udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") flistxattr(r0, &(0x7f0000000280)=""/42, 0x2a) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40000, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x15, 0x5, 0x6, 0x2, 0x0, 0x70bd29, 0x25dfdbfd}, 0x10}}, 0xc000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video2\x00', 0x2, 0x0) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0]) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x501000, 0x0) r3 = msgget$private(0x0, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) stat(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = geteuid() stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, r2, 0x0, 0x1, &(0x7f0000000540)='\x00'}, 0x30) r9 = gettid() msgctl$IPC_SET(r3, 0x1, &(0x7f00000005c0)={{0x10001, r4, r5, r6, r7, 0x80, 0xff}, 0x0, 0xde, 0x0, 0x7fffffff, 0x8001, 0xb04, r8, r9}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, r0, r1, r0, r1, r1, r1, r0, r0], 0x9) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80002, 0x0) 04:08:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000928, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0xa000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2572.061847][T31326] REISERFS warning (device loop0): reiserfs_fill_super: Cannot allocate commit workqueue 04:08:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000929, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="750ef7d273726a7100000000000000"]) 04:08:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7573726a71756f74613d7379d7bbab"]) 04:08:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2572.533577][T31361] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 2572.560779][T31357] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "usrjq" 04:08:36 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) fcntl$addseals(r0, 0x409, 0xa) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x5, 0x101000) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null, @bpq0='bpq0\x00', 0x0, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x2, @mcast1, 0x6}, @in6={0xa, 0x4e22, 0x7fff8, @mcast2, 0x10000}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e20, @empty}], 0x58) 04:08:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0xb000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000092a, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:36 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @random="01c079903c3b"}, 0x10) rseq(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x2, 0x3, 0x4, 0xbc0}, 0x6}, 0x20, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000020000000000000000000000002e454b75891fd5ce144bf11d0af40d541ee64532f14c5e2dd32fe5b4bd0fc54f4669f8976396e8aba3c020e513fd89fa0d212b6a3125158cfdcff1df32d177a3fe15c32a43eabc6ff7a4bcc9efaaba528725e4"]) r3 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000300)) r4 = open(&(0x7f0000000200)='./file0\x00', 0x283, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000000240)={0x8, 0x400, 0x5}) 04:08:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0b8fec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=syz', 0x3d}]}) 04:08:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0xc000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000092b, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:36 executing program 0: io_setup(0x7f, &(0x7f0000000000)=0x0) r1 = fsopen(&(0x7f00000000c0)='sysv\x00', 0x0) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x8fa, r1, &(0x7f0000000100)="1364ebaa80afc60650bf1daf54789a590218d63f44cd7aeea8b2937e23f7a5913a79a98735485877316f8e97253a29f595d5cb4f1a0e1fa03e219c0eafc735", 0x3f, 0x5, 0x0, 0x1, r2}]) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f00000001c0)={0x5, 0x1}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=/yz'}]}) [ 2573.085489][T31392] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. 04:08:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2573.252361][T31409] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. 04:08:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000092c, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2573.386795][T31418] REISERFS warning (device loop0): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 04:08:36 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1ff, 0x402) ioctl$TCXONC(r1, 0x540a, 0xfaf) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:08:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0xd000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = socket$netlink(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="220000002000070700be00e2080007010a0000020000000000000004050016008000", 0x22) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=syz', 0x3d}]}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{}, {}, {}, {}]}) 04:08:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000092d, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_CAPBSET_DROP(0x18, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7573726a7182d5478366aa5f642c00"]) 04:08:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0xe000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2573.895152][T31442] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "usrjqGf_d" 04:08:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000092e, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2573.981229][T31447] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. 04:08:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="84979622a85de604629af8d6b8e3cecef6308ca4aeb5275526e7673a411486062811d0e89086718694efcd3fba5def4db3bd1d5f2cdc75e65884e2b67e5d716f09dcf58a054fecae2a79c02ba727e9a3d51e13ea77f75b36a555cb5b6b151c5e0c5a314990c490a53ba711254f8a686e400b5eeb24e8236b925b2c911b04e61be508") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=/yz'}]}) r1 = dup3(r0, r0, 0x80000) connect$netrom(r1, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) [ 2574.126220][T31468] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. 04:08:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0xf000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2574.456116][T31478] REISERFS warning (device loop0): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. [ 2574.598239][T31483] REISERFS warning (device loop0): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 04:08:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)=0x6) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="ed66d364ce7573720819000054206d00797a3d00"]) 04:08:37 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) ioctl(r0, 0x9, &(0x7f0000000000)="9174bf72d320c7e1690908d6def1a7f6653a59a8a4e76781a299d28a2e547d1a58a1a13339e1c72cd95e908109e95442421bf5e8e47d2ce17826388ef412f94468108504ff60c101856ca76ed0d8b495050e871027ac36d23e9367f4bc2dd1e77297989684128164a9084a9b97a8d3746533755b9db1dd8190ef6b19fd1a442b16156bfac256bbbd9b2d91be755ae13e914963d2fc8b2cff34a1af") write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x400, 0x200000) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:08:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x10000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000092f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7573726a71f71a3a756f74613d2f7902de39297f7957e7121a6845fc7fff818325f79cf8170d76b5ae553824c2ba31e3cfd7dcbb64c436787619c6c55bed3aa81b2a2722013208d84efc224fae1d3958f673ce563cf4a0d7ff9464d81d0b804cd5bc094bacdd75b36f9236e79e87eacb68497390385d892d02882046a26c6bf729f590f6dbf16a207084488d1db9101f"]) 04:08:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x11000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2574.854253][T31502] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "fdusr" 04:08:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000930, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2574.959676][T31511] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "usrjq:uota=/y9)yWhE% vU8$º1ܻd6xv[:*'"2N"O9XsVoJ\x02u\x9b\x94a\xac', 0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101000, 0x0) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x81041}, 0xc) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:08:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000932, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00QS\xbc\xc0\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x13000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2) openat$snapshot(0xffffffffffffff9c, 0xffffffffffffffff, 0x8000, 0x0) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f00000001c0)={0x3, @null, r3}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0xc0000, 0x0) write$UHID_DESTROY(r4, &(0x7f0000000080), 0x4) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") prctl$PR_GET_SECUREBITS(0x1b) close(r0) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r5 = creat(&(0x7f0000000000)='./file0\x00', 0xf5) write$ppp(r5, 0x0, 0x0) [ 2575.665868][T31558] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003 04:08:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7fffffff, 0x40000) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f00000000c0)="0e8de7bfc35b4a4e4d2075178f625115fbb2bd501ae5a350eb80079396a2bc01c7142ec4b297c4bf14c6369432e9bddc55d45b9d371eaf837c329ee22b17005a9440f7316de3be219304266cb5be74d8d44f562e6f992beb8e08d541149d", 0x5e) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7573720271756f74613d73797a3d00"]) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={r2, 0x800}, &(0x7f00000002c0)=0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) connect(r1, &(0x7f0000000340)=@ll={0x11, 0x1a, r4, 0x1, 0x0, 0x6, @local}, 0x80) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000500)={r3, 0x3, 0x7, 0xbc8f}, 0x10) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000540)={0x4}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) 04:08:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x14000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000933, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7573728900010000800000000000000000033000"]) 04:08:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2576.058715][T31581] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "usrquota=syz=" 04:08:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000934, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2576.205601][T31588] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "usr" [ 2576.224219][T31586] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "usrquota=syz=" [ 2576.335159][T31603] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "usr" 04:08:39 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000000)={0x6, 0x0, 0x5, {0x3, 0x7, 0x5, 0x4}}) 04:08:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x15000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000935, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=syz', 0x3d}]}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xcf, 0x80b00) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000000c0)=""/27) 04:08:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e23}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, {0x2, 0x4e21, @loopback}, 0x48, 0x0, 0x0, 0x0, 0xfffffffffffffff8, &(0x7f0000000000)='team0\x00', 0x2, 0x4, 0x2}) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = accept(r0, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f00000001c0)=0x80) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000400)="0de2280181007ae1eff911ef2a0d711889a87fe94dd6755ab8f97750e804c15ddd828950ff0abc462815e9aad375dbd64e6a41fbb8cfc87de047dcdbec02ff2d3e97b6b29ee530367385b5b02a364645362a64ffdb16852e127385221b340ba62288042e2c111547f70d1314d70a745f98433e68e54bb78dc420ad25759ef290b2ce63e2cf39963a99ff8d222e594a6d80cd9e933257f2db490b315863") r2 = accept4(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000002c0)=0xffffffffffffff61, 0x800) bind$pptp(r3, &(0x7f0000000240)={0x18, 0x2, {0x0, @empty}}, 0x1e) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f0000000380)=0xc) getpgrp(r4) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=/yz'}]}) 04:08:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000936, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2576.716816][T31616] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 2576.759683][T31625] REISERFS warning (device loop0): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 04:08:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x16000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000937, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2576.986297][T31623] REISERFS warning (device loop2): reiserfs_fill_super: Cannot allocate commit workqueue 04:08:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=/yz'}]}) signalfd(r0, &(0x7f0000000140)={0x3f}, 0x8) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80000, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f00000000c0)="29416229ab9be278ff361519a13aca96e0dbd6fd718cfcc05bdd8f481e57767f46248964b39e339d640d49889715e80baaf980bb7729c3453d261169ce499ce8112c891e10cc52943875fca3ecc90d3b6d7ee102379da65541302bc65ccc938497889fb2f59a0ba014e210c945471a9c0593515a8e9503efdb7774e7bb1c4a25") [ 2577.238289][T31656] REISERFS warning (device loop0): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 04:08:40 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) 04:08:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x18000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x480000, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000180)={0x18, 0x0, 0x5, {0x9}}, 0x18) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000100)="e1b82cab79e1b52b60a79a803bde7f2fcc19713f2122377adf3424c489465664d6aae73cd036cbb77ff49c8a32fcf8691eb442812f08292ad9eaea0ecbe54478d626e6bd") ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=syz', 0x3d}]}) 04:08:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000938, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x40000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2577.403603][T31667] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 2577.417748][T31662] REISERFS warning (device loop0): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 04:08:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000939, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x1000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=/yz'}]}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) write$P9_RSTATu(r1, &(0x7f0000000400)={0x8e, 0x7d, 0x2, {{0x0, 0x6c, 0x0, 0x6f2, {0xa, 0x2, 0x7}, 0x0, 0x5, 0x8, 0x62, 0xd, 'usrjquota=/yz', 0x1f, 'eth1,em0}vboxnet1*md5sum*vmnet1', 0x0, '', 0xd, 'usrjquota=/yz'}, 0xd, 'usrjquota=/yz', r2, r3, r4}}, 0x8e) 04:08:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=syz', 0x3d}]}) msgget(0x3, 0x442) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x480000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) 04:08:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000093a, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2577.848213][T31701] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 2577.900653][T31704] REISERFS warning (device loop0): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. [ 2578.062380][T31711] REISERFS warning (device loop0): reiserfs_fill_super: Cannot allocate commit workqueue [ 2578.072884][T31713] REISERFS warning (device loop2): reiserfs_fill_super: Cannot allocate commit workqueue 04:08:41 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000280)={0xf, 0x1f, 0x1}, 0xf) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x98, 0x248483) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r3, 0x308, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdef6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000200)={0xc0ff}) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x1, 0x3a36775f, 0x3, @stepwise={0x2f80000000000000, 0x2, 0x100000000, 0xffffffffd6306812, 0x8, 0x6bfc}}) 04:08:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x10010000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000093b, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=/yz'}]}) 04:08:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=syz', 0x3d}]}) 04:08:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000093c, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x100000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2578.476263][T31742] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 2578.532248][T31738] REISERFS warning (device loop0): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 04:08:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000093d, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x200000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2578.713044][T31762] REISERFS warning (device loop0): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 04:08:42 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000180)="272fec3173282674e979322712ccb878f0b8952dbb7db1dfac035a3c03bdaa48b06e27d71225b7c5c1518ccc7849ea8da67397e9c46ffd46da9bcad21e62f93761890da1b0a084b1941e19c24936d01b89612b9d934c16c5baf86672558feca86488d150bff7e38f91b0fbf81ee80a77ea9f9457f3df356210e71367b20a4f518a1c2b017891948c28c1") write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYPTR, @ANYRES32=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESOCT=0x0], 0x54) fcntl$setlease(r0, 0x400, 0x2) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:08:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000093e, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='usrjquot\t\x00syz=\x00']) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x40) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) 04:08:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x300000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75736f83e6534f48f4ab27c9726a71"]) [ 2579.190966][T31789] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "usrjquot " 04:08:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000093f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\xbcSQ\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2579.244644][T31785] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "usoSOH'rjq" 04:08:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x400000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:42 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)={0xd, 0x5, "b6f9e3d446"}, 0x240400) 04:08:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000940, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x3eb6b21c3ed57cb5) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e23, 0x2, @rand_addr="dae96a242c8ed9be39d8488e51bc165e", 0x7fffffff}, {0xa, 0x4e20, 0x9, @loopback, 0xff}, 0xffff, [0x6, 0x401, 0x81, 0x8, 0x3, 0x7706, 0x8, 0x10000]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=/yz'}]}) 04:08:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x500000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000941, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x220400, 0xad6edf1d24e41811) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000180)={0x7, "4edf8396f0831ae694ad869fa4aa930380cd480c6f1bf3e711c53fa0c1978656", 0x5, 0xe01, 0x600, 0x6000000000, 0x2, 0x1d6cf888b762529c, 0x7}) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7573726b71797a695f253d00d30c00000000"]) 04:08:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000942, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x600000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2579.841145][T31832] REISERFS warning (device loop0): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 04:08:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000943, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2579.984939][T31840] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "usrkqyzi_%=" 04:08:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2580.232647][T31845] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "usrkqyzi_%=" 04:08:43 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x20800, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000180)) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x4000) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000100)={@local, @multicast1, 0x0, 0xa, [@multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x8, @multicast2, @remote, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x2a}, @loopback]}, 0x38) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000040)=0x400) fcntl$addseals(r0, 0x409, 0xa) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000080)={0x17, 0x0, 0xc, 0xa, 0x9, 0x81}) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x24000, 0x0) 04:08:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x700000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) mount$9p_xen(&(0x7f0000000000)='ppp0system\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x8000, &(0x7f0000000240)={'trans=xen,', {[{@nodevmap='nodevmap'}, {@fscache='fscache'}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@fowner_lt={'fowner<', r1}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@measure='measure'}]}}) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=/yz'}]}) 04:08:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000944, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x480000) bind$isdn(r1, &(0x7f00000000c0)={0x22, 0x61d3, 0x4, 0x5ff, 0x4}, 0x6) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7573726a71756f74613ddd11e07900"]) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000100)={{0x505f8749, 0xff}, {0x1e4e, 0x3f}, 0x5f5, 0x7, 0x101}) 04:08:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000945, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x800000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2580.455797][T31872] REISERFS warning (device loop0): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. [ 2580.557346][T31885] 9pnet: Could not find request transport: xen [ 2580.632840][T31887] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. 04:08:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000946, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', {0x2, 0x4e20, @local}}) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=/yz'}]}) 04:08:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2580.977263][T31911] REISERFS warning (device loop0): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 04:08:44 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0xa2102, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000040)={0x0, 0x7, 0x401, 0x7d9}) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:08:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x900000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000947, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000100)=0xdac1) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000000000)='usrjquota=syz'}, 0x30) ptrace(0x10, r2) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7573726a71756f74613d73797a3d0005e2bc3591766d9b4de5ea448e69a8e23b23c24fb3097af2e794a7786843dc894eec93a0a998865e54450333f9061d88de62e400337712345be940217a96f958f5ed8f722817f748e58f3a6472e08d5a8e06e796f7862d253c3b2c34fd75d6428510933837c4244596a06f8df21ced278154384aa3ca38175df743521509a706fedded48a22be02f2ec87e9cdd0b980fcf0cdc54f9d020afc45e4a"]) 04:08:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sysinfo(&(0x7f0000000180)=""/192) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be0705fc787926db7b3a0a326ed4fd1cf41a8eb37144bced8783bfb549b84fd3461c2113bac2ad2f77f142c17ad04d9b61de04bb748de0131ec3cfe9cf8b088281b03eaa56a529215b86f2b68c6e688398934c903a1b651cf7f538d5ca424581416d0e944b8b4c0159f054757e814e0e6f58c5b01d32b75c96165db8c39f8d238a598ddbf1d97cd563045d4a8fb1c35d218fd24adef8e026d23454cee5e804daff0851de6e3577fea36") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=/yz'}]}) 04:08:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000948, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2581.397397][T31927] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. 