72de8c562bac2060a753402e21c6d1ffd0357a12b9153c005cd31d1e99acdf269af9755d22a099fa88e511fcb03cfe748d74b918d58c60b20f39942bbaf8e3676dba8f0c9cf4c5f9e058bf5e982872cb8022bf4fcfd7dd7d263f69c01e5ac11ecc11f35ec9326f8b16a5cb786c6a51ca1381dd6a094e1c4d7606ea67899c2542b4b704dffc4a45c57b283a6e6c7029fde23de5c65702ca736c583f03c8255a12d99f1c5a11d369376cc1b8c44eb91b879e69e3695a09b9b855a732805ed788cb5b16466df1ee4ace380f1b363db1f81fcc11635ce389a5592f9a8caf96414ed9fc15006a3d093ecf79c10db90", 0x100) wait4(r5, &(0x7f0000000080), 0x2, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2) sched_setaffinity(r5, 0x8, &(0x7f0000000140)=0x5fe3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000320001020000000000000000000000000c00020000000000000000005653ee05e3a39dcbd6c0c674ab31f547c757263b5695db1f04135360b7ea006f993d3cebe30aa81a9903896422875e"], 0x20}}, 0x0) 19:33:51 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x1400000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1609.586127][T25287] 9pnet_virtio: no channels available for device syz0 19:33:51 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1609.669864][T18947] Bluetooth: hci1: Frame reassembly failed (-84) 19:33:51 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000000000010"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:33:51 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x2000000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1609.843187][T25497] 9pnet_virtio: no channels available for device syz0 [ 1610.989824][T23432] Bluetooth: hci0: command 0x1003 tx timeout [ 1610.996005][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1611.709865][T23762] Bluetooth: hci1: command 0x1003 tx timeout [ 1611.716024][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1611.789881][ C0] net_ratelimit: 18 callbacks suppressed [ 1611.789887][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1611.801416][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1611.807231][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1611.813033][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1611.869862][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1611.875683][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1611.949881][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1611.955671][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1612.669876][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1612.669882][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1613.069910][T23762] Bluetooth: hci0: command 0x1001 tx timeout [ 1613.076019][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1613.789905][T23762] Bluetooth: hci1: command 0x1001 tx timeout [ 1613.796015][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1615.149936][T23762] Bluetooth: hci0: command 0x1009 tx timeout [ 1615.869884][T23762] Bluetooth: hci1: command 0x1009 tx timeout [ 1616.829876][ C1] net_ratelimit: 22 callbacks suppressed [ 1616.829975][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1616.835599][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1616.847074][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1618.029938][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1618.035786][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1618.041576][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1618.047308][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1618.109860][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1618.115666][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1618.190116][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:34:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:34:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$packet(0x11, 0x2, 0x300) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) r4 = syz_open_dev$sndpcmp(&(0x7f0000001440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x4000000000002c7, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000400)="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", 0x100) wait4(r5, &(0x7f0000000080), 0x2, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2) sched_setaffinity(r5, 0x8, &(0x7f0000000140)=0x5fe3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000320001020000000000000000000000000c00020000000000000000005653ee05e3a39dcbd6c0c674ab31f547c757263b5695db1f04135360b7ea006f993d3cebe30aa81a9903896422875e"], 0x20}}, 0x0) 19:34:01 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x2800000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:34:01 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:34:01 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:34:01 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x4000000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1619.171874][T25516] 9pnet_virtio: no channels available for device syz0 19:34:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:34:01 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:34:01 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x4305000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:34:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$packet(0x11, 0x2, 0x300) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) r4 = syz_open_dev$sndpcmp(&(0x7f0000001440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x4000000000002c7, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000400)="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", 0x100) wait4(r5, &(0x7f0000000080), 0x2, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2) sched_setaffinity(r5, 0x8, &(0x7f0000000140)=0x5fe3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000320001020000000000000000000000000c00020000000000000000005653ee05e3a39dcbd6c0c674ab31f547c757263b5695db1f04135360b7ea006f993d3cebe30aa81a9903896422875e"], 0x20}}, 0x0) 19:34:01 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000000000001020"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:34:01 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x6000000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1619.809493][T25635] 9pnet_virtio: no channels available for device syz0 [ 1621.229907][T23762] Bluetooth: hci0: command 0x1003 tx timeout [ 1621.236064][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1621.869887][T23762] Bluetooth: hci1: command 0x1003 tx timeout [ 1621.876046][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1622.199894][ C0] net_ratelimit: 17 callbacks suppressed [ 1622.199903][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1622.211320][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1622.217090][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1622.222840][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1622.269859][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1622.275656][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1622.349858][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1622.355680][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1623.069858][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1623.069863][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1623.309899][T23432] Bluetooth: hci0: command 0x1001 tx timeout [ 1623.316041][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1623.949920][T23432] Bluetooth: hci1: command 0x1001 tx timeout [ 1623.956064][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1625.390002][T23762] Bluetooth: hci0: command 0x1009 tx timeout [ 1626.030039][T23762] Bluetooth: hci1: command 0x1009 tx timeout [ 1627.229858][ C1] net_ratelimit: 22 callbacks suppressed [ 1627.229911][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1627.235567][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1627.246979][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1628.429920][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1628.435769][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1628.441559][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1628.447290][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1628.509874][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1628.515665][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1628.589860][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:34:11 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x800e000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:34:11 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:34:11 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:34:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$packet(0x11, 0x2, 0x300) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) r4 = syz_open_dev$sndpcmp(&(0x7f0000001440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x4000000000002c7, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000400)="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", 0x100) wait4(r5, &(0x7f0000000080), 0x2, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2) sched_setaffinity(r5, 0x8, &(0x7f0000000140)=0x5fe3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x1) socket$netlink(0x10, 0x3, 0x0) 19:34:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:34:11 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x8035000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1629.414521][T25755] 9pnet_virtio: no channels available for device syz0 19:34:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:34:11 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:34:11 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x8100000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:34:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$packet(0x11, 0x2, 0x300) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) r4 = syz_open_dev$sndpcmp(&(0x7f0000001440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x4000000000002c7, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000400)="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", 0x100) wait4(r5, &(0x7f0000000080), 0x2, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2) sched_setaffinity(r5, 0x8, &(0x7f0000000140)=0x5fe3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x1) 19:34:11 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:34:11 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1630.041103][T25873] 9pnet_virtio: no channels available for device syz0 19:34:12 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x86ddffff00000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:34:12 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1631.469867][T23762] Bluetooth: hci0: command 0x1003 tx timeout [ 1631.476902][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1632.199913][T23762] Bluetooth: hci1: command 0x1003 tx timeout [ 1632.206191][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1632.589889][ C0] net_ratelimit: 17 callbacks suppressed [ 1632.589898][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1632.601379][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1632.607188][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1632.613109][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1632.669839][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1632.675623][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1632.749896][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1632.755702][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1633.469872][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1633.469881][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1633.549964][T23432] Bluetooth: hci0: command 0x1001 tx timeout [ 1633.556140][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1634.269828][T23432] Bluetooth: hci1: command 0x1001 tx timeout [ 1634.275966][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1635.629877][T23762] Bluetooth: hci0: command 0x1009 tx timeout [ 1636.359909][T23762] Bluetooth: hci1: command 0x1009 tx timeout [ 1637.629878][ C0] net_ratelimit: 22 callbacks suppressed [ 1637.630180][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1637.635578][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1637.641374][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1637.647043][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1638.829929][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1638.835790][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1638.841659][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1638.847415][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1638.909861][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1638.915676][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:34:21 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:34:21 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x8847000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:34:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:34:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x4) r3 = syz_open_dev$sndpcmp(&(0x7f0000001440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000400)="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", 0x100) wait4(r4, &(0x7f0000000080), 0x2, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2) sched_setaffinity(r4, 0x8, &(0x7f0000000140)=0x5fe3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) [ 1639.656342][T25997] 9pnet_virtio: no channels available for device syz0 19:34:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:34:22 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:34:22 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x8848000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:34:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x4) r3 = syz_open_dev$sndpcmp(&(0x7f0000001440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000400)="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", 0x100) wait4(r4, &(0x7f0000000080), 0x2, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2) sched_setaffinity(r4, 0x8, &(0x7f0000000140)=0x5fe3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 19:34:22 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:34:22 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) [ 1640.281180][T26108] 9pnet_virtio: no channels available for device syz0 19:34:22 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x8864000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:34:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:34:22 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:34:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x4) r3 = syz_open_dev$sndpcmp(&(0x7f0000001440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000400)="c28e2d935866e5f2d88cdc7dec3cfc3b215bfad72de8c562bac2060a753402e21c6d1ffd0357a12b9153c005cd31d1e99acdf269af9755d22a099fa88e511fcb03cfe748d74b918d58c60b20f39942bbaf8e3676dba8f0c9cf4c5f9e058bf5e982872cb8022bf4fcfd7dd7d263f69c01e5ac11ecc11f35ec9326f8b16a5cb786c6a51ca1381dd6a094e1c4d7606ea67899c2542b4b704dffc4a45c57b283a6e6c7029fde23de5c65702ca736c583f03c8255a12d99f1c5a11d369376cc1b8c44eb91b879e69e3695a09b9b855a732805ed788cb5b16466df1ee4ace380f1b363db1f81fcc11635ce389a5592f9a8caf96414ed9fc15006a3d093ecf79c10db90", 0x100) wait4(r4, &(0x7f0000000080), 0x2, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2) sched_setaffinity(r4, 0x8, &(0x7f0000000140)=0x5fe3) [ 1641.709864][T24838] Bluetooth: hci0: command 0x1003 tx timeout [ 1641.717574][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1642.989946][ C0] net_ratelimit: 18 callbacks suppressed [ 1642.989952][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1643.001747][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1643.007591][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1643.013420][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1643.069867][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1643.075803][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1643.149897][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1643.155708][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1643.789985][T24838] Bluetooth: hci0: command 0x1001 tx timeout [ 1643.796183][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1643.869907][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1643.869913][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1645.869908][T24838] Bluetooth: hci0: command 0x1009 tx timeout [ 1648.029895][ C1] net_ratelimit: 22 callbacks suppressed [ 1648.029904][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1648.029951][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1648.035649][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1649.229954][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1649.236245][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1649.242215][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1649.248076][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1649.309865][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1649.315856][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1649.389971][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:34:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:34:31 