04:08:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0xa00000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2581.447938][T31935] REISERFS warning (device loop0): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 04:08:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000949, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0426726a71756f74693d2f23fb1491cb6806af09340918ad5eec"]) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dlm-control\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000003700)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000003800)=0xe8) getpeername$packet(r1, &(0x7f0000003840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003880)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000038c0)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000039c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000380)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000003b00)=0xfffffffffffffed7) accept$packet(r1, &(0x7f000000a7c0)={0x11, 0x0, 0x0}, &(0x7f000000a800)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f000000ab40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f000000ab00)={&(0x7f000000a840)={0x28c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x224, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xbdd}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x99e}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x9, 0x7, 0x0, 0x7ff}, {0x2, 0x47, 0xffff, 0x1c}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}]}}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r9 = dup3(r0, r0, 0x0) ioctl$CAPI_GET_ERRCODE(r9, 0x80024321, &(0x7f0000000480)) [ 2581.956694][T31966] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "&rjquoti=/#h 4 ^" 04:08:45 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r0, &(0x7f00000001c0)={0x90, 0x0, 0x7, {0x5, 0x2, 0x8, 0x3, 0x6, 0x3ee2, {0x3, 0x81, 0x7fff, 0xffff, 0x1, 0x7, 0x7, 0x3, 0x2, 0x7f, 0x6a, r1, r2, 0xf0, 0x3ff}}}, 0x90) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:08:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7589f70000756f74613d73797a0600"]) 04:08:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000094a, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0xb00000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2582.085905][T31967] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "&rjquoti=/#h 4 ^" 04:08:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000094b, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0xc00000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2582.167965][T31987] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "u" 04:08:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000094c, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=/yz'}]}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100000000, 0x200000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x80000, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000100)={0x3, r2}) 04:08:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000094d, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2582.451878][T32009] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "u" 04:08:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2582.543072][T32018] REISERFS warning (device loop0): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 04:08:45 executing program 4: r0 = memfd_create(&(0x7f0000000000)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) r1 = socket(0x5, 0x807, 0x3) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2) write$FUSE_GETXATTR(r2, &(0x7f0000000140)={0xf5}, 0x18) read$FUSE(r2, 0x0, 0x6) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000040)={0x64}) 04:08:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0xd00000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000094e, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x1, 0x100) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f00000005c0)={0x37, 0x4af, 0x5, 0x9, 0x8, 0x81}) r2 = dup(r0) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) fcntl$setflags(r2, 0x2, 0x1) 04:08:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2582.762248][T32022] REISERFS warning (device loop0): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 04:08:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x103200) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x844) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) 04:08:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000094f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0xe00000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000950, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2583.119079][T32044] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "us2jquota=syz=" 04:08:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000951, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0xf00000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2583.252906][T32067] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 2583.416977][T32044] REISERFS warning (device loop2): reiserfs_fill_super: Cannot allocate commit workqueue 04:08:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000952, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x1000000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:46 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r0 = syz_open_dev$vcsn(&(0x7f0000002d40)='/dev/vcs#\x00', 0x3f, 0x4800) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000002d80), &(0x7f0000002dc0)=0x4) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7571752f74613d2f797a2c53d23734b877b49154c56fe901bb479c10d904fc2d03413d0aff6df7a7253c9a0aaef9f3ebb0e80516b2690368210c5478dbbb7e511d6d1cbfb192b8740f19904979f9d97c7453754cf320fd74cdeec495779a46da7e9199a7ae2e206841b3838fcd6cf880e877118fbbdf4d15bebef2cdc0895ff7aec3ff2d64e2ec516a56ac93a37f159a9623ca4ed1ce2a41fa9ebbd1b10c523a94c468d0a0122c"]) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0xc040, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sync() getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000380)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vlan0\x00', r2}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f00000000c0)={0x154, 0xfffffffffffffff8, 0x8000, 0x5c088ebf, 0x3ff, 0x9, 0x1f, 0x20, 0x0}, &(0x7f0000000100)=0x20) bind$pptp(r1, &(0x7f00000003c0)={0x18, 0x2, {0x1, @broadcast}}, 0x1e) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r3, 0xd865, 0x30}, &(0x7f0000000180)=0xc) 04:08:46 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x200) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000040)=0x5) r1 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r1, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0) 04:08:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4000, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) sendmsg$kcm(r1, &(0x7f0000001740)={&(0x7f0000000240)=@hci={0x1f, r2, 0x3}, 0x80, &(0x7f0000001500)=[{&(0x7f00000002c0)="4491706bd75d144d44f4906bfff26e8209e954b8d6ecedb55cbac2aa1df2affac2696657dd4c33693ba0403a5038c19fce8029572f48131c5709e02d9806ffac40e2b983991b00b0269dfae67f3961d6453860ee6218fbf1a93e6109557f0f7187b0ac41704d29bfb4af8d5d46ee44702a9546cc0e1b64c4d280b2ad1318a49171fc910dd7a496d2109dfc8be7bf9ef5803eda79316c635e3f234a7aa1c50168dd06a86a57b59b5231807d938370bdcc9ccc56b1c96f730bfdc31a40b2491322608508cc432dbfb442ce8d413ad60852f3182034a13cdd5c940a0041a481db4211267349e7b09d924c0cec3bfc9f4e8a893436", 0xf3}, {&(0x7f0000000400)="bb6d916f76da5b7c7a79ca2a1cb844bfe958be9f3cc0a9e9e9c10f2539ac32b350b48080856ad08b976cf3785c5fadad0a44977af65eafd20041c1b6c9aeea29539acb7c00b64952c88356f56912a844cd04d79dcfd6067e9fec67ceee3ab1a575362d9b4c59062ec9a27429f59beef0fff4954cb4453c97c96afed5a31164a082166a52d0ddaed14de91183f9fb7d7feccef36142f37b6a6cfe266894d789233392a434686b298ee0f9278cb04844865c799958c3950f7a818306cb38b627b641dc8b739f0db3fa00c80fafd967b4e595ec71c08bab25cdae9b", 0xda}, {&(0x7f0000000500)="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", 0x1000}], 0x3, &(0x7f0000001540)=[{0xc0, 0x11f, 0x4, "7e8fa1d4d86d67caf181ea2fa12ad3560b760e3a3cc93be10ca4aff35a71c96a2a52764cfc59dfd63f88dcd3693906aae1ab2516147c9146d42e4ae0430949f24a79c7d9f8c558a22279b38c5e2f7bbf1a61ea70ed5b95e9cdf9d69416e8ebf110971562330180d537bf8bae2bfbecf330114c17e0b98f7389d1949fbbb514cb58d1383e4b11afb07da038ec3264e95e42507c58f6c80f3226ea071fb3b41cb6c0bf1abb5e9f1e45785baba48946be"}, {0xf8, 0x10d, 0x2, "28601c19c3b83a6012e30768baa14775bea21cb993a6dd9d2ccff062e3cc6f122ee15234daed41c826f61b8e572186a6dce72a1573e9e7387ec8fff2adc8e8b8c39815a53fd77cef19bb7af88be2aa22a5ccac7a45f2d22e7cabe07617bd77b555ce49ebce641eba08c4696bfe0229fb9937bf2ea2705c1b664221d5ca3ef070e57a276e4465d43d2a9166ce42b83b710e5389a8c214deff7c5a79ec4a41af7ae674b037867ea02577a3d09eeadc4a0a32b524daa614f6eebb923ac47a315f6c412f484c967ec611091e7c4f2e9b72d2678fc9e5e47ae55595a2d471dda8e0f1a33ca8cbecb2"}, {0x38, 0x10d, 0x7, "6948076d3c1c1a5869998c369fd1fb64de296ccc8e79561c576b5ec14eb41fbe1637d5"}], 0x1f0}, 0x40000) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=syz', 0x3d}]}) 04:08:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000953, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2583.821449][T32097] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. 04:08:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000954, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x1100000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2583.892072][T32096] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "uqu/ta=/yz" [ 2584.004287][T32113] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. 04:08:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000955, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:47 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x422000) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000000c0)=0x4000, 0x4) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=/yz'}]}) 04:08:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x1200000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7573726a71c87374613d73797a3d00"]) 04:08:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2584.408658][T32139] REISERFS warning (device loop0): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. [ 2584.474918][T32143] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "usrjqsta=syz=" 04:08:47 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[], 0x0) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:08:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000956, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x1300000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:47 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000400)={{0xa, 0x4e23, 0x6, @loopback, 0x31a2}, {0xa, 0x4e21, 0x7, @empty, 0x8}, 0x6, [0x2be2, 0x3ff, 0x9, 0x4a1, 0x5, 0x80000000, 0x3ff, 0xbd0e]}, 0x5c) fchown(r0, r1, r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl(r4, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='usrjqumta=/yz,\x00']) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) [ 2584.720482][T32157] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "usrjqsta=syz=" 04:08:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000957, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x1400000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2584.918413][T32165] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "usrjqumta=/yz" 04:08:48 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) fstatfs(r0, &(0x7f0000000080)=""/76) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) r1 = socket$isdn_base(0x22, 0x3, 0x0) connect(r1, &(0x7f0000000000)=@generic={0x10, "559af4e9134e472c49eeafffbfbcc0fc821f279998327b2e36db11b175cf471b1e1ab38e24836dc5ca72032fc6cc78363b0bd97ccb95fda962250ada025bae0a2b305e71f60ff68a27558004d00c536d68cb0003a890e681655e69b10bd81715021612d17e95c5906abcae31135944f8f03e059e5c3f68616a4ce706d615"}, 0x80) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:08:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000958, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xfff, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00e19b634f73ee0caae1c49de46bf90b28700e0000"]) 04:08:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x1500000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2585.111128][T32175] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "usrjqumta=/yz" 04:08:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000959, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=/yz'}]}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x6) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), 0x4) 04:08:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x1600000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2585.316182][T32206] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 04:08:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000095a, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2585.492403][T32223] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 2585.517101][T32218] REISERFS warning (device loop0): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 04:08:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x1800000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2585.810092][T32229] REISERFS warning (device loop0): reiserfs_fill_super: Cannot allocate commit workqueue 04:08:49 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = semget$private(0x0, 0x3, 0x10c) semop(r1, &(0x7f0000000000)=[{0x7, 0x200, 0x1000}, {0x3, 0x4, 0x800}, {0x3, 0x6, 0x1800}], 0x3) 04:08:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r0}) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75731c61f2489a697a4c5604c8a548"]) 04:08:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000095b, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x4000000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="11dca50351e0e7aa5b9e06") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) 04:08:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000095c, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0xffffffff00000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2586.281248][T32266] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 2586.296520][T32259] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "usaHizLVȥH" 04:08:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\xbcSQ\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x2], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000095d, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2586.623070][T32286] REISERFS warning (device loop2): reiserfs_fill_super: Cannot allocate commit workqueue 04:08:50 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) write$binfmt_elf32(r0, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x9, 0x8, 0x100000000, 0x100000000, 0x3, 0x3e, 0x81, 0x3a3, 0x38, 0x316, 0x400, 0x0, 0x20, 0x2, 0x1, 0x7, 0x3}, [{0x6, 0x9, 0x1, 0x8, 0x40, 0x3, 0x80, 0x100000001}], "d98a972ed3ddbf64ff8cc662", [[], [], [], [], [], [], []]}, 0x764) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) sync_file_range(r1, 0x3, 0x91d, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0xff, 0x30}, 0xc) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x8, 0x0, 0x10003, 0x7}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000080)={0x1, r2}) 04:08:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=/yz'}]}) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 04:08:50 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00QS\xbc\xc0\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000095e, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x3], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x101000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000140)={0x2, 0x401}) ptrace$setregset(0x4205, r1, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)="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", 0x1000}) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="759672340c756f74613d737083dda1"]) 04:08:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000095f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:50 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x4], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2587.086717][T32316] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "ur4 uota=spݡ" [ 2587.097924][T32314] REISERFS warning (device loop0): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 04:08:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000960, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2587.309352][T32339] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "ur4 uota=spݡ" 04:08:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000961, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:50 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x5d, &(0x7f00000000c0)="c4c66e02", 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x48, &(0x7f0000000040)={@loopback, @broadcast, @remote}, 0xc) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e008e1) 04:08:50 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x8000) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000300)=0x7) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000002c0)={0x1, 0xfffffffffffffc00, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r2, 0x400, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}, 0x7fffffff}, @ib={0x1b, 0x4392, 0x100000000, {"f14405beb2953bdb06e5b5a5962347f3"}, 0x80000000, 0x5b25, 0x8}}}, 0x118) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111, 0xb}}, 0x20) 04:08:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x5], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:50 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=syz', 0x3d}]}) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x101, 0x3ad832bd9c23b48a) 04:08:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000962, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:50 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000963, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x6], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2587.775334][T32363] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. 04:08:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2587.947733][T32368] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. 04:08:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000964, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x7], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:51 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) fallocate(r1, 0x0, 0xffff, 0x9) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) sendfile(r0, r1, 0x0, 0x9b4d) sendfile(r0, r1, 0x0, 0x10001) 04:08:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=syz', 0x3d}]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {&(0x7f0000000400), r2}}, 0x18) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000140)={0x3f, 0x1, 0x7fff, 0xfff, 0xe3c6}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x603, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) 04:08:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000965, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x8], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:51 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xa8401, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0xfffffffffffffe18) r1 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x800000003) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r1, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0) 04:08:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000966, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2588.512187][T32402] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. 04:08:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x9], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2588.704039][T32414] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. 04:08:51 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) 04:08:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xa], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000967, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=syz', 0x3d}]}) 04:08:52 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:52 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x8000800080008002, 0x5bcd) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) select(0x40, &(0x7f0000000240), 0x0, &(0x7f00000002c0)={0x8, 0x9, 0xffffffff, 0x81, 0xff, 0x3, 0x0, 0x3}, &(0x7f0000000300)) 04:08:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xb], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2589.182092][T32452] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. 04:08:52 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x86d68630189b2ba1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400000, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000000c0)={0x1, r2}) fcntl$addseals(r0, 0x409, 0xa) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x2000) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=r3, 0x4) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:08:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000968, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:52 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:52 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xc], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2589.388310][T32465] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. 04:08:52 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000969, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:52 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xc9, 0x800) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000000c0)=0x200007) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0x1, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=syz', 0x3d}]}) 04:08:52 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:08:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xd], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000096a, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:52 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:52 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2589.839429][T32495] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. 04:08:53 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000096b, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:53 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\xbcSQ\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xe], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:53 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100)=0x4, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000000000000ffe, &(0x7f0000000400)="d518dc59d62a76df5c5fb83c074458a91a0348e552b327eaca073d67291275689a5c01a9e47b54f88ae30845ed9690e32ecadb2544a2394301053bf80932a3cad0db73a7a107c3cddac52062bf65385a25702e3ea7de5700571ec4cfdcd2eb3771d0529932b8c4886a136b0539ea8b7ecddaab0978985876d3817019c0666506cac7699023e40004a802e9") r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x141000, 0x0) ioctl$TIOCNXCL(r2, 0x540d) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=syz', 0x3d}]}) 04:08:53 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:53 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000096c, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xf], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2590.292845][T32532] Unknown ioctl 21517 [ 2590.367801][T32532] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 2590.438000][T32540] Unknown ioctl 21517 [ 2590.482684][T32541] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. 04:08:53 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x8000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x4, r2, 0x1c, 0x1, @in={0x2, 0x4e24, @multicast2}}}, 0xa0) 04:08:53 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:53 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:53 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000096d, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x10], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80000, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x7fffffff, {{0xa, 0x4e21, 0x8000, @local, 0x4}}}, 0x88) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000180)={0xa33, 0x400, 0xbb1, 0x3, 0x7}) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=syz', 0x3d}]}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, r0, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f00000001c0)=0x3) 04:08:53 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:53 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000096e, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:53 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x11], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2590.782795][T32553] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. 04:08:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000096f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:54 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) r1 = accept4$x25(r0, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='veth0_to_bond\x00'}) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:08:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x12], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:54 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@usrjquota_file='usrjquota=syz', 0x3d}]}) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x20, 0x90480) connect$netlink(r1, &(0x7f00000000c0)=@unspec, 0xc) 04:08:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000970, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:54 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200), 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2591.425188][T32595] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. 04:08:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000971, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x13], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000972, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2591.659785][T32603] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. 04:08:55 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r1, 0x409, 0xa) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2013, r1, 0x0) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x6f, 0x1, 0x9, "7af0097e378da7f1342f12ec4f90328c", "819a8fc038e038201dd9611a01a0859d508bedbce58b50888b6cb2c8bcf9fec653f82a7d8c37036de3fbd519043ee193b1021b271b8f262a9ac2e98d33f58174452fd63902360925e79753e0149aeefb063974e43afedb5d4448"}, 0x6f, 0x3) 04:08:55 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200), 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x14], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x80000005, 0x5) r2 = request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='\'[wlan1\x00', 0xfffffffffffffffc) r3 = request_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000340)='\x00', 0xffffffffffffffff) r4 = request_key(&(0x7f00000003c0)='logon\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)='\x00', 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r2, r3, r4}, &(0x7f0000000600)=""/214, 0xd6, &(0x7f0000000780)={&(0x7f0000000700)={'sha1-ce\x00'}, &(0x7f0000000740)="965834efc0f77c3572e8725911a85b430afc3389eea5835dbc3d7b9f04", 0x1d}) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") getgroups(0x7, &(0x7f00000002c0)=[0xee01, 0xee01, 0x0, 0xee01, 0x0, 0x0, 0xffffffffffffffff]) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x2, &(0x7f0000000380)=[{&(0x7f0000000100)="309e3ae430f628db810c262af09c489fa34b0e932b5ae57a35e8c9faadb979aafe31fcec7d742223fae9505e8902c012ead899f9bde909c678afb453b5221f1cc00bba4e59630cc1df0bd29d08ab5c9fa8aad88fdc0dfb0055ac4167aa41ad3140f3ad595b71142c49eb9a3f3f986895a19a860ecdccecb86115357ad964cf65d65a554f5861792dbcac872c468ab3bfe7a9a0b7aa02a2ebf7ea5f", 0x1a3, 0x1}, {&(0x7f0000000400)="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", 0x64, 0x101}], 0x1001, &(0x7f0000000300)=ANY=[@ANYBLOB='g=\x00\x00', @ANYRESHEX=r5, @ANYBLOB=',utf8,case_sensitik\x00=noreiser\\s\x00,\x00']) fcntl$notify(r1, 0x402, 0x10) 04:08:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:55 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000973, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x15], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:55 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200), 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:55 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000974, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2592.310582][T32645] could not allocate digest TFM handle sha1-ce 04:08:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x16], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:55 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2592.461181][T32656] could not allocate digest TFM handle sha1-ce 04:08:56 executing program 4: arch_prctl$ARCH_SET_GS(0x1001, 0x5) r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:08:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/36, 0x24}, {&(0x7f0000000580)=""/23, 0x17}], 0x2, 0x0) 04:08:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000975, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:56 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x18], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000976, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x300], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:56 executing program 2: r0 = creat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) unshare(0x400) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) request_key(&(0x7f0000000000)='blacklist\x00', 0x0, &(0x7f0000000080)='\x00', 0xfffffffffffffff8) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x44) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000280), 0x2) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 04:08:56 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x500], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000977, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:56 executing program 0: connect(0xffffffffffffffff, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r0}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r0}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x600], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:56 executing program 2: r0 = creat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) unshare(0x400) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) request_key(&(0x7f0000000000)='blacklist\x00', 0x0, &(0x7f0000000080)='\x00', 0xfffffffffffffff8) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x44) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000280), 0x2) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 04:08:56 executing program 4: r0 = memfd_create(&(0x7f0000000080)='\x00', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x800, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x2, r2, 0x5, 0xffffffffffffff9c}, 0x10) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:08:56 executing program 0: connect(0xffffffffffffffff, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r0}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r0}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000978, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x700], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:57 executing program 0: connect(0xffffffffffffffff, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r0}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r0}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000979, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x900], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:57 executing program 2: r0 = creat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) unshare(0x400) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) request_key(&(0x7f0000000000)='blacklist\x00', 0x0, &(0x7f0000000080)='\x00', 0xfffffffffffffff8) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x44) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000280), 0x2) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 04:08:57 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(0xffffffffffffffff, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:57 executing program 4: r0 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x1, 0x202) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xffffffff00000001, 0x101000) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000180)='/dev/capi20\x00', 0x20000, 0x0) r4 = getpgrp(0xffffffffffffffff) fcntl$setown(r3, 0x8, r4) write$P9_RXATTRCREATE(r2, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000100)={r5, 0x80, 0x30, 0xffff, 0x4}, &(0x7f0000000140)=0x18) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r1, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0) 04:08:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000097a, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xa00], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:57 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(0xffffffffffffffff, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xb00], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:57 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(0xffffffffffffffff, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:57 executing program 2: 04:08:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000097b, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000097c, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:58 executing program 2: 04:08:58 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400600, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) 04:08:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xc00], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:58 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000097d, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:58 executing program 2: 04:08:58 executing program 2: 04:08:58 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000097e, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xd00], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:58 executing program 2: 04:08:59 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000040)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) 04:08:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xe00], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:59 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:59 executing program 2: 04:08:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000097f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") clone(0x10062101, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:08:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xf00], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:59 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000980, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:59 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:59 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000040)={0x0, 0x800}) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:08:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:08:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x1100], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:08:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000981, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:08:59 executing program 2: 04:08:59 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:08:59 executing program 2: 04:09:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x1200], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:00 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000982, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2596.787869][ T429] Unknown ioctl 1074835115 04:09:00 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:00 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200), 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="ff8163607635f54555e9e5d63458927a80dedb348337bdb3939c9a07f3798a3d3d8011c8afbfc9538e780d53a2b442c1541cc1986fcb8dc64e5d35"], 0x3b) close(r1) 04:09:00 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) fcntl$dupfd(r0, 0x406, r0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) write$binfmt_aout(r0, &(0x7f0000000000)={{0x1cf, 0x3, 0x6, 0x177, 0x2, 0x45ee, 0x1e7, 0x6b}, "87b77c2e6502b1e4b672bd350bc02133e7d66fe629601598edd9476a46e520754497d1542a28ced73718eae72e355743d32dc846b31475be871d4f41f494a8cdce5945c7053248987fc2adb47c8324b7c73874ea58aa48ca3fc10a573db118df037baf22483d01c8d460e6a995d8429d62db1954", [[], []]}, 0x294) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:09:00 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:00 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000983, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x1300], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:00 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200), 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:00 executing program 2: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mq_unlink(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) syz_open_procfs(0x0, 0x0) 04:09:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x1400], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:00 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:00 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200), 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:00 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000984, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x1500], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:00 executing program 2: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mq_unlink(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) syz_open_procfs(0x0, 0x0) 04:09:01 executing program 4: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(0xffffffffffffffff, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 04:09:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000985, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:01 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x1600], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:01 executing program 2: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mq_unlink(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) syz_open_procfs(0x0, 0x0) 04:09:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x1800], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000986, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\xbcSQ\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:01 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:01 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000280)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/130, 0x82}], 0x1, &(0x7f0000000180)=""/255, 0xff}, 0x40000000) sendto$unix(r1, &(0x7f00000002c0)="35e9687f70aa7c750a25224e8ce3359cea14d2ce0039158f7916bc0a4b1cb8242b3ee3e80ef85ddacab6d981299cc46134727a438a78f59d8bc24ab724e7080b9b2f7b5d7579fa4ed5d0c145544e3b46718f9f4b28e30cfc56bff1550200d0a9e31931211235ed825ee489664edf457238da5d4f6467db629038d98b3a05f9538d7205b4914541aa4d61f434d16e838cdfa3d79ef5295dfb1310a2053b5bc1d23c606a3445fa3b9fe9fa1e821b65d3b490242277f201c2cae87d6d7900c7c9fee72f", 0xc2, 0x4010, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r2, &(0x7f0000000400)="3c0a220be09797e2ae28810006ca3f9895e6975dcf8e738db8ec2eb4182209f9f79c3679515f4d4b8d5fef1ee0868cf12beb6c24c0885abe0a855d9bc4ebd0795da41412cfabc0ca7d753982971c278233f1e1c7d391d79676cf69eac9c4fc25d3d93dd16da6aca80d391cc4c995a12f46c08f6bb0f7e538e769e6d1989e80bf19cfe0baa2de562baafc5edd26a2bb3021084461443b5e8319b4f17c5d5696d4bdd3cad1986d6c69", &(0x7f0000000600)=""/212}, 0x18) close(r1) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:09:01 executing program 2: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mq_unlink(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) syz_open_procfs(0x0, 0x0) 04:09:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00QS\xbc\xc0\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000987, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x4000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:01 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000988, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x11000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:02 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:02 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:02 executing program 2: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mq_unlink(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:02 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000000)=0x3) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x48000) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0xfa, 0x4) fcntl$addseals(r0, 0x409, 0xa) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0xa, 0x2a, 0x0, 0x14, 0xb, 0x3, 0x4, 0x11d}) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000001600)={"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"}) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:09:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000989, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x100100], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:02 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:02 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:02 executing program 2: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mq_unlink(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) close(r1) 04:09:02 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:02 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000098a, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x1000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:02 executing program 2: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mq_unlink(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) close(r1) 04:09:02 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000098b, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:03 executing program 2: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mq_unlink(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) close(r1) 04:09:03 executing program 4: r0 = memfd_create(&(0x7f0000000240)='keyringnodev{md5sum-\x00', 0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x84000, 0x0) recvfrom$rose(r1, &(0x7f0000000080)=""/90, 0x5a, 0x2000, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) fcntl$addseals(r0, 0x409, 0x100000000000a) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:09:03 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000098c, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x3000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:03 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:03 executing program 2: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mq_unlink(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(0xffffffffffffffff) 04:09:03 executing program 4: r0 = memfd_create(&(0x7f0000000000)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x4) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x800, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000080)={0x2, 0x9b1f}, 0x2) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:09:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000098d, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x4000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:03 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:03 executing program 2: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mq_unlink(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(0xffffffffffffffff) 04:09:03 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0xe000, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000040)) 04:09:03 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000098e, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:04 executing program 2: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mq_unlink(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(0xffffffffffffffff) 04:09:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x5000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:04 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000098f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:04 executing program 2: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mq_unlink(0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:04 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, 0x0}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000990, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:04 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000700)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="c9900445927212d8a7b5c8625df69131fc6f90dd9756a0afdaa084a6a730dbc14225060afcdd87dd117f62bc4e928db176e3df32a0b8e9c044d810d0ea092ae2628a90975d976edde1dc240a6c8a4e667f921e8a64e534ed74d74f2fc078175a3736dc932a998d15add599c49fb743441b99594e1cea1bf0a8e3743fbf6ef32e9997729e9e6b3681fcc445925017", @ANYRESDEC], @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYPTR=&(0x7f0000000600)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="d3c260226135a73a76a060e2e6306689873b05d0ca738056fb49d89294db6422b47661f181ca0e3a9fb6381fa3ae04e7bd95d0ce4ebaf8286c38634dbee02f2f20b64836e9ec016b289a7cacb46f4047ca0f94503aa2cb610de3201ca4ebf385c47b45252a869ed81af468c382e92db749", @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES64=r0], @ANYRES16=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYPTR64, @ANYBLOB="62eac8d00a8452ec8d109eab31ea1ce85a008ac7e2819cb659a28a88b7eda10cb176c0439fbe34059fc4071c5050cb9289d6eb543983f8a4f027306c0c8ddef5da8478feec60d1cb0c5eeb0b89a3831e5b80387547c39481b576cd5f717a4830b4d76f43e1365d11ed855ee0f79a880f98bd7f0e88cbfa571acf8a2a2f37f0eba81cdf397f819776ab117c81b85f625b82f2d3fbb99642c0ef44b6f7ec76616eecb396740fbf9f33ad4ffb2876d929359199ccd993bcf001e9b834ddabe26934cfccbb", @ANYPTR64, @ANYRES64=r0], @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRESHEX=0x0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYPTR, @ANYRES32=r0], @ANYRESHEX=r0, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES32=r0]], @ANYRESOCT=r0], 