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x88a8ffff00000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:34:31 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:34:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:34:31 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:34:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x4) r3 = syz_open_dev$sndpcmp(&(0x7f0000001440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000400)="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", 0x100) wait4(r4, &(0x7f0000000080), 0x2, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2) [ 1649.880209][T26142] 9pnet_virtio: no channels available for device syz0 19:34:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 19:34:31 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x88caffff00000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:34:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1649.996484][ T8102] Bluetooth: hci0: Frame reassembly failed (-84) 19:34:32 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:34:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 19:34:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x4) r3 = syz_open_dev$sndpcmp(&(0x7f0000001440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000400)="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", 0x100) ioctl$KDADDIO(r1, 0x400455c8, 0x2) [ 1650.298888][T26163] 9pnet_virtio: no channels available for device syz0 [ 1652.029863][T23435] Bluetooth: hci0: command 0x1003 tx timeout [ 1652.036061][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1653.389959][ C0] net_ratelimit: 17 callbacks suppressed [ 1653.395652][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1653.401461][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1653.407295][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1653.413079][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1653.469866][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1653.475723][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1653.549922][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1653.555772][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1654.109934][T23435] Bluetooth: hci0: command 0x1001 tx timeout [ 1654.116097][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1654.269877][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1654.269906][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1656.189873][T23435] Bluetooth: hci0: command 0x1009 tx timeout [ 1658.429879][ C1] net_ratelimit: 22 callbacks suppressed [ 1658.429888][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1658.429893][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1658.429988][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1658.435601][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1659.629958][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1659.635765][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1659.641626][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1659.647375][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1659.709875][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1659.715720][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:34:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:34:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:34:41 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x8906000000000000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:34:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 19:34:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x4) syz_open_dev$sndpcmp(&(0x7f0000001440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:34:41 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:34:42 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 1660.128611][T26177] 9pnet_virtio: no channels available for device syz0 19:34:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:34:42 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0xfffffffffffff000, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1660.191649][ T8102] Bluetooth: hci0: Frame reassembly failed (-84) 19:34:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x4) syz_open_dev$sndpcmp(&(0x7f0000001440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:34:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:34:42 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4ee9, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:34:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1662.269853][T23432] Bluetooth: hci0: command 0x1003 tx timeout [ 1662.276047][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1662.349853][T11958] Bluetooth: hci1: command 0x1003 tx timeout [ 1662.356086][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1663.789900][ C0] net_ratelimit: 18 callbacks suppressed [ 1663.789906][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1663.801399][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1663.807345][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1663.813195][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1663.869880][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1663.875783][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1663.949859][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1663.955685][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1664.349869][T11958] Bluetooth: hci0: command 0x1001 tx timeout [ 1664.356250][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1664.429878][T11958] Bluetooth: hci1: command 0x1001 tx timeout [ 1664.436097][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1664.669860][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1664.669876][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1666.429989][T11958] Bluetooth: hci0: command 0x1009 tx timeout [ 1666.509845][T11958] Bluetooth: hci1: command 0x1009 tx timeout [ 1668.829832][ C1] net_ratelimit: 22 callbacks suppressed [ 1668.829860][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1668.835526][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1668.841304][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1668.846929][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1670.029911][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1670.035766][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1670.041556][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1670.047285][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1670.109856][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1670.115727][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:34:52 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:34:52 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x2, 0x0, 0x5}}}}}}, 0x0) 19:34:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:34:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:34:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x4) syz_open_dev$sndpcmp(&(0x7f0000001440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2) [ 1670.375246][T26315] 9pnet_virtio: no channels available for device syz0 19:34:52 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 19:34:52 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x3, 0x0, 0x5}}}}}}, 0x0) 19:34:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:34:52 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c00000000000000000000ffffff8c"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:34:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x4) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:34:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1670.986119][T26329] 9pnet_virtio: no channels available for device syz0 19:34:52 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x5, 0x0, 0x5}}}}}}, 0x0) [ 1671.042460][ T7789] Bluetooth: hci1: Frame reassembly failed (-84) 19:34:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:34:53 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c00000000000000000000fffffff6"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1671.251085][T26449] 9pnet_virtio: no channels available for device syz0 [ 1672.519881][T23435] Bluetooth: hci0: command 0x1003 tx timeout [ 1672.526147][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1673.069936][T23435] Bluetooth: hci1: command 0x1003 tx timeout [ 1673.076267][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1674.189889][ C0] net_ratelimit: 18 callbacks suppressed [ 1674.195578][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1674.201377][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1674.207217][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1674.213024][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1674.269858][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1674.275674][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1674.349914][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1674.355815][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1674.589889][T23435] Bluetooth: hci0: command 0x1001 tx timeout [ 1674.596065][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1675.069891][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1675.069917][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1675.149938][T23435] Bluetooth: hci1: command 0x1001 tx timeout [ 1675.156997][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1676.669936][T23435] Bluetooth: hci0: command 0x1009 tx timeout [ 1677.229859][T24838] Bluetooth: hci1: command 0x1009 tx timeout [ 1679.229863][ C1] net_ratelimit: 22 callbacks suppressed [ 1679.229872][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1679.229904][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1679.235600][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1679.241342][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1680.429935][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1680.435737][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1680.441607][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1680.447356][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:35:02 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x6, 0x0, 0x5}}}}}}, 0x0) 19:35:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:35:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) [ 1680.509901][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1680.515732][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:35:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$packet(0x11, 0x2, 0x300) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:35:03 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c00000000000000000000fffffdf9"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:35:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:35:03 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x7, 0x0, 0x5}}}}}}, 0x0) 19:35:03 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 19:35:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:35:03 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x8, 0x0, 0x5}}}}}}, 0x0) [ 1681.303094][T26471] 9pnet_virtio: no channels available for device syz0 19:35:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:35:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:35:03 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000002000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:35:03 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0xb, 0x0, 0x5}}}}}}, 0x0) [ 1681.550829][T26591] 9pnet_virtio: no channels available for device syz0 [ 1682.669935][T23435] Bluetooth: hci0: command 0x1003 tx timeout [ 1682.676160][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1683.309849][T23435] Bluetooth: hci1: command 0x1003 tx timeout [ 1683.316056][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1684.589896][ C0] net_ratelimit: 18 callbacks suppressed [ 1684.589903][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1684.601482][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1684.607274][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1684.613098][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1684.669839][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1684.675718][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1684.749834][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1684.749897][T11958] Bluetooth: hci0: command 0x1001 tx timeout [ 1684.755638][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1684.762982][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1685.389912][T11958] Bluetooth: hci1: command 0x1001 tx timeout [ 1685.396037][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1685.469835][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1685.469841][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1686.829859][T11958] Bluetooth: hci0: command 0x1009 tx timeout [ 1687.469833][T11958] Bluetooth: hci1: command 0x1009 tx timeout [ 1689.629863][ C0] net_ratelimit: 22 callbacks suppressed [ 1689.629869][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1689.629919][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1689.635742][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1689.641502][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:35:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:35:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:35:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:35:12 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0xd, 0x0, 0x5}}}}}}, 0x0) [ 1690.829836][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1690.835621][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1690.841433][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1690.847159][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1690.909880][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1690.915703][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:35:13 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 19:35:13 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000003000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:35:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:35:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:35:13 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x10, 0x0, 0x5}}}}}}, 0x0) 19:35:13 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x11, 0x0, 0x5}}}}}}, 0x0) [ 1691.435087][T26614] 9pnet_virtio: no channels available for device syz0 19:35:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:35:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2) [ 1692.830011][T23432] Bluetooth: hci0: command 0x1003 tx timeout [ 1692.836299][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1693.549845][T23432] Bluetooth: hci1: command 0x1003 tx timeout [ 1693.556098][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1694.909885][T24838] Bluetooth: hci0: command 0x1001 tx timeout [ 1694.916154][T31605] Bluetooth: hci0: sending frame failed (-49) [ 1694.989902][ C0] net_ratelimit: 18 callbacks suppressed [ 1694.995613][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1695.001433][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1695.007219][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1695.012977][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1695.069841][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1695.075742][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1695.149898][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1695.155739][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1695.629892][T24838] Bluetooth: hci1: command 0x1001 tx timeout [ 1695.636008][T31605] Bluetooth: hci1: sending frame failed (-49) [ 1695.869839][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1695.869874][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1696.989905][T24838] Bluetooth: hci0: command 0x1009 tx timeout [ 1697.709857][T24838] Bluetooth: hci1: command 0x1009 tx timeout [ 1700.029861][ C1] net_ratelimit: 22 callbacks suppressed [ 1700.029912][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1700.035669][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1700.047115][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:35:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:35:22 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x14, 0x0, 0x5}}}}}}, 0x0) 19:35:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:35:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) [ 