0x79) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0xffffffffffffffff, 0x11, r0, 0x0) 04:09:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x6000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:04 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, 0x0}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000991, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:04 executing program 2: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mq_unlink(0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000992, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:04 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, 0x0}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:05 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x7000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:05 executing program 2: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:05 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0x6a) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:09:05 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\xbcSQ\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:05 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000993, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x8000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:05 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) fcntl$getown(r0, 0x9) getpgid(0xffffffffffffffff) r1 = getpgrp(0xffffffffffffffff) r2 = getpgrp(r1) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x4, 0x7fff, 0x400, r2}) 04:09:05 executing program 2: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r0) 04:09:05 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000994, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:05 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000995, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x9000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:05 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:05 executing program 2: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r0) 04:09:05 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000996, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xa000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:06 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0x400000000000a) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:09:06 executing program 2: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r0) 04:09:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000997, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:06 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x0, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xb000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000998, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:06 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x0, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:06 executing program 2: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r0) 04:09:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xc000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000999, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:07 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x0, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:07 executing program 2: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r0) 04:09:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000099a, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:07 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) r1 = dup2(r0, r0) ioctl$sock_bt_hci(r0, 0xc00448f5, &(0x7f0000000080)="9ac8cb6faa403e5436557c8ca3c89506c6824896e7ea89390f7e302af15ed022803d6a4aa8313109466be64c4bac3fe605f29fedeb44da5e42453fce9b1a4471afe889e8db17bc5c36540140b278a51584a010533d811f07f787473b9fd7b537fa9387a9f4c1166dfe11eb8839448ea3ad1cd54fee0e4f2589b17ec98b785f0b0effc5d38dc364221e83566e2072dc8379a7cc2afd67e6f85d06ae8a85ed4baa5bb3a5e91f0ae00cebb60d5777094b014bbb56057dacfddb499c7555242cdf995755af9d34b1b1cec3cab8a8c1a29a59677810525f") setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000003c0)=@req3={0x3, 0x3, 0x4, 0x4, 0x8c, 0x4, 0xff}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)={0x3a0, 0x38, 0x10, 0x70bd29, 0x25dfdbff, {0x1c}, [@nested={0xdc, 0x2, [@generic="04b226df682fe8eeaad3cb972743931211fa43107f6502a7f26944491dab4e3abcc505efcba706203e234ae3b539156d02431a408de467a58580bb5b587d6d8dc7c6f9d28f871a2fd0b6dc8e706535369651d8133a4628ce405fe4348a78dc94263ac2fc54b133bf012d2c60737bb9d42a401a92624059eab3fd3c091fc4402963f2a8984060d6ff36bc913fa47e829d68714783624018d95756305e0bd13a691a2000f22fb415f3c9464e3af240f297e6e08c9f756331394e4302b6597b68047842f44a0c40bfb9adef36421933d6e261a7fdcfbc05af"]}, @generic="118e1211a6e2bedbbf64aa07e1b499cf38b1db6df639d4d19522b5605009a1cff9160fefeb9f3518b56fab7d7d807ff8ed2188045160f885865359e8364b61bfbd4d5c7a4b39b4a015dae61a2ece169ca9839d5300cbc6608e9af691294eb6250ed41cc4b84698f4a2eb630d22d2f02db2ec649fe854da137238b9", @nested={0x10, 0xb, [@typed={0xc, 0x13, @u64=0x80000001}]}, @typed={0x8, 0x8f, @uid=r2}, @generic="b19d37363ced7dab4f25cae0652d300167f4eaa68f7140ddade41995802a5490d83b92dd75a95be11dc7ae", @nested={0x1a4, 0x8, [@typed={0xc, 0x8e, @u64=0x1ff}, @generic="4b57fc15be2b9c341e63d04b3786d3dd69145b5fdb972cc25cd6db5f8a7f7e5abd127ff206f84dccf67296cbfc66a29e508f174019ed4a70e87c33c306b2dfda", @generic="1009b15b0f5801950402268e267a2a810c380003dfbf0e7570c091aeb209325f081506fe49244d0c481a4ebded72bd47f04c44f96fbec4c0ea0e38f5c05bb83caf39624dbd46a376ed0701f3db68a182258de85322f980c5bd6f4742eb828790211bfa65944be0fa89a4dac87e0f17fa90675c2264857dd806442a0ba5b3320258604e0417d0e4ab9df2ab70c6bd561d4d612bb33b469a63c7523f0825edb83f803d9119a30d5dbe7aca9a37e78ea9685d0e4a2722b0ec2371e13cfe2f17a2bbcad45f766da7036d9568", @typed={0x8, 0x39, @ipv4=@rand_addr=0xffffffff80000001}, @generic="eeb2b50bf53893973ff67f8b71ad0ed30649395433400de8097cab8805170282c866831ca4a3ec5080ab05fafcec1b5c1f77003ff375432ee4f6acfff64a2b2a68e487498f15f166f0334c80f558b9ebe6f8d74eb7dab61a86e019b070734ec2c6e9c0465b085faa64f602c4a7a03dd938bba82784d5c197046f728d544cc39eec"]}, @generic="35b09c45ba7a5d85222805b055a7bdc57d02e74babc1e93274be103966b0b575303f283dc471fae7156eb3d605f286133b68b6b93886b165e4295b38103a095ce2a1eff20f68f9be5c8c0e"]}, 0x3a0}, 0x1, 0x0, 0x0, 0x4010}, 0x20000085) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000180)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1) 04:09:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xd000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000099b, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:07 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:07 executing program 2: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r0) 04:09:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xe000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000099c, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:07 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xf000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:07 executing program 2: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:08 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) sendfile(r0, r0, &(0x7f0000000000), 0xffffffffffffffed) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) fdatasync(r0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200400, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000600)=""/4096, &(0x7f0000000080)=0x1000) 04:09:08 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000099d, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:08 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x10000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000099e, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:08 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:08 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x11000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:08 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xf1, "251bad4c4ce68347bb4ec1026603e0d70bb64385926d6aa8e29e440607e9426c0336dcd7579c079500b4cf7645ab25e4e82bf5be11b67b0b0c372b5b65b86badbc0fa24ff393c610a61fe67b572ab3f4afe5ef04e928d2a9f0a77026ef853e55d3d0820c2da63f87a4404ccadd5d9d225c7fdc22b5af7fb03caade149f3d85ef02487d8b5e63df6c1bfb1260bb6f55d6bf211c0c66b9325e479fbffb8e44e39d77ab82d3361b21cba466f71b966c2fd20bd7776ad1aaf3a835cd1251e7df9d2eb072aed22062f1b269faf691bfc6c36e380b3a52b3c56b67e8a878f1a4e32e4b4a3fa66b55b42ddf24dddc6a9b49432e0e"}, &(0x7f0000000100)=0xf9) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={r1, 0x2c74, 0x10, 0x7, 0x9}, &(0x7f0000000180)=0x18) 04:09:08 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x800000000099f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:08 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x12000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:08 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r0) 04:09:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:09 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:09 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009a0, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:09 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:09 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r0) 04:09:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x13000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:09 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009a1, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:09 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001640)=ANY=[@ANYBLOB="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"]) r1 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x400000) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)={0x144d}) write$FUSE_IOCTL(r2, &(0x7f0000000240)={0x20, 0x0, 0x8, {0xbddf, 0x4, 0xfffffffffffffffb, 0xffffffffffff0001}}, 0x20) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @broadcast, @remote}, &(0x7f0000000100)=0xd3) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r4, 0x5, 0x6}, &(0x7f0000000200)=0x8) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000280)={@remote, @rand_addr="30cd19ac2b29089844bde4f380823876", @mcast1, 0x9, 0x401, 0x3, 0x100, 0x4, 0x80000, r3}) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0) 04:09:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x14000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:09 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) 04:09:09 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r0) 04:09:09 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:09 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009a2, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:09 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:09 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009a3, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x15000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:09 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) 04:09:10 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0x2) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:09:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009a4, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:10 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) 04:09:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x16000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:10 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0x2) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x880, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000040)={0x0, @bt={0x24000000000, 0xb0c, 0x1, 0x3, 0x9, 0x6374, 0x499cfa02, 0xfff, 0x8, 0x0, 0x4, 0x6, 0x7de, 0x9, 0x4, 0x10}}) 04:09:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009a5, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:10 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x18000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009a6, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:10 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x40000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:11 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009a7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:11 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode']) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f4afb3ad39588f9747791081beee66df459da7c68188f9fbd142d7c246353cd29702c1626f1317a794302d5e6b0a2466897a5cb0fe63f8b2bae66a8b555cd54ba4b5f7958bfbaef9e75671f98692b24a22c2e145485926b76cdd8a9a1fb955d4e08e523cd2222c4f68e4ec4ee70810704c57b6112627267d98101fd6caa2f7fdf500750b0a3dd24a92cdea4b9909a3ed1138befd267f03ef197c59422a788f9509", 0xa1, 0x0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000140)='keyring\x00', &(0x7f0000000180)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac') 04:09:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:11 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x1000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:11 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009a8, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:11 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:11 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200), 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x10010000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009a9, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:11 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200), 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2608.565527][ T1067] hugetlbfs: Bad value for 'mode' [ 2608.844503][ T1076] hugetlbfs: Bad value for 'mode' 04:09:12 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r2, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5d2}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x1) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) memfd_create(&(0x7f00000003c0)='/dev/zero\x00', 0x6) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r3, r4, r5) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xffffff65) fcntl$addseals(r0, 0x409, 0xa) r6 = getpgrp(0xffffffffffffffff) wait4(r6, &(0x7f0000000400), 0x40000009, &(0x7f0000000440)) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:09:12 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x100000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009aa, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:12 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200), 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009ab, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:12 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, 0x0}, 0x0) 04:09:12 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x200000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009ac, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:13 executing program 4: r0 = memfd_create(&(0x7f0000000600)='\x00', 0x7) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0xb, 0x8, 0x5, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x1, 0x5}, 0x3c) ioctl$KDENABIO(r1, 0x4b36) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x3a) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x50, r0, 0x0) 04:09:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x300000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:13 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009ad, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:13 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, 0x0}, 0x0) 04:09:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:13 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:13 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, 0x0}, 0x0) 04:09:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x400000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009ae, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:13 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x0) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:09:13 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:13 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={0x0}}, 0x0) 04:09:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x500000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009af, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:13 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\xbcSQ\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:13 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={0x0}}, 0x0) 04:09:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x600000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009b0, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:14 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00QS\xbc\xc0\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:14 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={0x0}}, 0x0) 04:09:14 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x1) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:09:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x700000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009b1, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:14 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x0, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:14 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:14 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009b2, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x800000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:14 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x0, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:14 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:15 executing program 4: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(0xffffffffffffffff, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x4000, 0x11, 0xffffffffffffffff, 0x0) 04:09:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009b3, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:15 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x0, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x900000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:15 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:15 executing program 0: r0 = memfd_create(&(0x7f0000000600)='\x00', 0x7) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0xb, 0x8, 0x5, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x1, 0x5}, 0x3c) ioctl$KDENABIO(r1, 0x4b36) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x3a) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x50, r0, 0x0) 04:09:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xa00000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:15 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009b4, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:15 executing program 4: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 04:09:15 executing program 0: r0 = memfd_create(&(0x7f0000000600)='\x00', 0x7) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0xb, 0x8, 0x5, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x1, 0x5}, 0x3c) ioctl$KDENABIO(r1, 0x4b36) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x3a) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x50, r0, 0x0) 04:09:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xb00000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:15 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009b5, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xc00000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x12000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:16 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009b6, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be0") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xd00000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x1500], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:16 executing program 0: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mq_unlink(0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:16 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009b7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be0") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xe00000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009b8, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be0") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:16 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x800000000000000, [], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xf00000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:16 executing program 0: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mq_unlink(0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:16 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:17 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009b9, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x1000000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:17 executing program 4 (fault-call:4 fault-nth:0): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:17 executing program 0: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mq_unlink(0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:17 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009ba, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x1100000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:17 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:17 executing program 0: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mq_unlink(0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\xbcSQ\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:17 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009bb, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:17 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:17 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009bc, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:17 executing program 0: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mq_unlink(0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x1200000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:18 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0xa, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:18 executing program 0: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mq_unlink(0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009bd, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:18 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x1300000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:18 executing program 0: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mq_unlink(0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:18 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:18 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009be, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:18 