1701.092284][ T7789] Bluetooth: hci0: Frame reassembly failed (-84) [ 1701.229894][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1701.235688][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1701.241558][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1701.247401][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1701.309841][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1701.315743][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1701.389908][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:35:23 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 19:35:23 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000004000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:35:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) 19:35:23 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x28, 0x0, 0x5}}}}}}, 0x0) 19:35:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:35:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) [ 1701.725230][T26650] 9pnet_virtio: no channels available for device syz0 19:35:23 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x60, 0x0, 0x5}}}}}}, 0x0) 19:35:23 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) [ 1703.149892][T23432] Bluetooth: hci0: command 0x1003 tx timeout [ 1703.156187][T24813] Bluetooth: hci0: sending frame failed (-49) [ 1703.789828][T23432] Bluetooth: hci2: command 0x1003 tx timeout [ 1703.796041][T24813] Bluetooth: hci2: sending frame failed (-49) [ 1703.802482][T23432] Bluetooth: hci1: command 0x1003 tx timeout [ 1703.808745][T24813] Bluetooth: hci1: sending frame failed (-49) [ 1705.229831][T23432] Bluetooth: hci0: command 0x1001 tx timeout [ 1705.236002][T24813] Bluetooth: hci0: sending frame failed (-49) [ 1705.389955][ C0] net_ratelimit: 17 callbacks suppressed [ 1705.395657][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1705.401448][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1705.407283][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1705.413062][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1705.469844][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1705.475620][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1705.549885][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1705.555662][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1705.869834][T23432] Bluetooth: hci1: command 0x1001 tx timeout [ 1705.875900][T23432] Bluetooth: hci2: command 0x1001 tx timeout [ 1705.875995][T24813] Bluetooth: hci1: sending frame failed (-49) [ 1705.888841][T24813] Bluetooth: hci2: sending frame failed (-49) [ 1706.269853][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1706.269873][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1707.309925][T23432] Bluetooth: hci0: command 0x1009 tx timeout [ 1707.949905][T24838] Bluetooth: hci2: command 0x1009 tx timeout [ 1707.955956][T24838] Bluetooth: hci1: command 0x1009 tx timeout [ 1710.429890][ C1] net_ratelimit: 22 callbacks suppressed [ 1710.429898][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1710.439884][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1710.441361][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1710.447035][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:35:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:35:33 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0xf0, 0x0, 0x5}}}}}}, 0x0) 19:35:33 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000005000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:35:33 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) [ 1711.306671][T26672] 9pnet_virtio: no channels available for device syz0 [ 1711.352235][ T7789] Bluetooth: hci0: Frame reassembly failed (-84) [ 1711.629916][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1711.635710][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1711.641585][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1711.647360][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1711.709887][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1711.715761][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:35:33 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x300, 0x0, 0x5}}}}}}, 0x0) 19:35:33 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 19:35:33 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) 19:35:33 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000006000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:35:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:35:33 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x500, 0x0, 0x5}}}}}}, 0x0) [ 1711.967730][T26686] 9pnet_virtio: no channels available for device syz0 19:35:34 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) [ 1712.065152][ T8102] Bluetooth: hci2: Frame reassembly failed (-84) 19:35:34 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x543, 0x0, 0x5}}}}}}, 0x0) [ 1713.389943][T23432] Bluetooth: hci0: command 0x1003 tx timeout [ 1713.396175][T24813] Bluetooth: hci0: sending frame failed (-49) [ 1714.109907][T23432] Bluetooth: hci2: command 0x1003 tx timeout [ 1714.116102][T24813] Bluetooth: hci2: sending frame failed (-49) [ 1714.122608][T23432] Bluetooth: hci1: command 0x1003 tx timeout [ 1714.129068][T24813] Bluetooth: hci1: sending frame failed (-49) [ 1715.469829][T23432] Bluetooth: hci0: command 0x1001 tx timeout [ 1715.475961][T24813] Bluetooth: hci0: sending frame failed (-49) [ 1715.789917][ C0] net_ratelimit: 18 callbacks suppressed [ 1715.789922][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1715.801377][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1715.807371][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1715.813236][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1715.869840][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1715.875619][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1715.949905][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1715.955788][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1716.189892][T23432] Bluetooth: hci1: command 0x1001 tx timeout [ 1716.195958][T23432] Bluetooth: hci2: command 0x1001 tx timeout [ 1716.196019][T24813] Bluetooth: hci1: sending frame failed (-49) [ 1716.202682][T22101] Bluetooth: hci2: sending frame failed (-49) [ 1716.669862][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1716.669887][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1717.549875][T11958] Bluetooth: hci0: command 0x1009 tx timeout [ 1718.269910][T23432] Bluetooth: hci2: command 0x1009 tx timeout [ 1718.269919][T11958] Bluetooth: hci1: command 0x1009 tx timeout [ 1720.829858][ C1] net_ratelimit: 22 callbacks suppressed [ 1720.829888][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1720.835570][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1720.841373][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1720.847001][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:35:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:35:43 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:35:43 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x600, 0x0, 0x5}}}}}}, 0x0) 19:35:43 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) 19:35:43 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x608, 0x0, 0x5}}}}}}, 0x0) [ 1721.561656][T26710] 9pnet_virtio: no channels available for device syz0 [ 1722.029937][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1722.035792][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1722.041673][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1722.047427][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:35:44 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) 19:35:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:35:44 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x689, 0x0, 0x5}}}}}}, 0x0) 19:35:44 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 19:35:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:35:44 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1722.109883][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1722.115700][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:35:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) [ 1722.247891][T26728] 9pnet_virtio: no channels available for device syz0 19:35:44 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x700, 0x0, 0x5}}}}}}, 0x0) 19:35:44 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) 19:35:44 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x806, 0x0, 0x5}}}}}}, 0x0) 19:35:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:35:44 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:35:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:35:44 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0xb00, 0x0, 0x5}}}}}}, 0x0) 19:35:44 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1722.638815][T26754] 9pnet_virtio: no channels available for device syz0 [ 1722.786771][T26764] 9pnet_virtio: no channels available for device syz0 [ 1724.349904][T23435] Bluetooth: hci1: command 0x1003 tx timeout [ 1724.349911][T24838] Bluetooth: hci0: command 0x1003 tx timeout [ 1724.358705][T24835] Bluetooth: hci0: sending frame failed (-49) [ 1724.363467][T22101] Bluetooth: hci1: sending frame failed (-49) [ 1726.189965][ C0] net_ratelimit: 18 callbacks suppressed [ 1726.195655][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1726.201436][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1726.207250][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1726.213024][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1726.269851][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1726.275634][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1726.349896][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1726.355755][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1726.429881][T24838] Bluetooth: hci0: command 0x1001 tx timeout [ 1726.429889][T23435] Bluetooth: hci1: command 0x1001 tx timeout [ 1726.429968][T22101] Bluetooth: hci1: sending frame failed (-49) [ 1726.435970][T24835] Bluetooth: hci0: sending frame failed (-49) [ 1727.069871][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1727.069877][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1728.509889][T23435] Bluetooth: hci1: command 0x1009 tx timeout [ 1728.509896][T24838] Bluetooth: hci0: command 0x1009 tx timeout [ 1731.229877][ C1] net_ratelimit: 22 callbacks suppressed [ 1731.229886][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1731.229927][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1731.235605][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:35:54 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0xd00, 0x0, 0x5}}}}}}, 0x0) 19:35:54 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 19:35:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:35:54 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c000000000000000e000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:35:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:35:54 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) [ 1732.429902][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1732.435753][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1732.441645][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1732.447415][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1732.475768][T26775] 9pnet_virtio: no channels available for device syz0 [ 1732.509911][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1732.515747][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:35:54 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0xe80, 0x0, 0x5}}}}}}, 0x0) 19:35:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) [ 1732.544772][ T7789] Bluetooth: hci0: Frame reassembly failed (-84) [ 1732.589873][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:35:54 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000010000000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:35:54 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) 19:35:54 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x1100, 0x0, 0x5}}}}}}, 0x0) 19:35:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:35:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) [ 1732.763591][T26894] 9pnet_virtio: no channels available for device syz0 [ 1734.589921][T24838] Bluetooth: hci0: command 0x1003 tx timeout [ 1734.596061][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1736.589909][ C0] net_ratelimit: 17 callbacks suppressed [ 1736.595612][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1736.601359][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1736.607122][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1736.612878][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1736.669869][T24838] Bluetooth: hci0: command 0x1001 tx timeout [ 1736.669876][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1736.669928][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1736.687565][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1736.749882][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1736.755707][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1737.469888][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1737.469908][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1738.750095][ T22] Bluetooth: hci0: command 0x1009 tx timeout [ 1741.629894][ C0] net_ratelimit: 22 callbacks suppressed [ 1741.630144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1741.635577][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1741.641327][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1741.647035][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:36:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:36:04 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x1400, 0x0, 0x5}}}}}}, 0x0) 19:36:04 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 19:36:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 19:36:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:36:04 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:36:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:36:04 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x2000, 0x0, 0x5}}}}}}, 0x0) [ 1742.690757][T26918] 9pnet_virtio: no channels available for device syz0 19:36:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, 0x0) 19:36:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) [ 1742.831984][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1742.838702][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1742.844735][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1742.851741][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:36:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r1, 0x400455c8, 0x0) [ 1742.910575][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1742.917083][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:36:04 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x2800, 0x0, 0x5}}}}}}, 0x0) 19:36:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:36:05 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00L\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1743.253436][T26947] 9pnet_virtio: no channels available for device syz0 [ 1744.749845][T24838] Bluetooth: hci0: command 0x1003 tx timeout [ 1744.756093][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1746.829907][T24838] Bluetooth: hci0: command 0x1001 tx timeout [ 1746.836051][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1746.989906][ C0] net_ratelimit: 18 callbacks suppressed [ 1746.989912][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1747.001359][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1747.007145][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1747.012947][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1747.069839][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1747.075631][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1747.149857][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1747.155683][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1747.869870][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1747.869895][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1748.909857][T17693] Bluetooth: hci0: command 0x1009 tx timeout [ 1752.029868][ C1] net_ratelimit: 22 callbacks suppressed [ 1752.029894][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1752.035574][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1752.041340][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1752.047006][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:36:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:36:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, 0x0) 19:36:14 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x3580, 0x0, 0x5}}}}}}, 0x0) 19:36:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:36:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:36:14 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:36:14 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x4000, 0x0, 0x5}}}}}}, 0x0) 19:36:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 1752.923990][T26957] 9pnet_virtio: no channels available for device syz0 19:36:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:36:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, 0x0) 19:36:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 19:36:15 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x4305, 0x0, 0x5}}}}}}, 0x0) 19:36:15 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1753.230589][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1753.237042][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1753.243871][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1753.250061][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:36:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 1753.309888][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1753.315808][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1753.335159][T26984] 9pnet_virtio: no channels available for device syz0 19:36:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) [ 1754.989850][T24838] Bluetooth: hci0: command 0x1003 tx timeout [ 1754.996084][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1757.069886][T24838] Bluetooth: hci0: command 0x1001 tx timeout [ 1757.075996][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1757.389947][ C0] net_ratelimit: 18 callbacks suppressed [ 1757.395649][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1757.401399][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1757.407161][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1757.412915][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1757.469973][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1757.475766][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1757.549861][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1757.555629][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1758.269885][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1758.269934][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1759.149861][T24838] Bluetooth: hci0: command 0x1009 tx timeout [ 1762.429880][ C1] net_ratelimit: 21 callbacks suppressed [ 1762.429889][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1762.429898][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1762.429985][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1762.435606][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:36:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:36:25 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x4788, 0x0, 0x5}}}}}}, 0x0) 19:36:25 executing program 4: 19:36:25 executing program 5: 19:36:25 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00l\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:36:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:36:25 executing program 5: 19:36:25 executing program 4: [ 1763.198584][T27004] 9pnet_virtio: no channels available for device syz0 19:36:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:36:25 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x4888, 0x0, 0x5}}}}}}, 0x0) 19:36:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:36:25 executing program 5: r0 = memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x10\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='?ELF'], 0x4) execveat(r0, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x1000) 19:36:25 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, 0x0, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x12) r2 = socket$packet(0x11, 0x3, 0x300) getegid() r3 = creat(&(0x7f0000000500)='./file1\x00', 0x8) futex(0x0, 0x89, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000009c0)={0x3, 0x70, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x0, 0x40040, 0x1, 0x40, 0x200, 0x9, 0xb4, 0xb04, 0xffffffffffffff75, 0x5, 0x8f20, 0x0, 0x2, 0xc, 0x0, 0xb00, 0x0, 0x0, 0x1ff, 0x8, 0x10001, 0x28a, 0x0, 0x8000009, 0x80, 0x7fffffff, 0x1ff, 0x1, 0x0, 0x800000000, 0x9d, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x3}, 0x2000, 0x10001, 0x33a, 0x6, 0x8, 0x800, 0x3ff}, 0x0, 0xb, r4, 0x2) r5 = inotify_init() getsockopt(r2, 0x1, 0x8000, &(0x7f0000000080)=""/5, &(0x7f00000001c0)=0x5) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) readahead(r0, 0x401, 0xf6fa) openat$cgroup_int(r3, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x202, 0x0) add_key(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) timer_create(0x0, 0x0, &(0x7f0000000a40)=0x0) timer_gettime(r7, &(0x7f0000000a80)) ioctl$sock_inet_SIOCGARP(r5, 0x8954, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x0, 0x100000001}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 19:36:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:36:25 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x6000, 0x0, 0x5}}}}}}, 0x0) [ 1763.639869][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1763.645756][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1763.651653][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1763.657423][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:36:25 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:36:25 executing program 5: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x4788, 0x0, 0x5}}}}}}, 0x0) [ 1763.709884][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1763.715762][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:36:25 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x6488, 0x0, 0x5}}}}}}, 0x0) [ 1763.846589][T27314] 9pnet_virtio: no channels available for device syz0 19:36:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:36:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:36:26 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x800e, 0x0, 0x5}}}}}}, 0x0) 19:36:26 executing program 4: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x40000000, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1764.082013][ T2532] Bluetooth: hci1: Frame reassembly failed (-84) [ 1765.549828][T17693] Bluetooth: hci0: command 0x1003 tx timeout [ 1765.556016][T24835] Bluetooth: hci0: sending frame failed (-49) [ 1766.109968][T24838] Bluetooth: hci1: command 0x1003 tx timeout [ 1766.116190][T24835] Bluetooth: hci1: sending frame failed (-49) [ 1767.629893][T24838] Bluetooth: hci0: command 0x1001 tx timeout [ 1767.637458][T24835] Bluetooth: hci0: sending frame failed (-49) [ 1767.789873][ C0] net_ratelimit: 18 callbacks suppressed [ 1767.789878][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1767.801357][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1767.807136][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1767.812932][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1767.869851][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1767.875613][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1767.949823][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1767.955589][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1768.189898][T24838] Bluetooth: hci1: command 0x1001 tx timeout [ 1768.195990][T24835] Bluetooth: hci1: sending frame failed (-49) [ 1768.669849][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1768.669869][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1769.709855][T17693] Bluetooth: hci0: command 0x1009 tx timeout [ 1770.269882][T17693] Bluetooth: hci1: command 0x1009 tx timeout [ 1772.829867][ C1] net_ratelimit: 22 callbacks suppressed [ 1772.829875][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1772.829920][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1772.835592][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:36:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:36:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:36:35 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x8035, 0x0, 0x5}}}}}}, 0x0) 19:36:35 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00z\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:36:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$packet(0x11, 0x2, 0x300) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) r4 = syz_open_dev$sndpcmp(&(0x7f0000001440)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x4000000000002c7, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000400)="c28e2d935866e5f2d88cdc7dec3cfc3b215bfad72de8c562bac2060a753402e21c6d1ffd0357a12b9153c005cd31d1e99acdf269af9755d22a099fa88e511fcb03cfe748d74b918d58c60b20f39942bbaf8e3676dba8f0c9cf4c5f9e058bf5e982872cb8022bf4fcfd7dd7d263f69c01e5ac11ecc11f35ec9326f8b16a5cb786c6a51ca1381dd6a094e1c4d7606ea67899c2542b4b704dffc4a45c57b283a6e6c7029fde23de5c65702ca736c583f03c8255a12d99f1c5a11d369376cc1b8c44eb91b879e69e3695a09b9b855a732805ed788cb5b16466df1ee4ace380f1b363db1f81fcc11635ce389a5592f9a8caf96414ed9fc15006a3d093ecf79c10db90", 0x100) wait4(r5, &(0x7f0000000080), 0x2, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2) sched_setaffinity(r5, 0x8, &(0x7f0000000140)=0x5fe3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x1) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000320001020000000000000000000000000c00020000000000000000005653ee05e3a39dcbd6c0c674ab31f547c757263b5695db1f04135360b7ea006f993d3cebe30aa81a9903896422875e"], 0x20}}, 0x0) r8 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r8, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r8, 0x0) connect(r6, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') [ 1774.029846][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1774.035702][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1774.041603][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1774.047385][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:36:36 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x8100, 0x0, 0x5}}}}}}, 0x0) [ 1774.075576][T27373] 9pnet_virtio: no channels available for device syz0 [ 1774.085985][T27380] tc_dump_action: action bad kind [ 1774.109881][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1774.115736][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:36:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) [ 1774.189856][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:36:36 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x8847, 0x0, 0x5}}}}}}, 0x0) 19:36:36 executing program 4: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x86ddffff00000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:36:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x400401, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r5 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x1000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r4}}, {@loose='loose'}, {@version_9p2000='version=9p2000'}, {@version_u='version=9p2000.u'}, {@cache_mmap='cache=mmap'}, {@access_uid={'access', 0x3d, r5}}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@dont_appraise='dont_appraise'}, {@audit='audit'}, {@fowner_eq={'fowner', 0x3d, r6}}]}}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') sendfile(r1, r7, 0x0, 0x800000bf) 19:36:36 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x8848, 0x0, 0x5}}}}}}, 0x0) 19:36:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) [ 1776.110142][T23762] Bluetooth: hci0: command 0x1003 tx timeout [ 1776.116302][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1778.189852][T17693] Bluetooth: hci0: command 0x1001 tx timeout [ 1778.189884][ C0] net_ratelimit: 17 callbacks suppressed [ 1778.189914][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1778.195989][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1778.201568][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1778.201681][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1778.224868][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1778.269857][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1778.275625][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1778.349862][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1778.355646][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1779.069873][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1779.069900][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1780.269843][T17693] Bluetooth: hci0: command 0x1009 tx timeout [ 1783.229854][ C1] net_ratelimit: 22 callbacks suppressed [ 1783.229863][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1783.229882][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1783.235581][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1783.241317][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:36:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:36:46 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000030000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:36:46 executing program 4: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8035000000000000, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 19:36:46 executing program 5 (fault-call:4 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:36:46 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x8864, 0x0, 0x5}}}}}}, 0x0) 19:36:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) [ 1784.276731][T27410] 9pnet_virtio: no channels available for device syz0 [ 1784.280837][T27411] FAULT_INJECTION: forcing a failure. [ 1784.280837][T27411] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.330526][T27411] CPU: 1 PID: 27411 Comm: syz-executor.5 Not tainted 5.1.0-rc1+ #35 [ 1784.332814][ T7789] Bluetooth: hci0: Frame reassembly failed (-84) [ 1784.338527][T27411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1784.338539][T27411] Call Trace: [ 1784.358236][T27411] dump_stack+0x172/0x1f0 [ 1784.362581][T27411] should_fail.cold+0xa/0x15 [ 1784.367191][T27411] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1784.373020][T27411] ? ___might_sleep+0x163/0x280 [ 1784.377895][T27411] __should_failslab+0x121/0x190 [ 1784.382847][T27411] should_failslab+0x9/0x14 [ 1784.387361][T27411] kmem_cache_alloc_trace+0x2d1/0x760 [ 1784.392741][T27411] ? ___might_sleep+0x163/0x280 [ 1784.397692][T27411] hci_alloc_dev+0x43/0x1d00 [ 1784.402540][T27411] hci_uart_tty_ioctl+0x2d7/0xb00 [ 1784.407617][T27411] tty_ioctl+0xac9/0x14d0 [ 1784.411962][T27411] ? hci_uart_init_work+0x150/0x150 [ 1784.417180][T27411] ? tty_register_device+0x40/0x40 [ 1784.422310][T27411] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1784.428554][T27411] ? tomoyo_init_request_info+0x105/0x1d0 [ 1784.429885][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1784.434278][T27411] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1784.440059][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1784.446211][T27411] ? tomoyo_path_number_perm+0x263/0x520 [ 1784.452050][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1784.457539][T27411] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1784.463308][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1784.469041][T27411] ? smack_log+0x415/0x540 19:36:46 executing program 4 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 19:36:46 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x8906, 0x0, 0x5}}}}}}, 0x0) [ 1784.469061][T27411] ? __lockdep_free_key_range+0x120/0x120 [ 1784.484891][T27411] ? tty_register_device+0x40/0x40 [ 1784.490023][T27411] do_vfs_ioctl+0xd6e/0x1390 [ 1784.494624][T27411] ? ioctl_preallocate+0x210/0x210 [ 1784.499741][T27411] ? smack_file_ioctl+0x196/0x310 [ 1784.504776][T27411] ? smack_inode_rename+0x2d0/0x2d0 [ 1784.509990][T27411] ? fput_many+0x12c/0x1a0 [ 1784.514416][T27411] ? tomoyo_file_ioctl+0x23/0x30 [ 1784.519339][T27411] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1784.525573][T27411] ? security_file_ioctl+0x93/0xc0 [ 1784.530697][T27411] ksys_ioctl+0xab/0xd0 [ 1784.535029][T27411] __x64_sys_ioctl+0x73/0xb0 [ 1784.539615][T27411] do_syscall_64+0x103/0x610 [ 1784.544215][T27411] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1784.550109][T27411] RIP: 0033:0x458209 [ 1784.554009][T27411] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:36:46 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000050000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1784.573611][T27411] RSP: 002b:00007f1a1768ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1784.582022][T27411] RAX: ffffffffffffffda RBX: 00007f1a1768ac90 RCX: 0000000000458209 [ 1784.590031][T27411] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 1784.597997][T27411] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1784.605951][T27411] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a1768b6d4 [ 1784.613909][T27411] R13: 00000000004c09f8 R14: 00000000004d2770 R15: 0000000000000005 [ 1784.622295][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:36:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) [ 1784.628080][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1784.636360][T27411] Bluetooth: Can't allocate HCI device 19:36:46 executing program 5 (fault-call:4 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) [ 1784.754352][T27527] 9pnet_virtio: no channels available for device syz0 19:36:46 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0xf000, 0x0, 0x5}}}}}}, 0x0) [ 1784.820656][T27530] FAULT_INJECTION: forcing a failure. [ 1784.820656][T27530] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.886464][T27530] CPU: 0 PID: 27530 Comm: syz-executor.4 Not tainted 5.1.0-rc1+ #35 [ 1784.894058][T27536] FAULT_INJECTION: forcing a failure. [ 1784.894058][T27536] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.894486][T27530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1784.894506][T27530] Call Trace: [ 1784.894540][T27530] dump_stack+0x172/0x1f0 [ 1784.894567][T27530] should_fail.cold+0xa/0x15 [ 1784.929373][T27530] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1784.935195][T27530] ? ___might_sleep+0x163/0x280 [ 1784.940058][T27530] __should_failslab+0x121/0x190 [ 1784.945010][T27530] should_failslab+0x9/0x14 [ 1784.949533][T27530] kmem_cache_alloc_node_trace+0x270/0x720 [ 1784.955346][T27530] ? perf_trace_lock+0xeb/0x510 [ 1784.960201][T27530] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1784.966464][T27530] __get_vm_area_node+0x12b/0x3a0 [ 1784.971525][T27530] __vmalloc_node_range+0xd4/0x790 [ 1784.976645][T27530] ? n_tty_open+0x1b/0x170 [ 1784.981063][T27530] ? tty_set_ldisc+0x268/0x690 [ 1784.985838][T27530] ? n_tty_open+0x1b/0x170 [ 1784.990261][T27530] ? n_tty_set_termios+0xe70/0xe70 [ 1784.995377][T27530] vzalloc+0x6b/0x90 [ 1784.999280][T27530] ? n_tty_open+0x1b/0x170 [ 1785.003704][T27530] n_tty_open+0x1b/0x170 [ 1785.007954][T27530] ? n_tty_set_termios+0xe70/0xe70 [ 1785.013072][T27530] tty_ldisc_open.isra.0+0x8b/0xe0 [ 1785.018190][T27530] tty_set_ldisc+0x2d7/0x690 [ 1785.022788][T27530] tty_ioctl+0xe69/0x14d0 [ 1785.027126][T27530] ? tty_register_device+0x40/0x40 [ 1785.032238][T27530] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1785.038478][T27530] ? tomoyo_init_request_info+0x105/0x1d0 [ 1785.044217][T27530] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1785.050459][T27530] ? tomoyo_path_number_perm+0x263/0x520 [ 1785.056105][T27530] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1785.061914][T27530] ? __lockdep_free_key_range+0x120/0x120 [ 1785.067658][T27530] ? __fget+0x35a/0x550 [ 1785.071824][T27530] ? tty_register_device+0x40/0x40 [ 1785.076938][T27530] do_vfs_ioctl+0xd6e/0x1390 [ 1785.081559][T27530] ? ioctl_preallocate+0x210/0x210 [ 1785.086684][T27530] ? smack_file_ioctl+0x196/0x310 [ 1785.091705][T27530] ? smack_inode_rename+0x2d0/0x2d0 [ 1785.096918][T27530] ? fput_many+0x12c/0x1a0 [ 1785.101340][T27530] ? tomoyo_file_ioctl+0x23/0x30 [ 1785.106276][T27530] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1785.112533][T27530] ? security_file_ioctl+0x93/0xc0 [ 1785.117654][T27530] ksys_ioctl+0xab/0xd0 [ 1785.121820][T27530] __x64_sys_ioctl+0x73/0xb0 [ 1785.126417][T27530] do_syscall_64+0x103/0x610 [ 1785.131020][T27530] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1785.136915][T27530] RIP: 0033:0x458209 [ 1785.140808][T27530] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1785.160408][T27530] RSP: 002b:00007fd81a177c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1785.168818][T27530] RAX: ffffffffffffffda RBX: 00007fd81a177c90 RCX: 0000000000458209 [ 1785.176787][T27530] RDX: 0000000020000000 RSI: 0000000000005423 RDI: 0000000000000003 [ 1785.184754][T27530] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1785.192736][T27530] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd81a1786d4 [ 1785.200705][T27530] R13: 00000000004c2472 R14: 00000000004d4e10 R15: 0000000000000004 [ 1785.208703][T27536] CPU: 1 PID: 27536 Comm: syz-executor.5 Not tainted 5.1.0-rc1+ #35 [ 1785.216691][T27536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1785.226742][T27536] Call Trace: [ 1785.230047][T27536] dump_stack+0x172/0x1f0 [ 1785.233686][T27530] syz-executor.4: vmalloc: allocation failure: 9088 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1785.234387][T27536] should_fail.cold+0xa/0x15 [ 1785.234409][T27536] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1785.234431][T27536] ? ___might_sleep+0x163/0x280 [ 1785.263758][T27536] __should_failslab+0x121/0x190 [ 1785.268702][T27536] should_failslab+0x9/0x14 [ 1785.273208][T27536] kmem_cache_alloc_trace+0x2d1/0x760 [ 1785.278681][T27536] ? pm_runtime_init+0x311/0x3b0 [ 1785.283678][T27536] ? device_initialize+0x1a1/0x440 [ 1785.288807][T27536] h4_open+0x46/0x160 [ 1785.292796][T27536] hci_uart_tty_ioctl+0x709/0xb00 [ 1785.297826][T27536] tty_ioctl+0xac9/0x14d0 [ 1785.302158][T27536] ? hci_uart_init_work+0x150/0x150 [ 1785.307357][T27536] ? tty_register_device+0x40/0x40 [ 1785.312469][T27536] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1785.318725][T27536] ? tomoyo_init_request_info+0x105/0x1d0 [ 1785.324452][T27536] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1785.330697][T27536] ? tomoyo_path_number_perm+0x263/0x520 [ 1785.336336][T27536] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1785.342138][T27536] ? smack_log+0x415/0x540 [ 1785.346558][T27536] ? __lockdep_free_key_range+0x120/0x120 [ 1785.352302][T27536] ? tty_register_device+0x40/0x40 [ 1785.357419][T27536] do_vfs_ioctl+0xd6e/0x1390 [ 1785.362024][T27536] ? ioctl_preallocate+0x210/0x210 [ 1785.367137][T27536] ? smack_file_ioctl+0x196/0x310 [ 1785.372165][T27536] ? smack_inode_rename+0x2d0/0x2d0 [ 1785.377373][T27536] ? fput_many+0x12c/0x1a0 [ 1785.381796][T27536] ? tomoyo_file_ioctl+0x23/0x30 [ 1785.386833][T27536] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1785.393100][T27536] ? security_file_ioctl+0x93/0xc0 [ 1785.398228][T27536] ksys_ioctl+0xab/0xd0 [ 1785.402401][T27536] __x64_sys_ioctl+0x73/0xb0 [ 1785.407007][T27536] do_syscall_64+0x103/0x610 [ 1785.411620][T27536] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1785.417531][T27536] RIP: 0033:0x458209 [ 1785.421433][T27536] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1785.441064][T27536] RSP: 002b:00007f1a1768ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1785.449501][T27536] RAX: ffffffffffffffda RBX: 00007f1a1768ac90 RCX: 0000000000458209 [ 1785.457489][T27536] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 1785.465483][T27536] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1785.473478][T27536] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a1768b6d4 [ 1785.481474][T27536] R13: 00000000004c09f8 R14: 00000000004d2770 R15: 0000000000000005 [ 1785.490439][T27530] CPU: 0 PID: 27530 Comm: syz-executor.4 Not tainted 5.1.0-rc1+ #35 [ 1785.498455][T27530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1785.508542][T27530] Call Trace: [ 1785.508576][T27530] dump_stack+0x172/0x1f0 [ 1785.508615][T27530] warn_alloc.cold+0x87/0x17f [ 1785.508635][T27530] ? zone_watermark_ok_safe+0x260/0x260 [ 1785.508654][T27530] ? rcu_read_lock_sched_held+0x110/0x130 [ 1785.508685][T27530] ? __get_vm_area_node+0x2df/0x3a0 [ 1785.508711][T27530] __vmalloc_node_range+0x48a/0x790 [ 1785.508736][T27530] ? tty_set_ldisc+0x268/0x690 [ 1785.516353][T27530] ? n_tty_open+0x1b/0x170 [ 1785.516370][T27530] ? n_tty_set_termios+0xe70/0xe70 [ 1785.516390][T27530] vzalloc+0x6b/0x90 [ 1785.516406][T27530] ? n_tty_open+0x1b/0x170 [ 1785.516423][T27530] n_tty_open+0x1b/0x170 [ 1785.516441][T27530] ? n_tty_set_termios+0xe70/0xe70 [ 1785.516461][T27530] tty_ldisc_open.isra.0+0x8b/0xe0 [ 1785.580223][T27530] tty_set_ldisc+0x2d7/0x690 [ 1785.584855][T27530] tty_ioctl+0xe69/0x14d0 [ 1785.589232][T27530] ? tty_register_device+0x40/0x40 [ 1785.594375][T27530] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1785.600659][T27530] ? tomoyo_init_request_info+0x105/0x1d0 [ 1785.606900][T27530] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1785.606912][T27530] ? tomoyo_path_number_perm+0x263/0x520 [ 1785.606922][T27530] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1785.606933][T27530] ? __lockdep_free_key_range+0x120/0x120 [ 1785.606950][T27530] ? __fget+0x35a/0x550 [ 1785.606968][T27530] ? tty_register_device+0x40/0x40 [ 1785.606981][T27530] do_vfs_ioctl+0xd6e/0x1390 [ 1785.606994][T27530] ? ioctl_preallocate+0x210/0x210 [ 1785.607002][T27530] ? smack_file_ioctl+0x196/0x310 [ 1785.607010][T27530] ? smack_inode_rename+0x2d0/0x2d0 [ 1785.607024][T27530] ? fput_many+0x12c/0x1a0 [ 1785.607037][T27530] ? tomoyo_file_ioctl+0x23/0x30 [ 1785.607046][T27530] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1785.607067][T27530] ? security_file_ioctl+0x93/0xc0 [ 1785.607083][T27530] ksys_ioctl+0xab/0xd0 [ 1785.619018][T27530] __x64_sys_ioctl+0x73/0xb0 [ 1785.619038][T27530] do_syscall_64+0x103/0x610 [ 1785.619060][T27530] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1785.619073][T27530] RIP: 0033:0x458209 [ 1785.619090][T27530] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1785.619097][T27530] RSP: 002b:00007fd81a177c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1785.619112][T27530] RAX: ffffffffffffffda RBX: 00007fd81a177c90 RCX: 0000000000458209 [ 1785.619121][T27530] RDX: 0000000020000000 RSI: 0000000000005423 RDI: 0000000000000003 [ 1785.619130][T27530] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1785.619139][T27530] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd81a1786d4 [ 1785.619148][T27530] R13: 00000000004c2472 R14: 00000000004d4e10 R15: 0000000000000004 [ 1785.623562][T27530] Mem-Info: [ 1785.689487][T27530] active_anon:180248 inactive_anon:2187 isolated_anon:0 [ 1785.689487][T27530] active_file:21834 inactive_file:26314 isolated_file:0 [ 1785.689487][T27530] unevictable:514 dirty:86 writeback:1 unstable:0 [ 1785.689487][T27530] slab_reclaimable:17941 slab_unreclaimable:105523 [ 1785.689487][T27530] mapped:58688 shmem:257 pagetables:4081 bounce:0 [ 1785.689487][T27530] free:1040259 free_pcp:565 free_cma:0 [ 1785.727764][T27530] Node 0 active_anon:720992kB inactive_anon:8748kB active_file:87192kB inactive_file:105256kB unevictable:2056kB isolated(anon):0kB isolated(file):0kB mapped:234852kB dirty:344kB writeback:4kB shmem:1028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 362496kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1785.847721][T27530] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1785.875648][T27530] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1785.904826][T27530] lowmem_reserve[]: 0 2553 2555 2555 [ 1785.910358][T27530] Node 0 DMA32 free:360868kB min:36232kB low:45288kB high:54344kB active_anon:720992kB inactive_anon:8748kB active_file:87192kB inactive_file:105256kB unevictable:2056kB writepending:348kB present:3129332kB managed:2617996kB mlocked:2048kB kernel_stack:11264kB pagetables:16324kB bounce:0kB free_pcp:2340kB local_pcp:1320kB free_cma:0kB [ 1785.941949][T27530] lowmem_reserve[]: 0 0 2 2 [ 1785.946505][T27530] Node 0 Normal free:12kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1785.973263][T27530] lowmem_reserve[]: 0 0 0 0 [ 1785.978099][T27530] Node 1 Normal free:3784128kB min:53624kB low:67028kB high:80432kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1786.006679][T27530] lowmem_reserve[]: 0 0 0 0 [ 1786.011332][T27530] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 1786.025776][T27530] Node 0 DMA32: 10413*4kB (UME) 4047*8kB (UME) 985*16kB (UME) 261*32kB (UME) 229*64kB (UM) 53*128kB (UM) 24*256kB (UM) 7*512kB (UME) 8*1024kB (UM) 7*2048kB (UME) 51*4096kB (UM) = 360732kB [ 1786.044422][T27530] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1786.056713][T27530] Node 1 Normal: 68*4kB (UME) 238*8kB (UME) 244*16kB (UME) 54*32kB (UE) 19*64kB (UME) 9*128kB (UE) 6*256kB (UME) 6*512kB (UM) 3*1024kB (ME) 1*2048kB (U) 919*4096kB (M) = 3784128kB [ 1786.074637][T27530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1786.084324][T27530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1786.093708][T27530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1786.103369][T27530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1786.112726][T27530] 48406 total pagecache pages [ 1786.117409][T27530] 0 pages in swap cache [ 1786.121643][T27530] Swap cache stats: add 0, delete 0, find 0/0 [ 1786.127720][T27530] Free swap = 0kB [ 1786.131552][T27530] Total swap = 0kB [ 1786.135338][T27530] 1965979 pages RAM [ 1786.139132][T27530] 0 pages HighMem/MovableOnly [ 1786.144082][T27530] 339406 pages reserved [ 1786.148245][T27530] 0 pages cma reserved [ 1786.349896][T23762] Bluetooth: hci0: command 0x1003 tx timeout [ 1786.356265][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1788.429916][T23762] Bluetooth: hci0: command 0x1001 tx timeout [ 1788.436033][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1788.589873][ C0] net_ratelimit: 18 callbacks suppressed [ 1788.589879][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1788.601314][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1788.607133][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1788.612928][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1788.749873][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1788.755714][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1788.761563][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1788.767333][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1789.469895][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1789.475697][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1790.509845][ T22] Bluetooth: hci0: command 0x1009 tx timeout [ 1793.629896][ C0] net_ratelimit: 22 callbacks suppressed [ 1793.629902][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1793.641403][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1793.789937][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1793.795852][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:36:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:36:56 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000000060000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:36:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:36:56 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0xf0ffff, 0x0, 0x5}}}}}}, 0x0) 19:36:56 executing program 5 (fault-call:4 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:36:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1794.508076][T27553] FAULT_INJECTION: forcing a failure. [ 1794.508076][T27553] name failslab, interval 1, probability 0, space 0, times 0 [ 1794.523596][T27547] 9pnet_virtio: no channels available for device syz0 19:36:56 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x1000000, 0x0, 0x5}}}}}}, 0x0) [ 1794.567064][ T7789] Bluetooth: hci1: Frame reassembly failed (-84) [ 1794.586891][T27553] CPU: 1 PID: 27553 Comm: syz-executor.5 Not tainted 5.1.0-rc1+ #35 [ 1794.594921][T27553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1794.604981][T27553] Call Trace: [ 1794.608290][T27553] dump_stack+0x172/0x1f0 [ 1794.612641][T27553] should_fail.cold+0xa/0x15 [ 1794.617249][T27553] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1794.623073][T27553] ? ___might_sleep+0x163/0x280 [ 1794.627936][T27553] __should_failslab+0x121/0x190 [ 1794.632885][T27553] should_failslab+0x9/0x14 [ 1794.637392][T27553] __kmalloc+0x2dc/0x740 [ 1794.641734][T27553] ? alloc_workqueue+0x13e/0xf30 [ 1794.646687][T27553] alloc_workqueue+0x13e/0xf30 [ 1794.651467][T27553] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1794.657200][T27553] ? scnprintf+0x140/0x140 [ 1794.661640][T27553] ? kmem_cache_alloc_trace+0x354/0x760 [ 1794.667199][T27553] hci_register_dev+0x1b8/0x860 [ 1794.672057][T27553] ? __raw_spin_lock_init+0x2d/0x100 [ 1794.677385][T27553] hci_uart_tty_ioctl+0x766/0xb00 [ 1794.682421][T27553] tty_ioctl+0xac9/0x14d0 [ 1794.686757][T27553] ? hci_uart_init_work+0x150/0x150 [ 1794.691967][T27553] ? tty_register_device+0x40/0x40 [ 1794.697083][T27553] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1794.703330][T27553] ? tomoyo_init_request_info+0x105/0x1d0 [ 1794.709060][T27553] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1794.715301][T27553] ? tomoyo_path_number_perm+0x263/0x520 [ 1794.720947][T27553] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1794.727155][T27553] ? smack_log+0x415/0x540 [ 1794.731609][T27553] ? __lockdep_free_key_range+0x120/0x120 [ 1794.737357][T27553] ? tty_register_device+0x40/0x40 [ 