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x1400000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:18 executing program 0: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009bf, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:18 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:18 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:18 executing program 0: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009c0, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:18 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x1500000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:18 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:18 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1, 0xffffff7f}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009c1, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x1600000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:19 executing program 0: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:19 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:19 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009c2, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:19 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1, 0xffffff7f00000000}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x1800000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:19 executing program 0: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:19 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:19 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009c3, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, 0x0, 0x0) close(r1) 04:09:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x4000000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:19 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:19 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009c4, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:19 executing program 0: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:19 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1, 0x0, 0xffffff7f}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, 0x0, 0x0) close(r1) 04:09:19 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009c5, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:19 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:19 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1, 0x0, 0xffffff7f00000000}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, 0x0, 0x0) close(r1) 04:09:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0xffffffff00000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:20 executing program 0: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:20 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0xf, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009c6, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[], 0x0) close(r1) 04:09:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x2], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:20 executing program 0: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009c7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[], 0x0) close(r1) 04:09:20 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x20000210, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x3], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:20 executing program 0: syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009c8, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:20 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x20000310, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x4], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[], 0x0) close(r1) 04:09:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009c9, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x5], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) close(r1) 04:09:21 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009ca, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x6], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) close(r1) 04:09:21 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:21 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:21 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009cb, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) close(r1) 04:09:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x7], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:21 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:21 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:21 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000003, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009cc, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff"], 0x1) close(r1) 04:09:21 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x8], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:21 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff"], 0x1) close(r1) 04:09:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009cd, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:22 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000004, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x9], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:22 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009ce, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff"], 0x1) close(r1) 04:09:22 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000005, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:22 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xa], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009cf, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:22 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000006, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xb], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:22 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(0xffffffffffffffff) 04:09:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009d0, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:22 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000007, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xc], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:22 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(0xffffffffffffffff) 04:09:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009d1, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xd], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:23 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0xffffff7f, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:23 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(0xffffffffffffffff) 04:09:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009d2, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xe], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:23 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:23 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0xffffff7f00000000, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:23 executing program 2 (fault-call:4 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009d3, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:23 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xf], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:23 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0xffffff7f, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2620.589241][ T1772] FAULT_INJECTION: forcing a failure. [ 2620.589241][ T1772] name failslab, interval 1, probability 0, space 0, times 0 [ 2620.622022][ T1772] CPU: 1 PID: 1772 Comm: syz-executor.2 Not tainted 5.2.0-rc4 #25 [ 2620.629890][ T1772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2620.640052][ T1772] Call Trace: [ 2620.643361][ T1772] dump_stack+0x172/0x1f0 [ 2620.643386][ T1772] should_fail.cold+0xa/0x15 [ 2620.643405][ T1772] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2620.643502][ T1772] ? hci_unregister_dev+0x6ac/0x820 [ 2620.643526][ T1772] ? hci_unregister_dev+0x6bc/0x820 [ 2620.668659][ T1772] __should_failslab+0x121/0x190 [ 2620.673621][ T1772] should_failslab+0x9/0x14 [ 2620.678136][ T1772] kmem_cache_alloc_node+0x56/0x710 [ 2620.683346][ T1772] ? lock_downgrade+0x880/0x880 [ 2620.688229][ T1772] __alloc_skb+0xd5/0x5e0 [ 2620.692577][ T1772] ? skb_trim+0x190/0x190 [ 2620.696977][ T1772] ? mgmt_index_removed+0x18f/0x2c0 [ 2620.702216][ T1772] ? wait_for_completion+0x440/0x440 [ 2620.707524][ T1772] hci_sock_dev_event+0xf3/0x580 [ 2620.712484][ T1772] hci_unregister_dev+0x253/0x820 [ 2620.717612][ T1772] vhci_release+0x76/0xf0 [ 2620.721962][ T1772] __fput+0x2ff/0x890 [ 2620.725963][ T1772] ? vhci_close_dev+0x50/0x50 [ 2620.730656][ T1772] ____fput+0x16/0x20 [ 2620.734647][ T1772] task_work_run+0x145/0x1c0 [ 2620.739255][ T1772] exit_to_usermode_loop+0x273/0x2c0 [ 2620.744554][ T1772] do_syscall_64+0x58e/0x680 [ 2620.749166][ T1772] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2620.755071][ T1772] RIP: 0033:0x459279 [ 2620.758978][ T1772] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2620.778598][ T1772] RSP: 002b:00007faf8d862c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 04:09:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009d4, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2620.778615][ T1772] RAX: 0000000000000000 RBX: 00007faf8d862c90 RCX: 0000000000459279 [ 2620.778622][ T1772] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 2620.778629][ T1772] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2620.778637][ T1772] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faf8d8636d4 [ 2620.778645][ T1772] R13: 00000000004f7fd2 R14: 00000000004d0db0 R15: 0000000000000005 04:09:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x10], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:24 executing program 2 (fault-call:4 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009d5, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\xbcSQ\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:24 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0xffffff7f00000000, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x11], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2621.164234][ T1814] FAULT_INJECTION: forcing a failure. [ 2621.164234][ T1814] name failslab, interval 1, probability 0, space 0, times 0 [ 2621.229784][ T1814] CPU: 1 PID: 1814 Comm: syz-executor.2 Not tainted 5.2.0-rc4 #25 [ 2621.237643][ T1814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2621.237651][ T1814] Call Trace: [ 2621.237680][ T1814] dump_stack+0x172/0x1f0 [ 2621.237707][ T1814] should_fail.cold+0xa/0x15 [ 2621.259991][ T1814] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2621.265828][ T1814] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2621.272167][ T1814] ? should_fail+0x1de/0x852 04:09:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00QS\xbc\xc0\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2621.276783][ T1814] __should_failslab+0x121/0x190 [ 2621.281746][ T1814] should_failslab+0x9/0x14 [ 2621.286267][ T1814] kmem_cache_alloc_node_trace+0x5a/0x720 [ 2621.292010][ T1814] __kmalloc_node_track_caller+0x3d/0x70 [ 2621.292030][ T1814] __kmalloc_reserve.isra.0+0x40/0xf0 [ 2621.292048][ T1814] __alloc_skb+0x10b/0x5e0 [ 2621.292062][ T1814] ? skb_trim+0x190/0x190 [ 2621.292075][ T1814] ? mgmt_index_removed+0x18f/0x2c0 [ 2621.292093][ T1814] ? wait_for_completion+0x440/0x440 [ 2621.292113][ T1814] hci_sock_dev_event+0xf3/0x580 [ 2621.292130][ T1814] hci_unregister_dev+0x253/0x820 [ 2621.292154][ T1814] vhci_release+0x76/0xf0 [ 2621.307587][ T1814] __fput+0x2ff/0x890 [ 2621.317125][ T1814] ? vhci_close_dev+0x50/0x50 [ 2621.327351][ T1814] ____fput+0x16/0x20 [ 2621.327369][ T1814] task_work_run+0x145/0x1c0 [ 2621.327395][ T1814] exit_to_usermode_loop+0x273/0x2c0 [ 2621.327412][ T1814] do_syscall_64+0x58e/0x680 [ 2621.359673][ T1814] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2621.359687][ T1814] RIP: 0033:0x459279 04:09:24 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2621.359703][ T1814] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2621.359711][ T1814] RSP: 002b:00007faf8d841c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2621.359724][ T1814] RAX: 0000000000000000 RBX: 00007faf8d841c90 RCX: 0000000000459279 [ 2621.359740][ T1814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 2621.393741][ T1814] RBP: 000000000075bfc0 R08: 0000000000000000 R09: 0000000000000000 04:09:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009d6, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2621.393751][ T1814] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faf8d8426d4 [ 2621.393758][ T1814] R13: 00000000004f7fd2 R14: 00000000004d0db0 R15: 0000000000000005 04:09:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x12], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:24 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:24 executing program 2 (fault-call:4 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009d7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:25 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x13], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009d8, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:25 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {0xffffff7f}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:25 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x14], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009d9, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2622.214727][ T1863] FAULT_INJECTION: forcing a failure. [ 2622.214727][ T1863] name failslab, interval 1, probability 0, space 0, times 0 04:09:25 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {0xffffff7f00000000}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2622.350870][ T1863] CPU: 1 PID: 1863 Comm: syz-executor.2 Not tainted 5.2.0-rc4 #25 [ 2622.358734][ T1863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2622.358749][ T1863] Call Trace: [ 2622.372124][ T1863] dump_stack+0x172/0x1f0 [ 2622.376468][ T1863] should_fail.cold+0xa/0x15 [ 2622.381093][ T1863] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2622.386924][ T1863] ? ___might_sleep+0x163/0x280 [ 2622.391785][ T1863] __should_failslab+0x121/0x190 [ 2622.396735][ T1863] should_failslab+0x9/0x14 [ 2622.401250][ T1863] kmem_cache_alloc_trace+0x2ce/0x750 [ 2622.406628][ T1863] ? kasan_check_write+0x14/0x20 [ 2622.411581][ T1863] kobject_uevent_env+0x387/0x101d [ 2622.411602][ T1863] ? wait_for_completion+0x440/0x440 [ 2622.411623][ T1863] kobject_uevent+0x20/0x26 [ 2622.426609][ T1863] device_del+0x74b/0xc30 [ 2622.430958][ T1863] ? __device_links_no_driver+0x250/0x250 [ 2622.436756][ T1863] rfkill_unregister+0xd1/0x2c0 [ 2622.441626][ T1863] hci_unregister_dev+0x287/0x820 [ 2622.446666][ T1863] vhci_release+0x76/0xf0 [ 2622.446686][ T1863] __fput+0x2ff/0x890 [ 2622.446704][ T1863] ? vhci_close_dev+0x50/0x50 [ 2622.446724][ T1863] ____fput+0x16/0x20 [ 2622.459692][ T1863] task_work_run+0x145/0x1c0 [ 2622.459719][ T1863] exit_to_usermode_loop+0x273/0x2c0 [ 2622.459738][ T1863] do_syscall_64+0x58e/0x680 [ 2622.459762][ T1863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2622.478166][ T1863] RIP: 0033:0x459279 [ 2622.478184][ T1863] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2622.478193][ T1863] RSP: 002b:00007faf8d862c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2622.478207][ T1863] RAX: 0000000000000000 RBX: 00007faf8d862c90 RCX: 0000000000459279 [ 2622.478216][ T1863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 2622.478232][ T1863] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2622.507610][ T1863] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faf8d8636d4 [ 2622.507620][ T1863] R13: 00000000004f7fd2 R14: 00000000004d0db0 R15: 0000000000000005 04:09:25 executing program 2 (fault-call:4 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:25 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009da, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x15], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:25 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {0x0, 0xffffff7f}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:25 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009db, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x16], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:26 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {0x0, 0xffffff7f00000000}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2622.973323][ T1910] FAULT_INJECTION: forcing a failure. [ 2622.973323][ T1910] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2622.986586][ T1910] CPU: 0 PID: 1910 Comm: syz-executor.2 Not tainted 5.2.0-rc4 #25 [ 2622.986599][ T1910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2622.986603][ T1910] Call Trace: [ 2622.986632][ T1910] dump_stack+0x172/0x1f0 [ 2622.986658][ T1910] should_fail.cold+0xa/0x15 [ 2622.986686][ T1910] ? console_unlock+0x781/0xec0 [ 2623.012136][ T1910] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2623.012164][ T1910] should_fail_alloc_page+0x50/0x60 [ 2623.012178][ T1910] __alloc_pages_nodemask+0x1a1/0x8d0 [ 2623.012191][ T1910] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 2623.012214][ T1910] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 2623.021643][ T1910] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 2623.021660][ T1910] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2623.021690][ T1910] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2623.032677][ T1910] cache_grow_begin+0x9d/0x650 [ 2623.032696][ T1910] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2623.032713][ T1910] kmem_cache_alloc_trace+0x67c/0x750 [ 2623.032727][ T1910] ? kasan_check_write+0x14/0x20 [ 2623.032754][ T1910] kobject_uevent_env+0x387/0x101d [ 2623.043742][ T1910] ? wait_for_completion+0x440/0x440 [ 2623.043766][ T1910] kobject_uevent+0x20/0x26 [ 2623.043783][ T1910] device_del+0x74b/0xc30 [ 2623.043802][ T1910] ? __device_links_no_driver+0x250/0x250 [ 2623.043831][ T1910] rfkill_unregister+0xd1/0x2c0 [ 2623.055164][ T1910] hci_unregister_dev+0x287/0x820 [ 2623.055187][ T1910] vhci_release+0x76/0xf0 [ 2623.055206][ T1910] __fput+0x2ff/0x890 [ 2623.055223][ T1910] ? vhci_close_dev+0x50/0x50 [ 2623.055240][ T1910] ____fput+0x16/0x20 [ 2623.055260][ T1910] task_work_run+0x145/0x1c0 [ 2623.067301][ T1910] exit_to_usermode_loop+0x273/0x2c0 [ 2623.067322][ T1910] do_syscall_64+0x58e/0x680 [ 2623.067343][ T1910] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2623.067355][ T1910] RIP: 0033:0x459279 04:09:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2623.067377][ T1910] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2623.067384][ T1910] RSP: 002b:00007faf8d820c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2623.067397][ T1910] RAX: 0000000000000000 RBX: 00007faf8d820c90 RCX: 0000000000459279 [ 2623.078754][ T1910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2623.078763][ T1910] RBP: 000000000075c060 R08: 0000000000000000 R09: 0000000000000000 [ 2623.078771][ T1910] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faf8d8216d4 [ 2623.078779][ T1910] R13: 00000000004f7fd2 R14: 00000000004d0db0 R15: 0000000000000004 04:09:26 executing program 2 (fault-call:4 fault-nth:4): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009dc, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:26 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {0x0, 0x0, 0xffffff7f}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x18], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x300], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009dd, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2623.585871][ T1938] FAULT_INJECTION: forcing a failure. [ 2623.585871][ T1938] name failslab, interval 1, probability 0, space 0, times 0 [ 2623.635336][ T1938] CPU: 0 PID: 1938 Comm: syz-executor.2 Not tainted 5.2.0-rc4 #25 [ 2623.643198][ T1938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2623.653262][ T1938] Call Trace: [ 2623.656579][ T1938] dump_stack+0x172/0x1f0 [ 2623.660941][ T1938] should_fail.cold+0xa/0x15 [ 2623.676548][ T1938] ? fault_create_debugfs_attr+0x1e0/0x1e0 04:09:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2623.682373][ T1938] ? ___might_sleep+0x163/0x280 [ 2623.688764][ T1938] __should_failslab+0x121/0x190 [ 2623.693722][ T1938] should_failslab+0x9/0x14 [ 2623.698238][ T1938] __kmalloc+0x2d9/0x740 [ 2623.702497][ T1938] ? kobject_uevent_env+0x387/0x101d [ 2623.707798][ T1938] ? rcu_read_lock_sched_held+0x110/0x130 [ 2623.713528][ T1938] ? kobject_get_path+0xc4/0x1b0 [ 2623.718485][ T1938] kobject_get_path+0xc4/0x1b0 [ 2623.723271][ T1938] kobject_uevent_env+0x3ab/0x101d [ 2623.728401][ T1938] ? wait_for_completion+0x440/0x440 04:09:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2623.733741][ T1938] kobject_uevent+0x20/0x26 [ 2623.738256][ T1938] device_del+0x74b/0xc30 [ 2623.742596][ T1938] ? __device_links_no_driver+0x250/0x250 [ 2623.748335][ T1938] rfkill_unregister+0xd1/0x2c0 [ 2623.748357][ T1938] hci_unregister_dev+0x287/0x820 [ 2623.748380][ T1938] vhci_release+0x76/0xf0 [ 2623.748398][ T1938] __fput+0x2ff/0x890 [ 2623.748419][ T1938] ? vhci_close_dev+0x50/0x50 [ 2623.762738][ T1938] ____fput+0x16/0x20 [ 2623.762761][ T1938] task_work_run+0x145/0x1c0 [ 2623.762785][ T1938] exit_to_usermode_loop+0x273/0x2c0 [ 2623.762804][ T1938] do_syscall_64+0x58e/0x680 [ 2623.762827][ T1938] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2623.762851][ T1938] RIP: 0033:0x459279 [ 2623.762880][ T1938] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2623.771692][ T1938] RSP: 002b:00007faf8d862c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2623.771710][ T1938] RAX: 0000000000000000 RBX: 00007faf8d862c90 RCX: 0000000000459279 [ 2623.771717][ T1938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 2623.771725][ T1938] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2623.771733][ T1938] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faf8d8636d4 [ 2623.771742][ T1938] R13: 00000000004f7fd2 R14: 00000000004d0db0 R15: 0000000000000005 04:09:27 executing program 2 (fault-call:4 fault-nth:5): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:27 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {0x0, 0x0, 0xffffff7f00000000}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009de, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x500], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7b") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:27 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {0x0, 0x0, 0x0, 0xffffff7f}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009df, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2624.158348][ T1962] FAULT_INJECTION: forcing a failure. [ 2624.158348][ T1962] name failslab, interval 1, probability 0, space 0, times 0 04:09:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\xbcSQ\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x600], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2624.228828][ T1962] CPU: 0 PID: 1962 Comm: syz-executor.2 Not tainted 5.2.0-rc4 #25 [ 2624.236791][ T1962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2624.246865][ T1962] Call Trace: [ 2624.250182][ T1962] dump_stack+0x172/0x1f0 [ 2624.254543][ T1962] should_fail.cold+0xa/0x15 [ 2624.259157][ T1962] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2624.264986][ T1962] ? ___might_sleep+0x163/0x280 [ 2624.269857][ T1962] __should_failslab+0x121/0x190 [ 2624.274813][ T1962] should_failslab+0x9/0x14 04:09:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2624.279339][ T1962] kmem_cache_alloc_node+0x261/0x710 [ 2624.284645][ T1962] ? find_held_lock+0x35/0x130 [ 2624.289439][ T1962] __alloc_skb+0xd5/0x5e0 [ 2624.293800][ T1962] ? skb_trim+0x190/0x190 [ 2624.298161][ T1962] ? kasan_check_read+0x11/0x20 [ 2624.303033][ T1962] alloc_uevent_skb+0x83/0x1e2 [ 2624.307816][ T1962] kobject_uevent_env+0xaa3/0x101d [ 2624.312938][ T1962] ? wait_for_completion+0x440/0x440 [ 2624.318239][ T1962] kobject_uevent+0x20/0x26 [ 2624.322761][ T1962] device_del+0x74b/0xc30 [ 2624.327120][ T1962] ? __device_links_no_driver+0x250/0x250 [ 2624.332865][ T1962] rfkill_unregister+0xd1/0x2c0 [ 2624.337741][ T1962] hci_unregister_dev+0x287/0x820 [ 2624.342781][ T1962] vhci_release+0x76/0xf0 [ 2624.347131][ T1962] __fput+0x2ff/0x890 [ 2624.351128][ T1962] ? vhci_close_dev+0x50/0x50 [ 2624.355820][ T1962] ____fput+0x16/0x20 [ 2624.359817][ T1962] task_work_run+0x145/0x1c0 [ 2624.364431][ T1962] exit_to_usermode_loop+0x273/0x2c0 [ 2624.369739][ T1962] do_syscall_64+0x58e/0x680 04:09:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2624.374345][ T1962] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2624.380246][ T1962] RIP: 0033:0x459279 [ 2624.384148][ T1962] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2624.403769][ T1962] RSP: 002b:00007faf8d862c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2624.412195][ T1962] RAX: 0000000000000000 RBX: 00007faf8d862c90 RCX: 0000000000459279 [ 2624.420175][ T1962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 2624.428155][ T1962] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2624.436140][ T1962] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faf8d8636d4 [ 2624.444124][ T1962] R13: 00000000004f7fd2 R14: 00000000004d0db0 R15: 0000000000000005 04:09:27 executing program 2 (fault-call:4 fault-nth:6): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x700], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:27 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be0") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009e0, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be0") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) [ 2624.786618][ T2000] FAULT_INJECTION: forcing a failure. [ 2624.786618][ T2000] name failslab, interval 1, probability 0, space 0, times 0 [ 2624.830239][ T2000] CPU: 0 PID: 2000 Comm: syz-executor.2 Not tainted 5.2.0-rc4 #25 [ 2624.838103][ T2000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2624.848195][ T2000] Call Trace: [ 2624.851511][ T2000] dump_stack+0x172/0x1f0 [ 2624.855867][ T2000] should_fail.cold+0xa/0x15 [ 2624.860477][ T2000] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2624.866329][ T2000] ? ___might_sleep+0x163/0x280 [ 2624.871199][ T2000] __should_failslab+0x121/0x190 [ 2624.871220][ T2000] should_failslab+0x9/0x14 [ 2624.871235][ T2000] kmem_cache_alloc_node_trace+0x26d/0x720 [ 2624.871258][ T2000] __kmalloc_node_track_caller+0x3d/0x70 [ 2624.880682][ T2000] __kmalloc_reserve.isra.0+0x40/0xf0 [ 2624.880700][ T2000] __alloc_skb+0x10b/0x5e0 [ 2624.880722][ T2000] ? skb_trim+0x190/0x190 [ 2624.906255][ T2000] ? kasan_check_read+0x11/0x20 [ 2624.911128][ T2000] alloc_uevent_skb+0x83/0x1e2 [ 2624.915908][ T2000] kobject_uevent_env+0xaa3/0x101d [ 2624.921032][ T2000] ? wait_for_completion+0x440/0x440 [ 2624.926353][ T2000] kobject_uevent+0x20/0x26 04:09:28 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:28 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2624.930867][ T2000] device_del+0x74b/0xc30 [ 2624.935220][ T2000] ? __device_links_no_driver+0x250/0x250 [ 2624.940965][ T2000] rfkill_unregister+0xd1/0x2c0 [ 2624.945842][ T2000] hci_unregister_dev+0x287/0x820 [ 2624.950888][ T2000] vhci_release+0x76/0xf0 [ 2624.955234][ T2000] __fput+0x2ff/0x890 [ 2624.959235][ T2000] ? vhci_close_dev+0x50/0x50 [ 2624.963924][ T2000] ____fput+0x16/0x20 [ 2624.967921][ T2000] task_work_run+0x145/0x1c0 [ 2624.972526][ T2000] exit_to_usermode_loop+0x273/0x2c0 04:09:28 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2624.977834][ T2000] do_syscall_64+0x58e/0x680 [ 2624.982452][ T2000] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2624.988460][ T2000] RIP: 0033:0x459279 [ 2624.992453][ T2000] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2625.012154][ T2000] RSP: 002b:00007faf8d862c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2625.020763][ T2000] RAX: 0000000000000000 RBX: 00007faf8d862c90 RCX: 0000000000459279 04:09:28 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2625.028747][ T2000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 2625.036730][ T2000] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2625.044709][ T2000] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faf8d8636d4 [ 2625.052697][ T2000] R13: 00000000004f7fd2 R14: 00000000004d0db0 R15: 0000000000000005 04:09:28 executing program 2 (fault-call:4 fault-nth:7): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x900], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009e1, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:28 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be0") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:28 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009e2, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xa00], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2625.390089][ T2031] FAULT_INJECTION: forcing a failure. [ 2625.390089][ T2031] name failslab, interval 1, probability 0, space 0, times 0 04:09:28 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x300, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2625.437382][ T2031] CPU: 0 PID: 2031 Comm: syz-executor.2 Not tainted 5.2.0-rc4 #25 [ 2625.445261][ T2031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2625.455329][ T2031] Call Trace: [ 2625.458643][ T2031] dump_stack+0x172/0x1f0 [ 2625.463002][ T2031] should_fail.cold+0xa/0x15 [ 2625.467629][ T2031] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2625.473463][ T2031] ? ___might_sleep+0x163/0x280 [ 2625.478426][ T2031] __should_failslab+0x121/0x190 [ 2625.483380][ T2031] should_failslab+0x9/0x14 04:09:28 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{0xffffff7f}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2625.487893][ T2031] kmem_cache_alloc+0x2af/0x6f0 [ 2625.492758][ T2031] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 2625.498572][ T2031] ? lock_downgrade+0x880/0x880 [ 2625.503445][ T2031] skb_clone+0x154/0x3d0 [ 2625.507731][ T2031] netlink_broadcast_filtered+0x86e/0xb20 [ 2625.513482][ T2031] netlink_broadcast+0x3a/0x50 [ 2625.518260][ T2031] kobject_uevent_env+0xad4/0x101d [ 2625.523391][ T2031] ? wait_for_completion+0x440/0x440 [ 2625.528695][ T2031] kobject_uevent+0x20/0x26 [ 2625.533217][ T2031] device_del+0x74b/0xc30 [ 2625.537563][ T2031] ? __device_links_no_driver+0x250/0x250 [ 2625.543304][ T2031] rfkill_unregister+0xd1/0x2c0 [ 2625.548203][ T2031] hci_unregister_dev+0x287/0x820 [ 2625.553251][ T2031] vhci_release+0x76/0xf0 [ 2625.557593][ T2031] __fput+0x2ff/0x890 [ 2625.561594][ T2031] ? vhci_close_dev+0x50/0x50 [ 2625.566284][ T2031] ____fput+0x16/0x20 [ 2625.570279][ T2031] task_work_run+0x145/0x1c0 [ 2625.574891][ T2031] exit_to_usermode_loop+0x273/0x2c0 [ 2625.580194][ T2031] do_syscall_64+0x58e/0x680 04:09:28 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{0xffffff7f00000000}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2625.584799][ T2031] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2625.590700][ T2031] RIP: 0033:0x459279 [ 2625.594602][ T2031] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2625.614217][ T2031] RSP: 002b:00007faf8d862c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2625.622642][ T2031] RAX: 0000000000000000 RBX: 00007faf8d862c90 RCX: 0000000000459279 04:09:28 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2625.630723][ T2031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 2625.638707][ T2031] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2625.646695][ T2031] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faf8d8636d4 [ 2625.654679][ T2031] R13: 00000000004f7fd2 R14: 00000000004d0db0 R15: 0000000000000005 04:09:29 executing program 2 (fault-call:4 fault-nth:8): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:29 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{0x0, 0xffffff7f}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009e3, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xb00], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2625.942432][ T2059] FAULT_INJECTION: forcing a failure. [ 2625.942432][ T2059] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2625.955684][ T2059] CPU: 1 PID: 2059 Comm: syz-executor.2 Not tainted 5.2.0-rc4 #25 [ 2625.955697][ T2059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2625.955702][ T2059] Call Trace: [ 2625.955729][ T2059] dump_stack+0x172/0x1f0 [ 2625.955755][ T2059] should_fail.cold+0xa/0x15 [ 2625.985802][ T2059] ? console_unlock+0x781/0xec0 [ 2625.990674][ T2059] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2625.996495][ T2059] ? mark_held_locks+0xf0/0xf0 [ 2625.996517][ T2059] should_fail_alloc_page+0x50/0x60 [ 2625.996531][ T2059] __alloc_pages_nodemask+0x1a1/0x8d0 [ 2625.996544][ T2059] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 2625.996563][ T2059] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 2625.996583][ T2059] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 2625.996599][ T2059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2625.996621][ T2059] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2625.996642][ T2059] cache_grow_begin+0x9d/0x650 [ 2626.040969][ T2059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2626.040992][ T2059] kmem_cache_alloc_trace+0x67c/0x750 [ 2626.041009][ T2059] ? mutex_trylock+0x1e0/0x1e0 [ 2626.041022][ T2059] ? kasan_check_write+0x14/0x20 [ 2626.041044][ T2059] kobject_uevent_env+0x387/0x101d [ 2626.052046][ T2059] ? wait_for_completion+0x440/0x440 [ 2626.052124][ T2059] ? software_node_notify+0xfd/0x2ed [ 2626.052145][ T2059] kobject_uevent+0x20/0x26 [ 2626.052161][ T2059] device_del+0x74b/0xc30 [ 2626.052180][ T2059] ? __device_links_no_driver+0x250/0x250 [ 2626.052201][ T2059] ? kobject_put+0x84/0xe0 [ 2626.101818][ T2059] hci_unregister_dev+0x2c6/0x820 [ 2626.106865][ T2059] vhci_release+0x76/0xf0 [ 2626.111211][ T2059] __fput+0x2ff/0x890 [ 2626.115206][ T2059] ? vhci_close_dev+0x50/0x50 [ 2626.119898][ T2059] ____fput+0x16/0x20 [ 2626.123893][ T2059] task_work_run+0x145/0x1c0 [ 2626.128506][ T2059] exit_to_usermode_loop+0x273/0x2c0 [ 2626.133810][ T2059] do_syscall_64+0x58e/0x680 [ 2626.138427][ T2059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2626.144333][ T2059] RIP: 0033:0x459279 [ 2626.148249][ T2059] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2626.167866][ T2059] RSP: 002b:00007faf8d862c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2626.176305][ T2059] RAX: 0000000000000000 RBX: 00007faf8d862c90 RCX: 0000000000459279 [ 2626.184295][ T2059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 04:09:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009e4, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2626.192287][ T2059] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2626.200278][ T2059] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faf8d8636d4 [ 2626.208268][ T2059] R13: 00000000004f7fd2 R14: 00000000004d0db0 R15: 0000000000000005 04:09:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xc00], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:29 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{0x0, 0xffffff7f00000000}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:29 executing program 2 (fault-call:4 fault-nth:9): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009e5, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:29 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{0x0, 0x0, 0xffffff7f}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xd00], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2626.507214][ T2084] FAULT_INJECTION: forcing a failure. [ 2626.507214][ T2084] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2626.520469][ T2084] CPU: 0 PID: 2084 Comm: syz-executor.2 Not tainted 5.2.0-rc4 #25 [ 2626.528282][ T2084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2626.538347][ T2084] Call Trace: [ 2626.541669][ T2084] dump_stack+0x172/0x1f0 [ 2626.546026][ T2084] should_fail.cold+0xa/0x15 [ 2626.550646][ T2084] ? console_unlock+0x781/0xec0 [ 2626.555518][ T2084] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2626.561344][ T2084] ? mark_held_locks+0xf0/0xf0 [ 2626.566132][ T2084] should_fail_alloc_page+0x50/0x60 [ 2626.571343][ T2084] __alloc_pages_nodemask+0x1a1/0x8d0 [ 2626.576735][ T2084] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 2626.582405][ T2084] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 2626.588145][ T2084] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 2626.593802][ T2084] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2626.600155][ T2084] ? fault_create_debugfs_attr+0x1e0/0x1e0 04:09:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2626.605987][ T2084] cache_grow_begin+0x9d/0x650 [ 2626.610770][ T2084] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2626.617040][ T2084] kmem_cache_alloc_trace+0x67c/0x750 [ 2626.622440][ T2084] ? mutex_trylock+0x1e0/0x1e0 [ 2626.627219][ T2084] ? kasan_check_write+0x14/0x20 [ 2626.632183][ T2084] kobject_uevent_env+0x387/0x101d [ 2626.637317][ T2084] ? wait_for_completion+0x440/0x440 [ 2626.642631][ T2084] ? software_node_notify+0xfd/0x2ed [ 2626.647940][ T2084] kobject_uevent+0x20/0x26 [ 2626.652468][ T2084] device_del+0x74b/0xc30 [ 2626.656825][ T2084] ? __device_links_no_driver+0x250/0x250 [ 2626.662562][ T2084] ? kobject_put+0x84/0xe0 [ 2626.667000][ T2084] hci_unregister_dev+0x2c6/0x820 [ 2626.672048][ T2084] vhci_release+0x76/0xf0 [ 2626.676401][ T2084] __fput+0x2ff/0x890 [ 2626.680405][ T2084] ? vhci_close_dev+0x50/0x50 [ 2626.685112][ T2084] ____fput+0x16/0x20 [ 2626.689112][ T2084] task_work_run+0x145/0x1c0 [ 2626.693723][ T2084] exit_to_usermode_loop+0x273/0x2c0 [ 2626.699020][ T2084] do_syscall_64+0x58e/0x680 04:09:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:29 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{0x0, 0x0, 0xffffff7f00000000}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2626.703623][ T2084] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2626.709526][ T2084] RIP: 0033:0x459279 [ 2626.713433][ T2084] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2626.733046][ T2084] RSP: 002b:00007faf8d862c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2626.741487][ T2084] RAX: 0000000000000000 RBX: 00007faf8d862c90 RCX: 0000000000459279 [ 2626.749479][ T2084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 04:09:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009e6, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) [ 2626.757470][ T2084] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2626.765461][ T2084] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faf8d8636d4 [ 2626.773466][ T2084] R13: 00000000004f7fd2 R14: 00000000004d0db0 R15: 0000000000000005 04:09:30 executing program 2 (fault-call:4 fault-nth:10): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xe00], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009e7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:30 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{0x0, 0x0, 0x0, 0xffffff7f}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xf00], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2627.030954][ T2111] FAULT_INJECTION: forcing a failure. [ 2627.030954][ T2111] name failslab, interval 1, probability 0, space 0, times 0 04:09:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2627.092152][ T2111] CPU: 0 PID: 2111 Comm: syz-executor.2 Not tainted 5.2.0-rc4 #25 [ 2627.100011][ T2111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2627.110088][ T2111] Call Trace: [ 2627.113409][ T2111] dump_stack+0x172/0x1f0 [ 2627.117768][ T2111] should_fail.cold+0xa/0x15 [ 2627.122381][ T2111] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2627.128208][ T2111] ? ___might_sleep+0x163/0x280 [ 2627.133115][ T2111] __should_failslab+0x121/0x190 [ 2627.138086][ T2111] should_failslab+0x9/0x14 [ 2627.142610][ T2111] __kmalloc+0x2d9/0x740 [ 2627.146867][ T2111] ? kobject_uevent_env+0x387/0x101d [ 2627.152178][ T2111] ? rcu_read_lock_sched_held+0x110/0x130 [ 2627.157913][ T2111] ? kobject_get_path+0xc4/0x1b0 [ 2627.162861][ T2111] kobject_get_path+0xc4/0x1b0 [ 2627.162882][ T2111] kobject_uevent_env+0x3ab/0x101d [ 2627.162899][ T2111] ? wait_for_completion+0x440/0x440 [ 2627.162918][ T2111] ? software_node_notify+0xfd/0x2ed [ 2627.162938][ T2111] kobject_uevent+0x20/0x26 [ 2627.172819][ T2111] device_del+0x74b/0xc30 04:09:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2627.172839][ T2111] ? __device_links_no_driver+0x250/0x250 [ 2627.172855][ T2111] ? kobject_put+0x84/0xe0 [ 2627.172879][ T2111] hci_unregister_dev+0x2c6/0x820 [ 2627.172905][ T2111] vhci_release+0x76/0xf0 [ 2627.211748][ T2111] __fput+0x2ff/0x890 [ 2627.215753][ T2111] ? vhci_close_dev+0x50/0x50 [ 2627.220450][ T2111] ____fput+0x16/0x20 [ 2627.224453][ T2111] task_work_run+0x145/0x1c0 [ 2627.229062][ T2111] exit_to_usermode_loop+0x273/0x2c0 [ 2627.234374][ T2111] do_syscall_64+0x58e/0x680 [ 2627.238978][ T2111] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2627.244885][ T2111] RIP: 0033:0x459279 [ 2627.248789][ T2111] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2627.268407][ T2111] RSP: 002b:00007faf8d862c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2627.268423][ T2111] RAX: 0000000000000000 RBX: 00007faf8d862c90 RCX: 0000000000459279 [ 2627.268430][ T2111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 04:09:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:30 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2627.268437][ T2111] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2627.268445][ T2111] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faf8d8636d4 [ 2627.268453][ T2111] R13: 00000000004f7fd2 R14: 00000000004d0db0 R15: 0000000000000005 04:09:30 executing program 2 (fault-call:4 fault-nth:11): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009e8, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:30 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0xffffff7f, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1100], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009e9, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) [ 2627.632242][ T2140] FAULT_INJECTION: forcing a failure. [ 2627.632242][ T2140] name failslab, interval 1, probability 0, space 0, times 0 04:09:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009ea, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1200], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2627.697267][ T2140] CPU: 1 PID: 2140 Comm: syz-executor.2 Not tainted 5.2.0-rc4 #25 [ 2627.705126][ T2140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2627.715195][ T2140] Call Trace: [ 2627.718508][ T2140] dump_stack+0x172/0x1f0 [ 2627.722865][ T2140] should_fail.cold+0xa/0x15 [ 2627.727474][ T2140] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2627.733391][ T2140] ? ___might_sleep+0x163/0x280 [ 2627.738836][ T2140] __should_failslab+0x121/0x190 04:09:30 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0xffffff7f00000000, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2627.743799][ T2140] should_failslab+0x9/0x14 [ 2627.748323][ T2140] kmem_cache_alloc_node+0x261/0x710 [ 2627.753708][ T2140] ? find_held_lock+0x35/0x130 [ 2627.758489][ T2140] __alloc_skb+0xd5/0x5e0 [ 2627.762919][ T2140] ? skb_trim+0x190/0x190 [ 2627.767443][ T2140] ? kasan_check_read+0x11/0x20 [ 2627.772307][ T2140] alloc_uevent_skb+0x83/0x1e2 [ 2627.777087][ T2140] kobject_uevent_env+0xaa3/0x101d [ 2627.782475][ T2140] ? wait_for_completion+0x440/0x440 [ 2627.787790][ T2140] kobject_uevent+0x20/0x26 [ 2627.792305][ T2140] device_del+0x74b/0xc30 [ 2627.796652][ T2140] ? __device_links_no_driver+0x250/0x250 [ 2627.802414][ T2140] ? kobject_put+0x84/0xe0 [ 2627.806858][ T2140] hci_unregister_dev+0x2c6/0x820 [ 2627.811908][ T2140] vhci_release+0x76/0xf0 [ 2627.816252][ T2140] __fput+0x2ff/0x890 [ 2627.821758][ T2140] ? vhci_close_dev+0x50/0x50 [ 2627.826454][ T2140] ____fput+0x16/0x20 [ 2627.830446][ T2140] task_work_run+0x145/0x1c0 [ 2627.835057][ T2140] exit_to_usermode_loop+0x273/0x2c0 [ 2627.840360][ T2140] do_syscall_64+0x58e/0x680 [ 2627.844969][ T2140] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2627.850865][ T2140] RIP: 0033:0x459279 [ 2627.854770][ T2140] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2627.874385][ T2140] RSP: 002b:00007faf8d862c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2627.882807][ T2140] RAX: 0000000000000000 RBX: 00007faf8d862c90 RCX: 0000000000459279 [ 2627.890790][ T2140] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 2627.898772][ T2140] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2627.906761][ T2140] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faf8d8636d4 [ 2627.914739][ T2140] R13: 00000000004f7fd2 R14: 00000000004d0db0 R15: 0000000000000005 04:09:31 executing program 2 (fault-call:4 fault-nth:12): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:31 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0xffffff7f, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, 0x0, 0x0) 04:09:31 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009eb, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1300], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009ec, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, 0x0, 0x0) 04:09:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1400], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:31 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:31 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0xffffff7f00000000, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, 0x0, 0x0) 04:09:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009ed, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1500], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:31 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:31 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0xffffff7f, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009ee, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1fffe000000000, 0x880) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000080)=""/184) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x24e) write$P9_RLERRORu(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) mknodat(r1, &(0x7f0000000140)='./file0\x00', 