1794.742479][T27553] do_vfs_ioctl+0xd6e/0x1390 [ 1794.747090][T27553] ? ioctl_preallocate+0x210/0x210 [ 1794.752204][T27553] ? smack_file_ioctl+0x196/0x310 [ 1794.757233][T27553] ? smack_inode_rename+0x2d0/0x2d0 [ 1794.762450][T27553] ? fput_many+0x12c/0x1a0 19:36:56 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1794.766889][T27553] ? tomoyo_file_ioctl+0x23/0x30 [ 1794.771834][T27553] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1794.778079][T27553] ? security_file_ioctl+0x93/0xc0 [ 1794.783200][T27553] ksys_ioctl+0xab/0xd0 [ 1794.787367][T27553] __x64_sys_ioctl+0x73/0xb0 [ 1794.791972][T27553] do_syscall_64+0x103/0x610 [ 1794.796580][T27553] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1794.802472][T27553] RIP: 0033:0x458209 [ 1794.806380][T27553] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1794.825994][T27553] RSP: 002b:00007f1a1768ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1794.829867][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1794.834423][T27553] RAX: ffffffffffffffda RBX: 00007f1a1768ac90 RCX: 0000000000458209 [ 1794.834433][T27553] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 1794.834442][T27553] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 19:36:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) [ 1794.834452][T27553] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a1768b6d4 [ 1794.834462][T27553] R13: 00000000004c09f8 R14: 00000000004d2770 R15: 0000000000000005 [ 1794.837368][T27553] Bluetooth: Can't register HCI device [ 1794.840309][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1794.840420][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1794.856400][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:36:56 executing program 5 (fault-call:4 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:36:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x2, &(0x7f0000000000)) [ 1794.989895][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1794.995731][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:36:57 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x2000000, 0x0, 0x5}}}}}}, 0x0) [ 1795.050937][T27572] FAULT_INJECTION: forcing a failure. [ 1795.050937][T27572] name failslab, interval 1, probability 0, space 0, times 0 [ 1795.067750][T27570] 9pnet_virtio: no channels available for device syz0 [ 1795.102303][T27572] CPU: 0 PID: 27572 Comm: syz-executor.5 Not tainted 5.1.0-rc1+ #35 [ 1795.110310][T27572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1795.120370][T27572] Call Trace: [ 1795.123680][T27572] dump_stack+0x172/0x1f0 [ 1795.128027][T27572] should_fail.cold+0xa/0x15 [ 1795.132636][T27572] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1795.138461][T27572] ? ___might_sleep+0x163/0x280 [ 1795.143332][T27572] __should_failslab+0x121/0x190 [ 1795.148277][T27572] should_failslab+0x9/0x14 [ 1795.152784][T27572] __kmalloc+0x2dc/0x740 [ 1795.157042][T27572] ? alloc_workqueue+0x13e/0xf30 [ 1795.162001][T27572] alloc_workqueue+0x13e/0xf30 [ 1795.166784][T27572] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1795.172526][T27572] ? scnprintf+0x140/0x140 [ 1795.176960][T27572] ? kmem_cache_alloc_trace+0x354/0x760 [ 1795.182533][T27572] hci_register_dev+0x1b8/0x860 [ 1795.187391][T27572] ? __raw_spin_lock_init+0x2d/0x100 [ 1795.192688][T27572] hci_uart_tty_ioctl+0x766/0xb00 [ 1795.197726][T27572] tty_ioctl+0xac9/0x14d0 [ 1795.202060][T27572] ? hci_uart_init_work+0x150/0x150 [ 1795.207265][T27572] ? tty_register_device+0x40/0x40 [ 1795.212384][T27572] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1795.218641][T27572] ? tomoyo_init_request_info+0x105/0x1d0 [ 1795.224368][T27572] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1795.230611][T27572] ? tomoyo_path_number_perm+0x263/0x520 [ 1795.236255][T27572] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1795.242062][T27572] ? smack_log+0x415/0x540 [ 1795.246485][T27572] ? __lockdep_free_key_range+0x120/0x120 [ 1795.252255][T27572] ? tty_register_device+0x40/0x40 [ 1795.257375][T27572] do_vfs_ioctl+0xd6e/0x1390 [ 1795.261976][T27572] ? ioctl_preallocate+0x210/0x210 [ 1795.267093][T27572] ? smack_file_ioctl+0x196/0x310 [ 1795.272119][T27572] ? smack_inode_rename+0x2d0/0x2d0 [ 1795.277327][T27572] ? fput_many+0x12c/0x1a0 [ 1795.281753][T27572] ? tomoyo_file_ioctl+0x23/0x30 [ 1795.286713][T27572] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1795.292962][T27572] ? security_file_ioctl+0x93/0xc0 [ 1795.298087][T27572] ksys_ioctl+0xab/0xd0 [ 1795.302255][T27572] __x64_sys_ioctl+0x73/0xb0 [ 1795.306850][T27572] do_syscall_64+0x103/0x610 [ 1795.306873][T27572] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1795.306886][T27572] RIP: 0033:0x458209 [ 1795.306906][T27572] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1795.340852][T27572] RSP: 002b:00007f1a1768ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1795.349267][T27572] RAX: ffffffffffffffda RBX: 00007f1a1768ac90 RCX: 0000000000458209 [ 1795.357241][T27572] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 1795.365210][T27572] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1795.373172][T27572] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a1768b6d4 [ 1795.381142][T27572] R13: 00000000004c09f8 R14: 00000000004d2770 R15: 0000000000000005 [ 1795.400298][T18947] Bluetooth: Invalid header checksum [ 1795.402059][T27572] Bluetooth: Can't register HCI device [ 1795.405901][T18947] Bluetooth: Invalid header checksum [ 1796.589939][T23762] Bluetooth: hci1: command 0x1003 tx timeout [ 1796.596116][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1798.679840][T23762] Bluetooth: hci1: command 0x1001 tx timeout [ 1798.685955][ T7196] Bluetooth: hci1: sending frame failed (-49) [ 1798.989878][ C0] net_ratelimit: 18 callbacks suppressed [ 1798.995581][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1799.001351][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1799.007129][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1799.012881][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1799.149855][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1799.155633][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1799.161469][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1799.167234][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1799.869900][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1799.875769][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1800.749887][ T22] Bluetooth: hci1: command 0x1009 tx timeout [ 1804.029900][ C0] net_ratelimit: 22 callbacks suppressed [ 1804.035590][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1804.041365][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1804.189842][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1804.195620][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:37:06 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:37:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:37:06 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x3000000, 0x0, 0x5}}}}}}, 0x0) 19:37:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:37:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5409, &(0x7f0000000000)) 19:37:06 executing program 5 (fault-call:4 fault-nth:4): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) [ 1804.766623][T27594] 9pnet_virtio: no channels available for device syz0 [ 1804.787960][T27596] FAULT_INJECTION: forcing a failure. [ 1804.787960][T27596] name failslab, interval 1, probability 0, space 0, times 0 [ 1804.828807][T18947] Bluetooth: hci0: Frame reassembly failed (-84) [ 1804.857831][T27596] CPU: 0 PID: 27596 Comm: syz-executor.5 Not tainted 5.1.0-rc1+ #35 [ 1804.865825][T27596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1804.875885][T27596] Call Trace: 19:37:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) [ 1804.879194][T27596] dump_stack+0x172/0x1f0 [ 1804.883549][T27596] should_fail.cold+0xa/0x15 [ 1804.888160][T27596] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1804.893982][T27596] ? ___might_sleep+0x163/0x280 [ 1804.898843][T27596] __should_failslab+0x121/0x190 [ 1804.903794][T27596] should_failslab+0x9/0x14 [ 1804.908307][T27596] __kmalloc_track_caller+0x2d8/0x740 [ 1804.913708][T27596] ? pointer+0x910/0x910 [ 1804.917957][T27596] ? set_precision+0x180/0x180 [ 1804.922729][T27596] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1804.928370][T27596] ? kasprintf+0xbb/0xf0 [ 1804.932626][T27596] kvasprintf+0xc8/0x170 [ 1804.936876][T27596] ? bust_spinlocks+0xe0/0xe0 [ 1804.941565][T27596] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1804.947293][T27596] ? find_next_bit+0x107/0x130 [ 1804.952067][T27596] kasprintf+0xbb/0xf0 [ 1804.956144][T27596] ? kvasprintf_const+0x190/0x190 [ 1804.961191][T27596] ? kasan_check_read+0x11/0x20 [ 1804.966060][T27596] alloc_workqueue+0x4fa/0xf30 [ 1804.970846][T27596] ? workqueue_sysfs_register+0x3f0/0x3f0 19:37:06 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1804.976585][T27596] ? kmem_cache_alloc_trace+0x354/0x760 [ 1804.982146][T27596] hci_register_dev+0x1b8/0x860 [ 1804.987007][T27596] ? __raw_spin_lock_init+0x2d/0x100 [ 1804.992309][T27596] hci_uart_tty_ioctl+0x766/0xb00 [ 1804.997343][T27596] tty_ioctl+0xac9/0x14d0 [ 1805.001679][T27596] ? hci_uart_init_work+0x150/0x150 [ 1805.006879][T27596] ? tty_register_device+0x40/0x40 [ 1805.012004][T27596] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1805.018253][T27596] ? tomoyo_init_request_info+0x105/0x1d0 19:37:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) [ 1805.023988][T27596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1805.030230][T27596] ? tomoyo_path_number_perm+0x263/0x520 [ 1805.035895][T27596] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1805.041701][T27596] ? smack_log+0x415/0x540 [ 1805.041718][T27596] ? __lockdep_free_key_range+0x120/0x120 [ 1805.041759][T27596] ? tty_register_device+0x40/0x40 [ 1805.041780][T27596] do_vfs_ioctl+0xd6e/0x1390 [ 1805.041803][T27596] ? ioctl_preallocate+0x210/0x210 [ 1805.041815][T27596] ? smack_file_ioctl+0x196/0x310 [ 1805.041830][T27596] ? smack_inode_rename+0x2d0/0x2d0 [ 1805.041854][T27596] ? fput_many+0x12c/0x1a0 [ 1805.051973][T27596] ? tomoyo_file_ioctl+0x23/0x30 [ 1805.051989][T27596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1805.052007][T27596] ? security_file_ioctl+0x93/0xc0 [ 1805.052027][T27596] ksys_ioctl+0xab/0xd0 [ 1805.052049][T27596] __x64_sys_ioctl+0x73/0xb0 [ 1805.052071][T27596] do_syscall_64+0x103/0x610 [ 1805.111342][T27596] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1805.117241][T27596] RIP: 0033:0x458209 19:37:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) [ 1805.121144][T27596] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1805.140747][T27596] RSP: 002b:00007f1a1768ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1805.149162][T27596] RAX: ffffffffffffffda RBX: 00007f1a1768ac90 RCX: 0000000000458209 [ 1805.157140][T27596] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 1805.165118][T27596] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 19:37:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:37:07 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x5000000, 0x0, 0x5}}}}}}, 0x0) [ 1805.173098][T27596] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a1768b6d4 [ 1805.189571][T27596] R13: 00000000004c09f8 R14: 00000000004d2770 R15: 0000000000000005 19:37:07 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1805.229864][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1805.235715][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1805.241632][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1805.247428][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:37:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x540b, &(0x7f0000000000)) [ 1805.278762][T18947] Bluetooth: hci1: Frame reassembly failed (-84) 19:37:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) [ 1805.365888][T27714] 9pnet_virtio: no channels available for device syz0 [ 1805.389900][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1805.395780][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1806.829975][T23762] Bluetooth: hci0: command 0x1003 tx timeout [ 1806.836234][T24835] Bluetooth: hci0: sending frame failed (-49) [ 1807.310170][T23762] Bluetooth: hci1: command 0x1003 tx timeout [ 1807.316316][T24835] Bluetooth: hci1: sending frame failed (-49) [ 1808.909976][T23762] Bluetooth: hci0: command 0x1001 tx timeout [ 1808.916072][T24835] Bluetooth: hci0: sending frame failed (-49) [ 1809.389946][ C0] net_ratelimit: 18 callbacks suppressed [ 1809.395643][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1809.401446][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1809.407307][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1809.413097][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1809.418983][T23762] Bluetooth: hci1: command 0x1001 tx timeout [ 1809.425066][T24835] Bluetooth: hci1: sending frame failed (-49) [ 1809.549856][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1809.555637][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1809.561467][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1809.567231][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1810.269857][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1810.275635][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1810.989948][T23762] Bluetooth: hci0: command 0x1009 tx timeout [ 1811.469885][ T22] Bluetooth: hci1: command 0x1009 tx timeout [ 1814.429890][ C0] net_ratelimit: 22 callbacks suppressed [ 1814.435568][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1814.441339][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1814.589819][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1814.595740][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:37:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:37:17 executing program 5 (fault-call:4 fault-nth:5): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:37:17 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x6000000, 0x0, 0x5}}}}}}, 0x0) 19:37:17 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c00000000000000000e0000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:37:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:37:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x540c, &(0x7f0000000000)) 19:37:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2) [ 1815.629845][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1815.635659][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1815.639463][T27737] 9pnet_virtio: no channels available for device syz0 [ 1815.641540][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1815.641586][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:37:17 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x7000000, 0x0, 0x5}}}}}}, 0x0) 19:37:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x540d, &(0x7f0000000000)) [ 1815.743167][T27781] FAULT_INJECTION: forcing a failure. [ 1815.743167][T27781] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.789852][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1815.795669][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1815.824904][T27781] CPU: 1 PID: 27781 Comm: syz-executor.5 Not tainted 5.1.0-rc1+ #35 19:37:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2) [ 1815.832912][T27781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1815.842968][T27781] Call Trace: [ 1815.846277][T27781] dump_stack+0x172/0x1f0 [ 1815.850624][T27781] should_fail.cold+0xa/0x15 [ 1815.855227][T27781] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1815.861569][T27781] ? ___might_sleep+0x163/0x280 [ 1815.866430][T27781] __should_failslab+0x121/0x190 [ 1815.871377][T27781] should_failslab+0x9/0x14 [ 1815.875890][T27781] __kmalloc_track_caller+0x2d8/0x740 [ 1815.881273][T27781] ? pointer+0x910/0x910 [ 1815.885533][T27781] ? set_precision+0x180/0x180 [ 1815.890306][T27781] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1815.895941][T27781] ? kasprintf+0xbb/0xf0 [ 1815.900189][T27781] kvasprintf+0xc8/0x170 [ 1815.904438][T27781] ? bust_spinlocks+0xe0/0xe0 [ 1815.909131][T27781] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1815.914856][T27781] ? find_next_bit+0x107/0x130 [ 1815.919637][T27781] kasprintf+0xbb/0xf0 [ 1815.923714][T27781] ? kvasprintf_const+0x190/0x190 [ 1815.928776][T27781] ? kasan_check_read+0x11/0x20 [ 1815.933645][T27781] alloc_workqueue+0x4fa/0xf30 [ 1815.938427][T27781] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1815.944171][T27781] ? kmem_cache_alloc_trace+0x354/0x760 [ 1815.949728][T27781] hci_register_dev+0x1b8/0x860 [ 1815.954583][T27781] ? __raw_spin_lock_init+0x2d/0x100 [ 1815.959855][T27781] hci_uart_tty_ioctl+0x766/0xb00 [ 1815.964865][T27781] tty_ioctl+0xac9/0x14d0 [ 1815.969178][T27781] ? hci_uart_init_work+0x150/0x150 [ 1815.974359][T27781] ? tty_register_device+0x40/0x40 [ 1815.979456][T27781] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1815.985677][T27781] ? tomoyo_init_request_info+0x105/0x1d0 [ 1815.991381][T27781] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1815.997601][T27781] ? tomoyo_path_number_perm+0x263/0x520 [ 1816.003216][T27781] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1816.009004][T27781] ? smack_log+0x415/0x540 [ 1816.013408][T27781] ? __lockdep_free_key_range+0x120/0x120 [ 1816.019123][T27781] ? tty_register_device+0x40/0x40 [ 1816.024218][T27781] do_vfs_ioctl+0xd6e/0x1390 [ 1816.028794][T27781] ? ioctl_preallocate+0x210/0x210 [ 1816.033914][T27781] ? smack_file_ioctl+0x196/0x310 [ 1816.038921][T27781] ? smack_inode_rename+0x2d0/0x2d0 [ 1816.044108][T27781] ? fput_many+0x12c/0x1a0 [ 1816.048517][T27781] ? tomoyo_file_ioctl+0x23/0x30 [ 1816.053439][T27781] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1816.059671][T27781] ? security_file_ioctl+0x93/0xc0 [ 1816.064781][T27781] ksys_ioctl+0xab/0xd0 [ 1816.068923][T27781] __x64_sys_ioctl+0x73/0xb0 [ 1816.073505][T27781] do_syscall_64+0x103/0x610 [ 1816.078088][T27781] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1816.083982][T27781] RIP: 0033:0x458209 [ 1816.087877][T27781] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1816.107477][T27781] RSP: 002b:00007f1a1768ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1816.116078][T27781] RAX: ffffffffffffffda RBX: 00007f1a1768ac90 RCX: 0000000000458209 [ 1816.124033][T27781] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 1816.132028][T27781] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 19:37:18 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000020100000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1816.140001][T27781] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a1768b6d4 [ 1816.147987][T27781] R13: 00000000004c09f8 R14: 00000000004d2770 R15: 0000000000000005 19:37:18 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x8000000, 0x0, 0x5}}}}}}, 0x0) [ 1816.211187][ T7789] Bluetooth: hci1: Frame reassembly failed (-84) [ 1816.251255][T27854] 9pnet_virtio: no channels available for device syz0 19:37:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:37:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 1817.629849][T23762] Bluetooth: hci0: command 0x1003 tx timeout [ 1817.636006][T24835] Bluetooth: hci0: sending frame failed (-49) [ 1818.269977][T23762] Bluetooth: hci1: command 0x1003 tx timeout [ 1818.276177][T24835] Bluetooth: hci1: sending frame failed (-49) [ 1819.709937][T23762] Bluetooth: hci0: command 0x1001 tx timeout [ 1819.716043][T24835] Bluetooth: hci0: sending frame failed (-49) [ 1819.789871][ C0] net_ratelimit: 18 callbacks suppressed [ 1819.795555][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1819.801306][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1819.807169][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1819.812926][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1819.949854][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1819.955668][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1819.961517][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1819.967279][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1820.349986][T23762] Bluetooth: hci1: command 0x1001 tx timeout [ 1820.356118][T24835] Bluetooth: hci1: sending frame failed (-49) [ 1820.669906][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1820.675751][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1821.789907][T23762] Bluetooth: hci0: command 0x1009 tx timeout [ 1822.429980][T23762] Bluetooth: hci1: command 0x1009 tx timeout [ 1824.829896][ C0] net_ratelimit: 22 callbacks suppressed [ 1824.829903][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1824.841366][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1824.989864][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1824.995675][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1826.029910][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1826.035763][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1826.041600][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1826.047369][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1826.189906][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1826.195822][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:37:28 executing program 5 (fault-call:4 fault-nth:6): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:37:28 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x8060000, 0x0, 0x5}}}}}}, 0x0) 19:37:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5413, &(0x7f0000000000)) 19:37:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r1, 0x400455c8, 0x2) 19:37:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:37:28 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:37:28 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0xb000000, 0x0, 0x5}}}}}}, 0x0) 19:37:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r1, 0x400455c8, 0x2) [ 1826.548082][T27880] 9pnet_virtio: no channels available for device syz0 [ 1826.576284][T27886] FAULT_INJECTION: forcing a failure. [ 1826.576284][T27886] name failslab, interval 1, probability 0, space 0, times 0 19:37:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r1, 0x400455c8, 0x2) [ 1826.691701][T27886] CPU: 1 PID: 27886 Comm: syz-executor.5 Not tainted 5.1.0-rc1+ #35 [ 1826.699726][T27886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1826.709783][T27886] Call Trace: [ 1826.713093][T27886] dump_stack+0x172/0x1f0 [ 1826.717443][T27886] should_fail.cold+0xa/0x15 [ 1826.722053][T27886] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1826.728239][T27886] ? ___might_sleep+0x163/0x280 [ 1826.733103][T27886] __should_failslab+0x121/0x190 19:37:28 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0xd000000, 0x0, 0x5}}}}}}, 0x0) 19:37:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5414, &(0x7f0000000000)) [ 1826.738055][T27886] should_failslab+0x9/0x14 [ 1826.742565][T27886] kmem_cache_alloc_trace+0x2d1/0x760 [ 1826.747940][T27886] ? rcu_read_lock_sched_held+0x110/0x130 [ 1826.753662][T27886] ? __kmalloc+0x5d5/0x740 [ 1826.758102][T27886] alloc_workqueue_attrs+0x82/0x120 [ 1826.763311][T27886] apply_wqattrs_prepare+0xbb/0x970 [ 1826.768549][T27886] apply_workqueue_attrs_locked+0xcb/0x140 [ 1826.774372][T27886] apply_workqueue_attrs+0x31/0x50 [ 1826.779501][T27886] alloc_workqueue+0x663/0xf30 [ 1826.784279][T27886] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1826.790020][T27886] ? kmem_cache_alloc_trace+0x354/0x760 [ 1826.795576][T27886] hci_register_dev+0x1b8/0x860 [ 1826.800428][T27886] ? __raw_spin_lock_init+0x2d/0x100 [ 1826.805722][T27886] hci_uart_tty_ioctl+0x766/0xb00 [ 1826.810766][T27886] tty_ioctl+0xac9/0x14d0 [ 1826.815098][T27886] ? hci_uart_init_work+0x150/0x150 [ 1826.820299][T27886] ? tty_register_device+0x40/0x40 [ 1826.825413][T27886] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1826.831660][T27886] ? tomoyo_init_request_info+0x105/0x1d0 19:37:28 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c736d61002c6f626a5f726f6c653d70726f632c0000000000000010200000000000"]) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1826.837388][T27886] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1826.843633][T27886] ? tomoyo_path_number_perm+0x263/0x520 [ 1826.849272][T27886] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1826.855077][T27886] ? smack_log+0x415/0x540 [ 1826.859987][T27886] ? __lockdep_free_key_range+0x120/0x120 [ 1826.865740][T27886] ? tty_register_device+0x40/0x40 [ 1826.870865][T27886] do_vfs_ioctl+0xd6e/0x1390 [ 1826.875466][T27886] ? ioctl_preallocate+0x210/0x210 [ 1826.880589][T27886] ? smack_file_ioctl+0x196/0x310 [ 1826.885614][T27886] ? smack_inode_rename+0x2d0/0x2d0 [ 1826.890824][T27886] ? fput_many+0x12c/0x1a0 [ 1826.895242][T27886] ? tomoyo_file_ioctl+0x23/0x30 [ 1826.900159][T27886] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1826.906379][T27886] ? security_file_ioctl+0x93/0xc0 [ 1826.911492][T27886] ksys_ioctl+0xab/0xd0 [ 1826.915642][T27886] __x64_sys_ioctl+0x73/0xb0 [ 1826.920214][T27886] do_syscall_64+0x103/0x610 [ 1826.924835][T27886] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1826.930736][T27886] RIP: 0033:0x458209 [ 1826.934609][T27886] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1826.954205][T27886] RSP: 002b:00007f1a1768ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1826.962595][T27886] RAX: ffffffffffffffda RBX: 00007f1a1768ac90 RCX: 0000000000458209 [ 1826.970543][T27886] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 1826.978511][T27886] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1826.986474][T27886] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a1768b6d4 [ 1826.994434][T27886] R13: 00000000004c09f8 R14: 00000000004d2770 R15: 0000000000000005 [ 1827.056062][T27886] Bluetooth: Can't register HCI device 19:37:29 executing program 5 (fault-call:4 fault-nth:7): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:37:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) 19:37:29 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x10000000, 0x0, 0x5}}}}}}, 0x0) [ 1827.136729][T27903] 9pnet_virtio: no channels available for device syz0 [ 1827.297094][T27912] FAULT_INJECTION: forcing a failure. [ 1827.297094][T27912] name failslab, interval 1, probability 0, space 0, times 0 [ 1827.330167][T27912] CPU: 1 PID: 27912 Comm: syz-executor.5 Not tainted 5.1.0-rc1+ #35 [ 1827.338185][T27912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1827.348241][T27912] Call Trace: [ 1827.351546][T27912] dump_stack+0x172/0x1f0 [ 1827.355894][T27912] should_fail.cold+0xa/0x15 [ 1827.360510][T27912] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1827.367549][T27912] ? ___might_sleep+0x163/0x280 [ 1827.372411][T27912] __should_failslab+0x121/0x190 [ 1827.377356][T27912] should_failslab+0x9/0x14 [ 1827.381868][T27912] kmem_cache_alloc_trace+0x2d1/0x760 [ 1827.387243][T27912] ? rcu_read_lock_sched_held+0x110/0x130 [ 1827.392970][T27912] ? __kmalloc+0x5d5/0x740 19:37:29 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00?\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1827.397402][T27912] alloc_workqueue_attrs+0x82/0x120 [ 1827.402623][T27912] apply_wqattrs_prepare+0xc8/0x970 [ 1827.407843][T27912] apply_workqueue_attrs_locked+0xcb/0x140 [ 1827.413659][T27912] apply_workqueue_attrs+0x31/0x50 [ 1827.418777][T27912] alloc_workqueue+0x663/0xf30 [ 1827.423642][T27912] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1827.429381][T27912] ? kmem_cache_alloc_trace+0x354/0x760 [ 1827.434942][T27912] hci_register_dev+0x1b8/0x860 [ 1827.439808][T27912] ? __raw_spin_lock_init+0x2d/0x100 [ 1827.445106][T27912] hci_uart_tty_ioctl+0x766/0xb00 [ 1827.450142][T27912] tty_ioctl+0xac9/0x14d0 [ 1827.454467][T27912] ? hci_uart_init_work+0x150/0x150 [ 1827.459651][T27912] ? tty_register_device+0x40/0x40 [ 1827.464755][T27912] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1827.470990][T27912] ? tomoyo_init_request_info+0x105/0x1d0 [ 1827.476694][T27912] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1827.482921][T27912] ? tomoyo_path_number_perm+0x263/0x520 [ 1827.488534][T27912] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1827.494319][T27912] ? smack_log+0x415/0x540 [ 1827.498714][T27912] ? __lockdep_free_key_range+0x120/0x120 [ 1827.504424][T27912] ? tty_register_device+0x40/0x40 [ 1827.509519][T27912] do_vfs_ioctl+0xd6e/0x1390 [ 1827.514095][T27912] ? ioctl_preallocate+0x210/0x210 [ 1827.519195][T27912] ? smack_file_ioctl+0x196/0x310 [ 1827.524251][T27912] ? smack_inode_rename+0x2d0/0x2d0 [ 1827.529458][T27912] ? fput_many+0x12c/0x1a0 [ 1827.533876][T27912] ? tomoyo_file_ioctl+0x23/0x30 [ 1827.538792][T27912] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1827.545019][T27912] ? security_file_ioctl+0x93/0xc0 [ 1827.550111][T27912] ksys_ioctl+0xab/0xd0 [ 1827.554249][T27912] __x64_sys_ioctl+0x73/0xb0 [ 1827.558821][T27912] do_syscall_64+0x103/0x610 [ 1827.563424][T27912] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1827.569294][T27912] RIP: 0033:0x458209 [ 1827.573185][T27912] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:37:29 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x11000000, 0x0, 0x5}}}}}}, 0x0) [ 1827.592767][T27912] RSP: 002b:00007f1a1768ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1827.601155][T27912] RAX: ffffffffffffffda RBX: 00007f1a1768ac90 RCX: 0000000000458209 [ 1827.609103][T27912] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 1827.617058][T27912] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1827.625034][T27912] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a1768b6d4 [ 1827.633012][T27912] R13: 00000000004c09f8 R14: 00000000004d2770 R15: 0000000000000005 [ 1827.702952][T27912] Bluetooth: Can't register HCI device [ 1827.746656][T27920] 9pnet_virtio: no channels available for device syz0 [ 1828.589850][ T22] Bluetooth: hci0: command 0x1003 tx timeout [ 1828.596074][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1830.189918][ C0] net_ratelimit: 18 callbacks suppressed [ 1830.195636][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1830.201401][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1830.207165][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1830.212922][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1830.349900][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1830.355720][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1830.361583][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1830.367339][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1830.669880][ T22] Bluetooth: hci0: command 0x1001 tx timeout [ 1830.676386][ T7196] Bluetooth: hci0: sending frame failed (-49) [ 1831.149921][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1831.155761][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1832.749874][ T22] Bluetooth: hci0: command 0x1009 tx timeout [ 1835.309897][ C0] net_ratelimit: 22 callbacks suppressed [ 1835.315581][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1835.321382][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1835.389910][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1835.395713][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1836.429872][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1836.435664][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1836.441492][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1836.447272][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1836.589875][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1836.595650][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:37:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:37:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) 19:37:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5415, &(0x7f0000000000)) 19:37:38 executing program 5 (fault-call:4 fault-nth:8): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:37:38 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x14000000, 0x0, 0x5}}}}}}, 0x0) 19:37:38 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:37:38 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x20000000, 0x0, 0x5}}}}}}, 0x0) [ 1836.757597][T27931] 9pnet_virtio: no channels available for device syz0 [ 1836.775779][T27933] FAULT_INJECTION: forcing a failure. [ 1836.775779][T27933] name failslab, interval 1, probability 0, space 0, times 0 [ 1836.838717][T27933] CPU: 0 PID: 27933 Comm: syz-executor.5 Not tainted 5.1.0-rc1+ #35 [ 1836.846761][T27933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1836.856828][T27933] Call Trace: [ 1836.860140][T27933] dump_stack+0x172/0x1f0 [ 1836.864500][T27933] should_fail.cold+0xa/0x15 [ 1836.869116][T27933] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1836.874938][T27933] ? ___might_sleep+0x163/0x280 [ 1836.879802][T27933] __should_failslab+0x121/0x190 [ 1836.884753][T27933] should_failslab+0x9/0x14 [ 1836.889264][T27933] kmem_cache_alloc_trace+0x2d1/0x760 [ 1836.894674][T27933] ? rcu_read_lock_sched_held+0x110/0x130 [ 1836.900400][T27933] ? __kmalloc+0x5d5/0x740 [ 1836.904834][T27933] alloc_workqueue_attrs+0x82/0x120 [ 1836.910044][T27933] apply_wqattrs_prepare+0xc8/0x970 [ 1836.915267][T27933] apply_workqueue_attrs_locked+0xcb/0x140 [ 1836.921086][T27933] apply_workqueue_attrs+0x31/0x50 [ 1836.926211][T27933] alloc_workqueue+0x663/0xf30 [ 1836.930991][T27933] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1836.936731][T27933] ? kmem_cache_alloc_trace+0x354/0x760 [ 1836.942317][T27933] hci_register_dev+0x1b8/0x860 [ 1836.947176][T27933] ? __raw_spin_lock_init+0x2d/0x100 [ 1836.952475][T27933] hci_uart_tty_ioctl+0x766/0xb00 [ 1836.957536][T27933] tty_ioctl+0xac9/0x14d0 [ 1836.961880][T27933] ? hci_uart_init_work+0x150/0x150 [ 1836.967084][T27933] ? tty_register_device+0x40/0x40 [ 1836.972227][T27933] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1836.978475][T27933] ? tomoyo_init_request_info+0x105/0x1d0 19:37:38 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00L\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:37:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) [ 1836.984223][T27933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1836.990516][T27933] ? tomoyo_path_number_perm+0x263/0x520 [ 1836.996157][T27933] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1837.001967][T27933] ? smack_log+0x415/0x540 [ 1837.006388][T27933] ? __lockdep_free_key_range+0x120/0x120 [ 1837.012144][T27933] ? tty_register_device+0x40/0x40 [ 1837.017270][T27933] do_vfs_ioctl+0xd6e/0x1390 [ 1837.017375][T27933] ? ioctl_preallocate+0x210/0x210 [ 1837.017395][T27933] ? smack_file_ioctl+0x196/0x310 [ 1837.027081][T27933] ? smack_inode_rename+0x2d0/0x2d0 [ 1837.027108][T27933] ? fput_many+0x12c/0x1a0 [ 1837.027140][T27933] ? tomoyo_file_ioctl+0x23/0x30 [ 1837.027158][T27933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1837.027175][T27933] ? security_file_ioctl+0x93/0xc0 [ 1837.027195][T27933] ksys_ioctl+0xab/0xd0 [ 1837.027217][T27933] __x64_sys_ioctl+0x73/0xb0 [ 1837.027237][T27933] do_syscall_64+0x103/0x610 [ 1837.027260][T27933] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1837.077301][T27933] RIP: 0033:0x458209 [ 1837.081206][T27933] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1837.100818][T27933] RSP: 002b:00007f1a1768ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1837.109241][T27933] RAX: ffffffffffffffda RBX: 00007f1a1768ac90 RCX: 0000000000458209 [ 1837.117220][T27933] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 1837.119265][T27956] 9pnet_virtio: no channels available for device syz0 [ 1837.125191][T27933] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1837.125202][T27933] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a1768b6d4 [ 1837.125211][T27933] R13: 00000000004c09f8 R14: 00000000004d2770 R15: 0000000000000005 [ 1837.133839][T27565] Bluetooth: Invalid header checksum [ 1837.185449][T27565] Bluetooth: Invalid header checksum 19:37:39 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x28000000, 0x0, 0x5}}}}}}, 0x0) 19:37:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) [ 1837.234818][T27933] Bluetooth: Can't register HCI device 19:37:39 executing program 5 (fault-call:4 fault-nth:9): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) [ 1837.337883][ T2532] Bluetooth: hci0: Frame reassembly failed (-84) [ 1837.415765][T28158] FAULT_INJECTION: forcing a failure. [ 1837.415765][T28158] name failslab, interval 1, probability 0, space 0, times 0 [ 1837.429306][T28158] CPU: 1 PID: 28158 Comm: syz-executor.5 Not tainted 5.1.0-rc1+ #35 [ 1837.437288][T28158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1837.447323][T28158] Call Trace: [ 1837.450599][T28158] dump_stack+0x172/0x1f0 [ 1837.454916][T28158] should_fail.cold+0xa/0x15 [ 1837.459506][T28158] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1837.465308][T28158] ? ___might_sleep+0x163/0x280 [ 1837.470156][T28158] __should_failslab+0x121/0x190 [ 1837.475094][T28158] should_failslab+0x9/0x14 [ 1837.479580][T28158] __kmalloc+0x2dc/0x740 [ 1837.483818][T28158] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1837.489541][T28158] ? pwq_adjust_max_active+0x3b6/0x5c0 [ 1837.494985][T28158] ? alloc_workqueue+0x13e/0xf30 [ 1837.499910][T28158] alloc_workqueue+0x13e/0xf30 [ 1837.504689][T28158] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1837.510429][T28158] ? kmem_cache_alloc_trace+0x354/0x760 [ 1837.515990][T28158] hci_register_dev+0x209/0x860 [ 1837.520849][T28158] hci_uart_tty_ioctl+0x766/0xb00 [ 1837.525874][T28158] tty_ioctl+0xac9/0x14d0 [ 1837.530199][T28158] ? hci_uart_init_work+0x150/0x150 [ 1837.535394][T28158] ? tty_register_device+0x40/0x40 [ 1837.540494][T28158] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1837.546719][T28158] ? tomoyo_init_request_info+0x105/0x1d0 [ 1837.552424][T28158] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1837.558646][T28158] ? tomoyo_path_number_perm+0x263/0x520 [ 1837.564261][T28158] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1837.570056][T28158] ? smack_log+0x415/0x540 [ 1837.574469][T28158] ? __lockdep_free_key_range+0x120/0x120 [ 1837.580210][T28158] ? tty_register_device+0x40/0x40 [ 1837.585319][T28158] do_vfs_ioctl+0xd6e/0x1390 [ 1837.589894][T28158] ? ioctl_preallocate+0x210/0x210 [ 1837.594992][T28158] ? smack_file_ioctl+0x196/0x310 [ 1837.600015][T28158] ? smack_inode_rename+0x2d0/0x2d0 [ 1837.605198][T28158] ? fput_many+0x12c/0x1a0 [ 1837.609615][T28158] ? tomoyo_file_ioctl+0x23/0x30 [ 1837.614553][T28158] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1837.620806][T28158] ? security_file_ioctl+0x93/0xc0 [ 1837.625914][T28158] ksys_ioctl+0xab/0xd0 [ 1837.630051][T28158] __x64_sys_ioctl+0x73/0xb0 [ 1837.634626][T28158] do_syscall_64+0x103/0x610 [ 1837.639201][T28158] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1837.645071][T28158] RIP: 0033:0x458209 [ 1837.648953][T28158] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1837.668557][T28158] RSP: 002b:00007f1a1768ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1837.676963][T28158] RAX: ffffffffffffffda RBX: 00007f1a1768ac90 RCX: 0000000000458209 [ 1837.684931][T28158] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 1837.692884][T28158] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1837.700921][T28158] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a1768b6d4 [ 1837.708872][T28158] R13: 00000000004c09f8 R14: 00000000004d2770 R15: 0000000000000005 [ 1837.725558][T28158] Bluetooth: Can't register HCI device [ 1839.229987][T23762] Bluetooth: hci1: command 0x1003 tx timeout [ 1839.236180][T24835] Bluetooth: hci1: sending frame failed (-49) [ 1839.389913][T23762] Bluetooth: hci0: command 0x1003 tx timeout [ 1839.396146][T24835] Bluetooth: hci0: sending frame failed (-49) [ 1840.589876][ C0] net_ratelimit: 18 callbacks suppressed [ 1840.595564][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1840.601376][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1840.607205][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1840.612945][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1840.749840][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1840.755614][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1840.761506][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1840.767257][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1841.310040][T23762] Bluetooth: hci1: command 0x1001 tx timeout [ 1841.316158][T24835] Bluetooth: hci1: sending frame failed (-49) [ 1841.469865][T23762] Bluetooth: hci0: command 0x1001 tx timeout [ 1841.476049][T24835] Bluetooth: hci0: sending frame failed (-49) [ 1841.549887][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1841.555715][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1843.390043][T23762] Bluetooth: hci1: command 0x1009 tx timeout [ 1843.549910][ T22] Bluetooth: hci0: command 0x1009 tx timeout [ 1845.709912][ C0] net_ratelimit: 22 callbacks suppressed [ 1845.715618][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1845.721399][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1846.029887][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1846.035677][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1846.829880][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1846.835722][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1846.841507][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1846.847235][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1846.989879][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1846.995734][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:37:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:37:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5416, &(0x7f0000000000)) 19:37:49 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) 19:37:49 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x40000000, 0x0, 0x5}}}}}}, 0x0) 19:37:49 executing program 5 (fault-call:4 fault-nth:10): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 19:37:49 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2200080, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) [ 1847.657535][T28164] FAULT_INJECTION: forcing a failure. [ 1847.657535][T28164] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.671225][T28166] 9pnet_virtio: no channels available for device syz0 [ 1847.697273][T28164] CPU: 1 PID: 28164 Comm: syz-executor.5 Not tainted 5.1.0-rc1+ #35 [ 1847.705298][T28164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1847.715360][T28164] Call Trace: [ 1847.718669][T28164] dump_stack+0x172/0x1f0 [ 1847.723027][T28164] should_fail.cold+0xa/0x15 [ 1847.727643][T28164] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1847.733474][T28164] ? ___might_sleep+0x163/0x280 [ 1847.738356][T28164] __should_failslab+0x121/0x190 [ 1847.743305][T28164] should_failslab+0x9/0x14 [ 1847.747821][T28164] kmem_cache_alloc_trace+0x2d1/0x760 19:37:49 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffff8cff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x43050000, 0x0, 0x5}}}}}}, 0x0) [ 1847.753202][T28164] ? rcu_read_lock_sched_held+0x110/0x130 [ 1847.758935][T28164] ? __kmalloc+0x5d5/0x740 [ 1847.763369][T28164] alloc_workqueue_attrs+0x82/0x120 [ 1847.768578][T28164] alloc_workqueue+0x17b/0xf30 [ 1847.773368][T28164] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1847.779381][T28164] ? kmem_cache_alloc_trace+0x354/0x760 [ 1847.784952][T28164] hci_register_dev+0x209/0x860 [ 1847.789850][T28164] hci_uart_tty_ioctl+0x766/0xb00 [ 1847.794892][T28164] tty_ioctl+0xac9/0x14d0 [ 1847.799237][T28164] ? hci_uart_init_work+0x150/0x150 [ 1847.804444][T28164] ? tty_register_device+0x40/0x40 [ 1847.809573][T28164] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1847.816348][T28164] ? tomoyo_init_request_info+0x105/0x1d0 [ 1847.822077][T28164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1847.828312][T28164] ? tomoyo_path_number_perm+0x263/0x520 [ 1847.833958][T28164] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1847.839753][T28164] ? smack_log+0x415/0x540 [ 1847.844172][T28164] ? __lockdep_free_key_range+0x120/0x120 [ 1847.849919][T28164] ? tty_register_device+0x40/0x40 [ 1847.855484][T28164] do_vfs_ioctl+0xd6e/0x1390 [ 1847.861075][T28164] ? ioctl_preallocate+0x210/0x210 [ 1847.866290][T28164] ? smack_file_ioctl+0x196/0x310 [ 1847.875637][T28164] ? smack_inode_rename+0x2d0/0x2d0 [ 1847.882874][T28164] ? fput_many+0x12c/0x1a0 [ 1847.888558][T28164] ? tomoyo_file_ioctl+0x23/0x30 [ 1847.893584][T28164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1847.899824][T28164] ? security_file_ioctl+0x93/0xc0 [ 1847.904947][T28164] ksys_ioctl+0xab/0xd0 [ 1847.909103][T28164] __x64_sys_ioctl+0x73/0xb0 [ 1847.913693][T28164] do_syscall_64+0x103/0x610 [ 1847.918294][T28164] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1847.924196][T28164] RIP: 0033:0x458209 [ 1847.928084][T28164] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1847.947713][T28164] RSP: 002b:00007f1a1768ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 19:37:49 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000000)='syz0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',sma\x00,obj_role=proc,\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x6}, &(0x7f0000000a40)=0x8) fallocate(r1, 0x3, 0x0, 0x8001) seccomp(0x1, 0x1, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x8001, 0x0, 0xc52, 0x5}]}) [ 1847.956112][T28164] RAX: ffffffffffffffda RBX: 00007f1a1768ac90 RCX: 0000000000458209 [ 1847.964077][T28164] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 1847.972041][T28164] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1847.980016][T28164] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a1768b6d4 [ 1847.987986][T28164] R13: 00000000004c09f8 R14: 00000000004d2770 R15: 0000000000000005 [ 1847.998984][T28164] WARNING: CPU: 1 PID: 28164 at kernel/locking/lockdep.c:4925 lockdep_unregister_key+0x1ef/0x4c0 [ 1848.002717][T18947] Bluetooth: Invalid header checksum [ 1848.009515][T28164] Kernel panic - not syncing: panic_on_warn set ... [ 1848.021503][T28164] CPU: 1 PID: 28164 Comm: syz-executor.5 Not tainted 5.1.0-rc1+ #35 [ 1848.022787][T18947] Bluetooth: Invalid header checksum [ 1848.029483][T28164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1848.029488][T28164] Call Trace: [ 1848.029511][T28164] dump_stack+0x172/0x1f0 [ 1848.029528][T28164] ? lockdep_unregister_key+0x130/0x4c0 [ 1848.029570][T28164] panic+0x2cb/0x65c [ 1848.061941][T28164] ? __warn_printk+0xf3/0xf3 [ 1848.066527][T28164] ? lockdep_unregister_key+0x1ef/0x4c0 [ 1848.072061][T28164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1848.078322][T28164] ? __warn.cold+0x5/0x45 [ 1848.082641][T28164] ? lockdep_unregister_key+0x1ef/0x4c0 [ 1848.088190][T28164] __warn.cold+0x20/0x45 [ 1848.092420][T28164] ? lockdep_unregister_key+0x1ef/0x4c0 [ 1848.097956][T28164] report_bug+0x263/0x2b0 [ 1848.102357][T28164] do_error_trap+0x11b/0x200 [ 1848.106952][T28164] do_invalid_op+0x37/0x50 [ 1848.111369][T28164] ? lockdep_unregister_key+0x1ef/0x4c0 [ 1848.117109][T28164] invalid_op+0x14/0x20 [ 1848.121276][T28164] RIP: 0010:lockdep_unregister_key+0x1ef/0x4c0 [ 1848.127415][T28164] Code: 00 00 00 00 00 fc ff df 4c 89 c2 48 c1 ea 03 80 3c 02 00 0f 85 c9 02 00 00 48 b8 00 02 00 00 00 00 ad de 49 89 44 24 08 eb 02 <0f> 0b ba 01 00 00 00 4c 89 e6 4c 89 ff e8 8f de ff ff 4c 89 ff e8 [ 1848.146996][T28164] RSP: 0018:ffff888051937950 EFLAGS: 00010046 [ 1848.153061][T28164] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffffffff12bcb73 [ 1848.161022][T28164] RDX: 1ffffffff14685b5 RSI: 0000000000000000 RDI: ffffffff8a342da8 [ 1848.168986][T28164] RBP: ffff888051937980 R08: 1ffff1100a326f1e R09: ffffed100a326f1f [ 1848.177198][T28164] R10: ffffed100a326f1e R11: 0000000000000003 R12: ffff88805ada5618 [ 1848.185249][T28164] R13: dffffc0000000000 R14: 0000000000000282 R15: ffffffff8a0b7738 [ 1848.193245][T28164] alloc_workqueue+0xc52/0xf30 [ 1848.198024][T28164] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1848.203762][T28164] ? kmem_cache_alloc_trace+0x354/0x760 [ 1848.209300][T28164] hci_register_dev+0x209/0x860 [ 1848.214134][T28164] hci_uart_tty_ioctl+0x766/0xb00 [ 1848.219140][T28164] tty_ioctl+0xac9/0x14d0 [ 1848.223459][T28164] ? hci_uart_init_work+0x150/0x150 [ 1848.228660][T28164] ? tty_register_device+0x40/0x40 [ 1848.233753][T28164] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1848.240015][T28164] ? tomoyo_init_request_info+0x105/0x1d0 [ 1848.245738][T28164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1848.251993][T28164] ? tomoyo_path_number_perm+0x263/0x520 [ 1848.257616][T28164] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1848.263411][T28164] ? smack_log+0x415/0x540 [ 1848.267817][T28164] ? __lockdep_free_key_range+0x120/0x120 [ 1848.273542][T28164] ? tty_register_device+0x40/0x40 [ 1848.278643][T28164] do_vfs_ioctl+0xd6e/0x1390 [ 1848.283320][T28164] ? ioctl_preallocate+0x210/0x210 [ 1848.288419][T28164] ? smack_file_ioctl+0x196/0x310 [ 1848.293524][T28164] ? smack_inode_rename+0x2d0/0x2d0 [ 1848.298724][T28164] ? fput_many+0x12c/0x1a0 [ 1848.303145][T28164] ? tomoyo_file_ioctl+0x23/0x30 [ 1848.308086][T28164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1848.314322][T28164] ? security_file_ioctl+0x93/0xc0 [ 1848.319430][T28164] ksys_ioctl+0xab/0xd0 [ 1848.323583][T28164] __x64_sys_ioctl+0x73/0xb0 [ 1848.328174][T28164] do_syscall_64+0x103/0x610 [ 1848.332772][T28164] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1848.338649][T28164] RIP: 0033:0x458209 [ 1848.342530][T28164] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1848.362131][T28164] RSP: 002b:00007f1a1768ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1848.370538][T28164] RAX: ffffffffffffffda RBX: 00007f1a1768ac90 RCX: 0000000000458209 [ 1848.378504][T28164] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 1848.386452][T28164] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1848.394929][T28164] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a1768b6d4 [ 1848.403156][T28164] R13: 00000000004c09f8 R14: 00000000004d2770 R15: 0000000000000005 [ 1848.412366][T28164] Kernel Offset: disabled [ 1848.416783][T28164] Rebooting in 86400 seconds..