0xc004, 0xe62) flistxattr(r1, &(0x7f0000000180)=""/121, 0x79) close(r2) 04:09:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[], 0x0) 04:09:31 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1600], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:31 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0xffffff7f00000000, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009ef, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x8415) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="9089"], 0x2) close(r2) 04:09:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[], 0x0) 04:09:31 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0xffffff7f, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1800], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2628.796805][ T2214] QAT: Invalid ioctl 04:09:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009f0, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2628.834723][ T2214] QAT: Invalid ioctl 04:09:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x10000) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1dbeb797bcbdc8"], 0x2) close(r1) 04:09:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[], 0x0) 04:09:32 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0xffffff7f00000000, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\xbcSQ\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009f1, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x4000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:32 executing program 2: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x103000, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="ff8147c6e57ab8d15d6ed989b0c8dfa6171c6bc8b176dc8a19d1c85cbea6dd51762b234d2cd874c5e0a7367d76612690727aba3aed7063ea2d1930854e6811ffd5bbd44a83a71528f1e008c93297d2dd8245f8b8014678a09816751b804aeb80175434814d8f096e7c466ae589371983ad28742c5a99b117a5c74ccdec28203053dc5e2c8825b4655dcffd70d34575fdd81280b6cd66be73c4af8da7852c007b137fa01fd6cce221152c1e382576e1cd67a0640e70031189426a11b4df158436563363d64dfb3ed57b3c577b24eec74188bccf331bfa18acfea617dd18b93f018c9de4eb26c39394d6cb66e6257e255cb479c7adbc0f"], 0x2) close(r1) 04:09:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 04:09:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00QS\xbc\xc0\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:32 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x37}}, 0x0) 04:09:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009f2, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 04:09:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x11000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00'], 0x2) close(r1) 04:09:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:32 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x38}}, 0x0) 04:09:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 04:09:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009f3, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x100100], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:32 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) creat(&(0x7f0000000000)='./file0\x00', 0x2) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r0) 04:09:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff"], 0x1) 04:09:32 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x200002c8}}, 0x0) 04:09:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009f4, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff"], 0x1) 04:09:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x48000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x4, 0x0, 0x10001, 0x5c331068}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={r2, 0x80}) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0x134a5e40affebc21}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xac14, @remote, 0x1}, {0xa, 0x4e24, 0xfffffffffffffffc, @rand_addr="4abdf4526fae4617e0d0b1da6634b8ac", 0x4}, r4, 0xfff}}, 0x48) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[], 0x0) close(r3) 04:09:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009f5, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:33 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x7ffff000}}, 0x0) 04:09:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff"], 0x1) 04:09:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009f6, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:33 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x4, 0x0, 0x7, {0x3f, 0x9, 0x5, 0x10000}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r2) 04:09:33 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}, 0x2}, 0x0) 04:09:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x3000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:33 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{0x0, 0x0, 0xffffff7f}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009f7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:33 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}, 0x8}, 0x0) 04:09:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009f8, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x4000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009e0, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:33 executing program 2: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000080)='./file0\x00', r0, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="7282f48b4fc1240ded3d22473d2f036abea03eab"], 0x2) r4 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000340)={r5, 0x80000000}, &(0x7f0000000380)=0x8) close(r3) 04:09:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:33 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}, 0x300}, 0x0) 04:09:33 executing program 0 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009f9, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x5000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:33 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}, 0x1, 0xffffff7f}, 0x0) 04:09:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x88002, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) ioctl$int_out(r1, 0x5462, &(0x7f0000000180)) write$cgroup_int(r1, &(0x7f0000000080)=0x3ff, 0x12) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x2) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000001c0)=0x2, 0x4) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000100)) close(r2) 04:09:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009fa, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2630.755066][ T2347] FAULT_INJECTION: forcing a failure. [ 2630.755066][ T2347] name failslab, interval 1, probability 0, space 0, times 0 04:09:34 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}, 0x1, 0xffffff7f00000000}, 0x0) [ 2630.847274][ T2347] CPU: 1 PID: 2347 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2630.855161][ T2347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2630.865230][ T2347] Call Trace: [ 2630.868547][ T2347] dump_stack+0x172/0x1f0 [ 2630.872916][ T2347] should_fail.cold+0xa/0x15 [ 2630.877529][ T2347] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2630.883356][ T2347] ? ___might_sleep+0x163/0x280 [ 2630.888228][ T2347] __should_failslab+0x121/0x190 [ 2630.893189][ T2347] should_failslab+0x9/0x14 04:09:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000080)) 04:09:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:34 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x6000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2630.897705][ T2347] kmem_cache_alloc_node+0x261/0x710 [ 2630.903007][ T2347] ? _parse_integer+0x190/0x190 [ 2630.907882][ T2347] __alloc_skb+0xd5/0x5e0 [ 2630.912227][ T2347] ? skb_trim+0x190/0x190 [ 2630.916574][ T2347] ? _kstrtoul+0x170/0x170 [ 2630.921013][ T2347] ? get_pid_task+0xc9/0x190 [ 2630.925645][ T2347] vhci_write+0xc4/0x470 [ 2630.929905][ T2347] new_sync_write+0x4d3/0x770 [ 2630.934606][ T2347] ? new_sync_read+0x800/0x800 [ 2630.939392][ T2347] ? __fget+0x381/0x550 [ 2630.943570][ T2347] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2630.949846][ T2347] ? security_file_permission+0x8f/0x380 [ 2630.955505][ T2347] __vfs_write+0xe1/0x110 [ 2630.959859][ T2347] vfs_write+0x20c/0x580 [ 2630.964118][ T2347] ksys_write+0x14f/0x290 [ 2630.968464][ T2347] ? __ia32_sys_read+0xb0/0xb0 [ 2630.973246][ T2347] ? do_syscall_64+0x26/0x680 [ 2630.977944][ T2347] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2630.984029][ T2347] ? do_syscall_64+0x26/0x680 [ 2630.988729][ T2347] __x64_sys_write+0x73/0xb0 [ 2630.993340][ T2347] do_syscall_64+0xfd/0x680 [ 2630.997861][ T2347] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2631.003766][ T2347] RIP: 0033:0x459279 [ 2631.007705][ T2347] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2631.007715][ T2347] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2631.007730][ T2347] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 04:09:34 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 2631.007738][ T2347] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2631.007747][ T2347] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2631.007756][ T2347] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2631.007764][ T2347] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:34 executing program 0 (fault-call:3 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:34 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 04:09:34 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x7000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009fb, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x400000, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYRESHEX=r2, @ANYRESDEC=r2]], 0x8) close(r1) 04:09:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009fc, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:34 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x8000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:34 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x181000, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000080)={0x8, 0x8, 0x3b4b, 0x3, 0x3}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) socket$inet_udplite(0x2, 0x2, 0x88) close(r2) 04:09:34 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) [ 2631.421888][ T2385] FAULT_INJECTION: forcing a failure. [ 2631.421888][ T2385] name failslab, interval 1, probability 0, space 0, times 0 [ 2631.467306][ T2385] CPU: 1 PID: 2385 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2631.475179][ T2385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2631.485283][ T2385] Call Trace: [ 2631.488887][ T2385] dump_stack+0x172/0x1f0 [ 2631.493255][ T2385] should_fail.cold+0xa/0x15 [ 2631.497879][ T2385] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2631.503717][ T2385] ? ___might_sleep+0x163/0x280 [ 2631.508599][ T2385] __should_failslab+0x121/0x190 [ 2631.513552][ T2385] should_failslab+0x9/0x14 [ 2631.518077][ T2385] kmem_cache_alloc_node_trace+0x26d/0x720 [ 2631.523910][ T2385] __kmalloc_node_track_caller+0x3d/0x70 [ 2631.529558][ T2385] __kmalloc_reserve.isra.0+0x40/0xf0 [ 2631.534959][ T2385] __alloc_skb+0x10b/0x5e0 [ 2631.539393][ T2385] ? skb_trim+0x190/0x190 [ 2631.543732][ T2385] ? _kstrtoul+0x170/0x170 [ 2631.548160][ T2385] ? get_pid_task+0xc9/0x190 [ 2631.552768][ T2385] vhci_write+0xc4/0x470 [ 2631.557034][ T2385] new_sync_write+0x4d3/0x770 [ 2631.561752][ T2385] ? new_sync_read+0x800/0x800 [ 2631.566540][ T2385] ? __fget+0x381/0x550 [ 2631.570725][ T2385] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2631.576984][ T2385] ? security_file_permission+0x8f/0x380 [ 2631.582637][ T2385] __vfs_write+0xe1/0x110 [ 2631.586984][ T2385] vfs_write+0x20c/0x580 [ 2631.591239][ T2385] ksys_write+0x14f/0x290 [ 2631.595585][ T2385] ? __ia32_sys_read+0xb0/0xb0 [ 2631.600359][ T2385] ? do_syscall_64+0x26/0x680 [ 2631.600377][ T2385] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2631.600392][ T2385] ? do_syscall_64+0x26/0x680 [ 2631.600411][ T2385] __x64_sys_write+0x73/0xb0 [ 2631.600428][ T2385] do_syscall_64+0xfd/0x680 [ 2631.600450][ T2385] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2631.630798][ T2385] RIP: 0033:0x459279 [ 2631.630815][ T2385] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:09:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\xbcSQ\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2631.630824][ T2385] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2631.630838][ T2385] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2631.630847][ T2385] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2631.630855][ T2385] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2631.630863][ T2385] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2631.630871][ T2385] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:35 executing program 0 (fault-call:3 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x9000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009fd, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:35 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}, 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x0) 04:09:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80000400, &(0x7f0000000000)="dc85055e4bebe8038a33f5aa8c400f390e56959e3963e5f399d782c7e28e80f9d3eefb60d62f1f58ee43040b2b445580c03e0ad3ad6042f46a6b6ec06ef8") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) socket$xdp(0x2c, 0x3, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00'], 0x2) close(r1) 04:09:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xa000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:35 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2632.026075][ T2417] FAULT_INJECTION: forcing a failure. [ 2632.026075][ T2417] name failslab, interval 1, probability 0, space 0, times 0 [ 2632.104321][ T2417] CPU: 0 PID: 2417 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2632.112193][ T2417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2632.122267][ T2417] Call Trace: [ 2632.125572][ T2417] dump_stack+0x172/0x1f0 [ 2632.129944][ T2417] should_fail.cold+0xa/0x15 [ 2632.134779][ T2417] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2632.140615][ T2417] ? ___might_sleep+0x163/0x280 [ 2632.145488][ T2417] __should_failslab+0x121/0x190 [ 2632.150449][ T2417] should_failslab+0x9/0x14 [ 2632.154973][ T2417] kmem_cache_alloc_node+0x261/0x710 [ 2632.160279][ T2417] ? trace_hardirqs_off+0x62/0x220 [ 2632.165426][ T2417] __alloc_skb+0xd5/0x5e0 [ 2632.169771][ T2417] ? skb_trim+0x190/0x190 [ 2632.174120][ T2417] ? vhci_write+0x2b3/0x470 [ 2632.178637][ T2417] ? rcu_read_lock_sched_held+0x110/0x130 [ 2632.184374][ T2417] ? kmem_cache_free+0x222/0x260 [ 2632.189329][ T2417] __vhci_create_device+0x88/0x5a0 [ 2632.189349][ T2417] vhci_write+0x2d0/0x470 [ 2632.189372][ T2417] new_sync_write+0x4d3/0x770 [ 2632.203505][ T2417] ? new_sync_read+0x800/0x800 [ 2632.208299][ T2417] ? __fget+0x381/0x550 [ 2632.212480][ T2417] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2632.218752][ T2417] ? security_file_permission+0x8f/0x380 [ 2632.224405][ T2417] __vfs_write+0xe1/0x110 [ 2632.224423][ T2417] vfs_write+0x20c/0x580 [ 2632.224441][ T2417] ksys_write+0x14f/0x290 [ 2632.224465][ T2417] ? __ia32_sys_read+0xb0/0xb0 [ 2632.242204][ T2417] ? do_syscall_64+0x26/0x680 [ 2632.246890][ T2417] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 04:09:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x4000) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000080)=0x7fffffff) close(r1) [ 2632.246906][ T2417] ? do_syscall_64+0x26/0x680 [ 2632.246928][ T2417] __x64_sys_write+0x73/0xb0 [ 2632.262384][ T2417] do_syscall_64+0xfd/0x680 [ 2632.266909][ T2417] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2632.272810][ T2417] RIP: 0033:0x459279 [ 2632.272827][ T2417] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2632.272835][ T2417] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 04:09:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009fe, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:35 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 2632.272848][ T2417] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2632.272856][ T2417] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2632.272864][ T2417] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2632.272882][ T2417] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2632.296397][ T2417] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:35 executing program 0 (fault-call:3 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xb000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x80000000009ff, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:35 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0xffffff7f) [ 2632.539987][ T2437] FAULT_INJECTION: forcing a failure. [ 2632.539987][ T2437] name failslab, interval 1, probability 0, space 0, times 0 [ 2632.608425][ T2437] CPU: 1 PID: 2437 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2632.616301][ T2437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2632.626380][ T2437] Call Trace: [ 2632.629707][ T2437] dump_stack+0x172/0x1f0 [ 2632.634079][ T2437] should_fail.cold+0xa/0x15 [ 2632.638710][ T2437] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2632.644563][ T2437] ? ___might_sleep+0x163/0x280 [ 2632.649490][ T2437] __should_failslab+0x121/0x190 04:09:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) [ 2632.654471][ T2437] should_failslab+0x9/0x14 [ 2632.659001][ T2437] kmem_cache_alloc_node_trace+0x26d/0x720 [ 2632.664846][ T2437] __kmalloc_node_track_caller+0x3d/0x70 [ 2632.670513][ T2437] __kmalloc_reserve.isra.0+0x40/0xf0 [ 2632.675917][ T2437] __alloc_skb+0x10b/0x5e0 [ 2632.680361][ T2437] ? skb_trim+0x190/0x190 [ 2632.684706][ T2437] ? vhci_write+0x2b3/0x470 [ 2632.689227][ T2437] ? rcu_read_lock_sched_held+0x110/0x130 [ 2632.695052][ T2437] ? kmem_cache_free+0x222/0x260 [ 2632.700099][ T2437] __vhci_create_device+0x88/0x5a0 [ 2632.705234][ T2437] vhci_write+0x2d0/0x470 [ 2632.709595][ T2437] new_sync_write+0x4d3/0x770 [ 2632.714290][ T2437] ? new_sync_read+0x800/0x800 [ 2632.719080][ T2437] ? __fget+0x381/0x550 [ 2632.723269][ T2437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2632.729538][ T2437] ? security_file_permission+0x8f/0x380 [ 2632.735205][ T2437] __vfs_write+0xe1/0x110 [ 2632.739561][ T2437] vfs_write+0x20c/0x580 [ 2632.743833][ T2437] ksys_write+0x14f/0x290 [ 2632.743851][ T2437] ? __ia32_sys_read+0xb0/0xb0 [ 2632.743871][ T2437] ? do_syscall_64+0x26/0x680 04:09:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a00, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2632.743887][ T2437] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2632.743899][ T2437] ? do_syscall_64+0x26/0x680 [ 2632.743915][ T2437] __x64_sys_write+0x73/0xb0 [ 2632.743931][ T2437] do_syscall_64+0xfd/0x680 [ 2632.743948][ T2437] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2632.743959][ T2437] RIP: 0033:0x459279 [ 2632.743976][ T2437] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2632.743984][ T2437] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2632.744008][ T2437] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2632.763829][ T2437] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2632.763838][ T2437] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2632.763845][ T2437] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2632.763853][ T2437] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xc000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:36 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0xffffff7f00000000) 04:09:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a01, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:36 executing program 0 (fault-call:3 fault-nth:4): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:36 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs(r1, &(0x7f00000000c0)='net/ip6_tables_targets\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r2}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) fsetxattr$security_smack_transmute(r1, &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x3) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f00000002c0)=0xc416) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x440) write$P9_RLERRORu(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="6d3752def0d25194d9adc0d43456420981ec96035a431626874dfee0479f98e20cebbb1ab567438fbded95e777c2ff367ebafbe99d43e057a4b65fcc24c008a25643a71bf066224b750327d52137b4e1b94304ca82f929471fa4d5a32f6a13b7f724911b26e9ff6646624f94ab3e610901e5ae14bb42ec52b0bf460f7338240d7570a4620c741e46582fa70ed56f152f506c7cdb485786896c032bc1f3ed62a80d9802c1cc711a239536734aea2ebb9fa40de5"], 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x100, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000580)=""/234) close(r2) 04:09:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a02, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xd000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") init_module(&(0x7f0000000180)='mime_type(mime_type\x00', 0x14, &(0x7f0000000080)='/dev/vhci\x00') r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[], 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000100)={0x1099500a, 0x0, 0x4, {0x77359400}, 0x8, 0x7f}) close(r0) 04:09:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:36 executing program 4: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a03, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xe000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2633.354555][ T2481] FAULT_INJECTION: forcing a failure. [ 2633.354555][ T2481] name failslab, interval 1, probability 0, space 0, times 0 [ 2633.377661][ T2482] Unknown ioctl -1067691200 [ 2633.404178][ T2481] CPU: 1 PID: 2481 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2633.412042][ T2481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2633.422108][ T2481] Call Trace: [ 2633.425504][ T2481] dump_stack+0x172/0x1f0 [ 2633.429859][ T2481] should_fail.cold+0xa/0x15 [ 2633.434466][ T2481] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2633.440289][ T2481] ? ___might_sleep+0x163/0x280 [ 2633.445158][ T2481] __should_failslab+0x121/0x190 [ 2633.450110][ T2481] should_failslab+0x9/0x14 [ 2633.454627][ T2481] kmem_cache_alloc_trace+0x2ce/0x750 [ 2633.460022][ T2481] ? skb_trim+0x190/0x190 [ 2633.464363][ T2481] ? vhci_write+0x2b3/0x470 [ 2633.468874][ T2481] ? rcu_read_lock_sched_held+0x110/0x130 [ 2633.474620][ T2481] hci_alloc_dev+0x43/0x1d00 [ 2633.479228][ T2481] __vhci_create_device+0x101/0x5a0 [ 2633.484438][ T2481] vhci_write+0x2d0/0x470 [ 2633.488783][ T2481] new_sync_write+0x4d3/0x770 [ 2633.493483][ T2481] ? new_sync_read+0x800/0x800 [ 2633.498271][ T2481] ? __fget+0x381/0x550 [ 2633.502455][ T2481] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2633.508713][ T2481] ? security_file_permission+0x8f/0x380 [ 2633.514447][ T2481] __vfs_write+0xe1/0x110 [ 2633.514465][ T2481] vfs_write+0x20c/0x580 [ 2633.514484][ T2481] ksys_write+0x14f/0x290 [ 2633.514501][ T2481] ? __ia32_sys_read+0xb0/0xb0 [ 2633.514519][ T2481] ? do_syscall_64+0x26/0x680 [ 2633.514534][ T2481] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2633.514547][ T2481] ? do_syscall_64+0x26/0x680 [ 2633.514564][ T2481] __x64_sys_write+0x73/0xb0 04:09:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(0xffffffffffffffff) 04:09:36 executing program 0 (fault-call:3 fault-nth:5): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) [ 2633.514586][ T2481] do_syscall_64+0xfd/0x680 [ 2633.514605][ T2481] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2633.514617][ T2481] RIP: 0033:0x459279 [ 2633.514632][ T2481] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2633.514640][ T2481] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2633.514653][ T2481] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 04:09:36 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x100, 0x0) write$P9_RWALK(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="230000006f0200020044020000000500000000000000a20000020004000000000033771b24d5e76cce5ae44a0c55485c602da5b9fed9dc201304424057cbf0cee117542fc553b05e9681b38b7e76e4e307b5a397d876abf2800a2a58a799c72e"], 0x23) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x6, 0x0) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000080)) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) [ 2633.514662][ T2481] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2633.514671][ T2481] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2633.514679][ T2481] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2633.514688][ T2481] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xf000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a04, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:36 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) r2 = dup3(r0, r0, 0x80000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 2633.673337][ T2500] FAULT_INJECTION: forcing a failure. [ 2633.673337][ T2500] name failslab, interval 1, probability 0, space 0, times 0 [ 2633.706199][ T2500] CPU: 0 PID: 2500 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2633.714112][ T2500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2633.724186][ T2500] Call Trace: [ 2633.727502][ T2500] dump_stack+0x172/0x1f0 [ 2633.731887][ T2500] should_fail.cold+0xa/0x15 [ 2633.736505][ T2500] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2633.742337][ T2500] ? ___might_sleep+0x163/0x280 [ 2633.747220][ T2500] __should_failslab+0x121/0x190 [ 2633.752187][ T2500] should_failslab+0x9/0x14 [ 2633.756711][ T2500] __kmalloc+0x2d9/0x740 [ 2633.761059][ T2500] ? alloc_workqueue+0x166/0xf00 [ 2633.766022][ T2500] alloc_workqueue+0x166/0xf00 [ 2633.770806][ T2500] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2633.776536][ T2500] ? scnprintf+0x140/0x140 [ 2633.780970][ T2500] ? __init_waitqueue_head+0x36/0x90 [ 2633.786278][ T2500] hci_register_dev+0x1b8/0x860 [ 2633.791170][ T2500] ? hci_init_sysfs+0x7c/0xa0 [ 2633.795862][ T2500] __vhci_create_device+0x2d0/0x5a0 [ 2633.801082][ T2500] vhci_write+0x2d0/0x470 [ 2633.801104][ T2500] new_sync_write+0x4d3/0x770 [ 2633.801122][ T2500] ? new_sync_read+0x800/0x800 [ 2633.801145][ T2500] ? __fget+0x381/0x550 [ 2633.801168][ T2500] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2633.801195][ T2500] ? security_file_permission+0x8f/0x380 [ 2633.820245][ T2500] __vfs_write+0xe1/0x110 [ 2633.836458][ T2500] vfs_write+0x20c/0x580 [ 2633.840710][ T2500] ksys_write+0x14f/0x290 [ 2633.840727][ T2500] ? __ia32_sys_read+0xb0/0xb0 [ 2633.840746][ T2500] ? do_syscall_64+0x26/0x680 [ 2633.840763][ T2500] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2633.840777][ T2500] ? do_syscall_64+0x26/0x680 [ 2633.840803][ T2500] __x64_sys_write+0x73/0xb0 [ 2633.865287][ T2500] do_syscall_64+0xfd/0x680 [ 2633.865309][ T2500] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2633.865321][ T2500] RIP: 0033:0x459279 [ 2633.865338][ T2500] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2633.865346][ T2500] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2633.865361][ T2500] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 04:09:37 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000feffffff0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000784e8b4be9069414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="0200"/16, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000ddff000000000000000000000010ddc4a2880e6a85f2"], 0x48}}, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x800, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0xa10004, 0x230000000, 0x61f, [], &(0x7f00000000c0)={0x9b0966, 0x1, [], @value=0x8}}) 04:09:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2633.865370][ T2500] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2633.865378][ T2500] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2633.865388][ T2500] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2633.865397][ T2500] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 [ 2633.953474][ T2500] Bluetooth: Can't register HCI device 04:09:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x10000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:37 executing program 0 (fault-call:3 fault-nth:6): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a05, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2634.123199][ T2521] FAULT_INJECTION: forcing a failure. [ 2634.123199][ T2521] name failslab, interval 1, probability 0, space 0, times 0 [ 2634.154636][ T2521] CPU: 1 PID: 2521 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2634.162496][ T2521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2634.172564][ T2521] Call Trace: [ 2634.175892][ T2521] dump_stack+0x172/0x1f0 [ 2634.180254][ T2521] should_fail.cold+0xa/0x15 [ 2634.184877][ T2521] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2634.190711][ T2521] ? ___might_sleep+0x163/0x280 [ 2634.195592][ T2521] __should_failslab+0x121/0x190 [ 2634.200547][ T2521] should_failslab+0x9/0x14 [ 2634.205068][ T2521] __kmalloc+0x2d9/0x740 [ 2634.209339][ T2521] ? alloc_workqueue+0x166/0xf00 [ 2634.214305][ T2521] alloc_workqueue+0x166/0xf00 [ 2634.219090][ T2521] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2634.224828][ T2521] ? scnprintf+0x140/0x140 [ 2634.229274][ T2521] ? __init_waitqueue_head+0x36/0x90 [ 2634.234593][ T2521] hci_register_dev+0x1b8/0x860 [ 2634.239463][ T2521] ? hci_init_sysfs+0x7c/0xa0 [ 2634.244166][ T2521] __vhci_create_device+0x2d0/0x5a0 [ 2634.249389][ T2521] vhci_write+0x2d0/0x470 [ 2634.253745][ T2521] new_sync_write+0x4d3/0x770 [ 2634.258449][ T2521] ? new_sync_read+0x800/0x800 [ 2634.263237][ T2521] ? __fget+0x381/0x550 [ 2634.267423][ T2521] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 04:09:37 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) connect(r0, &(0x7f00000000c0)=@sco={0x1f, {0x400, 0x7, 0xc2e, 0x7, 0xffff, 0x8}}, 0x80) 04:09:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000000)) [ 2634.273681][ T2521] ? security_file_permission+0x8f/0x380 [ 2634.279335][ T2521] __vfs_write+0xe1/0x110 [ 2634.279355][ T2521] vfs_write+0x20c/0x580 [ 2634.279374][ T2521] ksys_write+0x14f/0x290 [ 2634.279391][ T2521] ? __ia32_sys_read+0xb0/0xb0 [ 2634.279410][ T2521] ? do_syscall_64+0x26/0x680 [ 2634.279435][ T2521] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2634.292321][ T2521] ? do_syscall_64+0x26/0x680 [ 2634.292342][ T2521] __x64_sys_write+0x73/0xb0 [ 2634.292358][ T2521] do_syscall_64+0xfd/0x680 [ 2634.292379][ T2521] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2634.292391][ T2521] RIP: 0033:0x459279 [ 2634.292409][ T2521] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2634.292417][ T2521] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2634.292431][ T2521] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 04:09:37 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}, 0x4) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="c0dca5055e0bcfec7be070") splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r6}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000feffffff0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000784e8b4be98e9414118b6ad12b8f23280b8df8c0ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b029d35fb36a2c22591e499b52eecd65030195393e"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r6}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x11000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2634.292439][ T2521] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2634.292447][ T2521] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2634.292455][ T2521] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2634.292463][ T2521] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a06, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2634.520850][ T2521] Bluetooth: Can't register HCI device 04:09:37 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x98840, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r1, 0x900, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x88}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000000}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000240)={0x0, 0x6, 0x7ff, 0x7, 'syz1\x00'}) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(0xffffffffffffffff) write$P9_RLERRORu(r0, &(0x7f0000000280)={0x12, 0x7, 0x1, {{0x5, 'syz1\x00'}, 0x9b0}}, 0x12) 04:09:37 executing program 0 (fault-call:3 fault-nth:7): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x12000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a07, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2634.705094][ T2552] FAULT_INJECTION: forcing a failure. [ 2634.705094][ T2552] name failslab, interval 1, probability 0, space 0, times 0 [ 2634.754431][ T2552] CPU: 1 PID: 2552 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2634.762299][ T2552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2634.772492][ T2552] Call Trace: [ 2634.775996][ T2552] dump_stack+0x172/0x1f0 [ 2634.780772][ T2552] should_fail.cold+0xa/0x15 [ 2634.785674][ T2552] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2634.791810][ T2552] ? ___might_sleep+0x163/0x280 [ 2634.797090][ T2552] __should_failslab+0x121/0x190 [ 2634.802357][ T2552] should_failslab+0x9/0x14 [ 2634.806935][ T2552] kmem_cache_alloc_trace+0x2ce/0x750 [ 2634.812475][ T2552] ? rcu_read_lock_sched_held+0x110/0x130 [ 2634.819827][ T2552] ? __kmalloc+0x5d2/0x740 [ 2634.824320][ T2552] alloc_workqueue_attrs+0x82/0x120 [ 2634.829656][ T2552] alloc_workqueue+0x190/0xf00 [ 2634.834514][ T2552] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2634.840293][ T2552] ? scnprintf+0x140/0x140 [ 2634.844764][ T2552] ? __init_waitqueue_head+0x36/0x90 [ 2634.850116][ T2552] hci_register_dev+0x1b8/0x860 [ 2634.855231][ T2552] ? hci_init_sysfs+0x7c/0xa0 [ 2634.859954][ T2552] __vhci_create_device+0x2d0/0x5a0 [ 2634.865205][ T2552] vhci_write+0x2d0/0x470 [ 2634.869607][ T2552] new_sync_write+0x4d3/0x770 [ 2634.874422][ T2552] ? new_sync_read+0x800/0x800 [ 2634.879233][ T2552] ? __fget+0x381/0x550 [ 2634.883441][ T2552] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2634.889765][ T2552] ? security_file_permission+0x8f/0x380 [ 2634.895465][ T2552] __vfs_write+0xe1/0x110 [ 2634.899933][ T2552] vfs_write+0x20c/0x580 [ 2634.904245][ T2552] ksys_write+0x14f/0x290 [ 2634.908701][ T2552] ? __ia32_sys_read+0xb0/0xb0 [ 2634.913523][ T2552] ? do_syscall_64+0x26/0x680 [ 2634.918332][ T2552] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2634.924520][ T2552] ? do_syscall_64+0x26/0x680 [ 2634.929235][ T2552] __x64_sys_write+0x73/0xb0 [ 2634.933964][ T2552] do_syscall_64+0xfd/0x680 [ 2634.938514][ T2552] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2634.944459][ T2552] RIP: 0033:0x459279 [ 2634.948396][ T2552] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2634.968026][ T2552] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2634.976541][ T2552] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2634.984526][ T2552] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2634.992504][ T2552] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 04:09:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) socket$inet_udp(0x2, 0x2, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8) getgroups(0x5, &(0x7f0000000200)=[0x0, 0x0, 0xee01, 0xee00, 0x0]) fchownat(r0, &(0x7f0000000000)='./file0\x00', r2, r3, 0x100) [ 2635.000478][ T2552] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2635.008539][ T2552] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x13000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2635.086048][ T2552] Bluetooth: Can't register HCI device [ 2635.191816][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2635.197723][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2635.203595][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2635.209367][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:09:38 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x1d, r1}, 0x10, &(0x7f0000000640)={&(0x7f00000005c0)={0x4, 0x0, 0x2, {r2, r3/1000+30000}, {0x0, 0x2710}, {0x3, 0x8000, 0x0, 0x4}, 0x1, @can={{0x3, 0xfffffffffffff0c9, 0x20}, 0x7, 0x1, 0x0, 0x0, "36f1edeef2be5353"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x800, 0x200001) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x8001, 0x4) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000240)={0xffff, 0x7f, 0x6, {r6, r7+30000000}, 0x2, 0x1}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000feffffff0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642270200fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"], 0x80}}, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r5, 0x401870cc, &(0x7f00000000c0)={0x3f, 0xdcd, 0x0, 0xffffffff}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r4}, 0x10, &(0x7f0000000300)={&(0x7f0000000480)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {r8, r9/1000+10000}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:38 executing program 2: symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r2) 04:09:38 executing program 0 (fault-call:3 fault-nth:8): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a08, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x14000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2635.350716][ T2570] FAULT_INJECTION: forcing a failure. [ 2635.350716][ T2570] name failslab, interval 1, probability 0, space 0, times 0 [ 2635.401284][ T2570] CPU: 1 PID: 2570 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2635.409146][ T2570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2635.419217][ T2570] Call Trace: [ 2635.422533][ T2570] dump_stack+0x172/0x1f0 [ 2635.426883][ T2570] should_fail.cold+0xa/0x15 [ 2635.431491][ T2570] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2635.437313][ T2570] ? ___might_sleep+0x163/0x280 [ 2635.442179][ T2570] __should_failslab+0x121/0x190 [ 2635.447128][ T2570] should_failslab+0x9/0x14 [ 2635.451642][ T2570] __kmalloc_track_caller+0x2d5/0x740 [ 2635.457022][ T2570] ? pointer+0x750/0x750 [ 2635.461270][ T2570] ? widen_string+0x2e0/0x2e0 [ 2635.461286][ T2570] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 2635.461309][ T2570] ? kasprintf+0xbb/0xf0 [ 2635.475845][ T2570] kvasprintf+0xc8/0x170 [ 2635.480105][ T2570] ? bust_spinlocks+0xe0/0xe0 [ 2635.484798][ T2570] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2635.490522][ T2570] ? find_next_bit+0x107/0x130 [ 2635.495300][ T2570] kasprintf+0xbb/0xf0 [ 2635.499376][ T2570] ? kvasprintf_const+0x190/0x190 [ 2635.499401][ T2570] ? kasan_check_read+0x11/0x20 [ 2635.499425][ T2570] alloc_workqueue+0x471/0xf00 [ 2635.514041][ T2570] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2635.514063][ T2570] ? __init_waitqueue_head+0x36/0x90 [ 2635.514085][ T2570] hci_register_dev+0x1b8/0x860 [ 2635.514100][ T2570] ? hci_init_sysfs+0x7c/0xa0 [ 2635.514122][ T2570] __vhci_create_device+0x2d0/0x5a0 [ 2635.514140][ T2570] vhci_write+0x2d0/0x470 [ 2635.514158][ T2570] new_sync_write+0x4d3/0x770 [ 2635.514174][ T2570] ? new_sync_read+0x800/0x800 [ 2635.514194][ T2570] ? __fget+0x381/0x550 [ 2635.514217][ T2570] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2635.514241][ T2570] ? security_file_permission+0x8f/0x380 [ 2635.530081][ T2570] __vfs_write+0xe1/0x110 [ 2635.530100][ T2570] vfs_write+0x20c/0x580 [ 2635.530119][ T2570] ksys_write+0x14f/0x290 [ 2635.553704][ T2570] ? __ia32_sys_read+0xb0/0xb0 [ 2635.553722][ T2570] ? do_syscall_64+0x26/0x680 [ 2635.553738][ T2570] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 04:09:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x15000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a09, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2635.553751][ T2570] ? do_syscall_64+0x26/0x680 [ 2635.553769][ T2570] __x64_sys_write+0x73/0xb0 [ 2635.553786][ T2570] do_syscall_64+0xfd/0x680 [ 2635.553807][ T2570] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2635.587453][ T2570] RIP: 0033:0x459279 [ 2635.598173][ T2570] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:09:38 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000600)=@hci, 0xfffffffffffffefb) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000feffffff0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52001065030195393e"], 0x80}}, 0x0) r2 = accept(r0, &(0x7f00000000c0)=@hci, &(0x7f0000000040)=0x80) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000380)=0x10000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r3 = openat$cgroup_ro(r0, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x82000412}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r4, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0200"/16, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="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"], 0x48}}, 0x0) [ 2635.598181][ T2570] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2635.598195][ T2570] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2635.598204][ T2570] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2635.598212][ T2570] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2635.598227][ T2570] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2635.648193][ T2570] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a0a, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:38 executing program 0 (fault-call:3 fault-nth:9): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x16000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x20000, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0xffff, 0x4, 0x3, 0x9, 0x8, 0x0, 0x4, 0x7, 0x7561, 0xfffffffffffffe00, 0xfffffffffffffff9, 0x5, 0x89cb, 0x7, 0x4, 0x0, 0x8, 0x3, 0x80, 0xffffffc000000000, 0x7, 0x2, 0x7fffffff, 0x1ff, 0x6, 0x3ff, 0x71f8, 0xc79, 0x7ff, 0x5, 0xfffffffffffffff8, 0xd64]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x200000246) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f00000000c0)) write$P9_RLERRORu(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="d2768f158701b0caba49fbf2ca1bf5e187f342a93ce30b6ba6fe4f5e"], 0x2) close(r2) 04:09:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x18000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2635.904866][ T2598] FAULT_INJECTION: forcing a failure. [ 2635.904866][ T2598] name failslab, interval 1, probability 0, space 0, times 0 [ 2635.963126][ T2598] CPU: 0 PID: 2598 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2635.970995][ T2598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2635.981074][ T2598] Call Trace: [ 2635.984404][ T2598] dump_stack+0x172/0x1f0 [ 2635.988759][ T2598] should_fail.cold+0xa/0x15 [ 2635.993377][ T2598] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2635.999205][ T2598] ? ___might_sleep+0x163/0x280 [ 2636.004083][ T2598] __should_failslab+0x121/0x190 [ 2636.010021][ T2598] should_failslab+0x9/0x14 [ 2636.010073][ T2598] kmem_cache_alloc_trace+0x2ce/0x750 [ 2636.010099][ T2598] ? rcu_read_lock_sched_held+0x110/0x130 [ 2636.010114][ T2598] ? __kmalloc+0x5d2/0x740 [ 2636.010138][ T2598] alloc_workqueue_attrs+0x82/0x120 [ 2636.010160][ T2598] apply_wqattrs_prepare+0xbb/0x970 [ 2636.040575][ T2598] apply_workqueue_attrs_locked+0xcb/0x140 [ 2636.046406][ T2598] apply_workqueue_attrs+0x31/0x50 [ 2636.051528][ T2598] alloc_workqueue+0x8b9/0xf00 [ 2636.056309][ T2598] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2636.062047][ T2598] ? __init_waitqueue_head+0x36/0x90 [ 2636.067357][ T2598] hci_register_dev+0x1b8/0x860 [ 2636.072223][ T2598] ? hci_init_sysfs+0x7c/0xa0 [ 2636.076928][ T2598] __vhci_create_device+0x2d0/0x5a0 [ 2636.082145][ T2598] vhci_write+0x2d0/0x470 [ 2636.086484][ T2598] new_sync_write+0x4d3/0x770 [ 2636.091166][ T2598] ? new_sync_read+0x800/0x800 [ 2636.091190][ T2598] ? __fget+0x381/0x550 [ 2636.091219][ T2598] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2636.106376][ T2598] ? security_file_permission+0x8f/0x380 [ 2636.112023][ T2598] __vfs_write+0xe1/0x110 [ 2636.116395][ T2598] vfs_write+0x20c/0x580 [ 2636.120657][ T2598] ksys_write+0x14f/0x290 [ 2636.125002][ T2598] ? __ia32_sys_read+0xb0/0xb0 [ 2636.129784][ T2598] ? do_syscall_64+0x26/0x680 [ 2636.134471][ T2598] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2636.140555][ T2598] ? do_syscall_64+0x26/0x680 [ 2636.145241][ T2598] __x64_sys_write+0x73/0xb0 [ 2636.149843][ T2598] do_syscall_64+0xfd/0x680 [ 2636.154382][ T2598] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2636.160288][ T2598] RIP: 0033:0x459279 04:09:39 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@isdn={0x22, 0x6, 0x8000, 0x0, 0x38000000000000}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000480)="737fc3e8d566aaf90ea9be0cac913063de3546e158589066d574bddfb0c87e6b0b74775787c69136531cc57683a70c0c38e2df834958a6b416e06ae374eac61779d54cf516d37ccc23e241f057c1f84f89fd2c3ea2f7824c890a17b4252760988f4be9e6bcba4eef5d6aaf1bc272d6bca27f0cccbfc4a6f8ed5eab8e7c6518ae38550819b1305c75d6afbdce8da64a9f38f13d50c36d9e292b50089c4b4d36b6", 0xa0}], 0x1, &(0x7f0000000540)=[{0xb8, 0x100, 0xfff, "ac363dfb273bc3928fec91c6103dd48573b7c8a1934793ce564f431c97e74104451c416a224f1247eec608368111a1f754e57b50c5a7369699484e0bc1701d5d7785f0396c3a543259ce788f4ef55f50aa3acaffba954142ed39dd886a16911a3d8845b19d01118442828b2db8f2fda6f94ffea14f0be0ede3350859159f0f124db9be2266321dda2f6c1372be67c749bce0d192766cf7f94e8868553de514b116bc6b31408b5b"}, {0xb0, 0x117, 0x7, "f5c1469fb229e0669ef57e66958f7a1073959ceb7592281ca166170b19f64449ad299379ba367708f2836b30a71f828ae30991385be41e73e52a56155079b885128dbebc8111706b42e95ae67691153a77f817b54e963125b8f00e40e1ec9c911067541e0c02a0d8cf0095755e11f7c47049f82ad4ce26124e8c6d83f224b0e22059b2fbd548d4e5c585c14389477d9dbf529ff73ebec9ea6497d55d6878"}], 0x168}}], 0x1, 0x24000080) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x9, 0x100}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/10], 0x2) close(r1) 04:09:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x80000) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000600)={0x0, @reserved}) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0x3}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000240)={r3, 0xf6, "c1adcc8fb311a7067292916e28a4ad6c1a0b4f0213dbfda13e7fbcf057342c5613e572015a2f9a97f59775cb1678cd488e8fe6b73314516c99fe0a26dffd8fd7a360a775225cdd99a46e60155b99032917f05af3638ca6edf1874d7ec264fb12412e7b6a3632d9fbc890353d03edfe1e136cfa08b82591ade55cc3004995859f6f3e73fc9b6a4e313d7704f541ac4cec8bd845e3a7940f4db1fbd1803684bfbd5343cddd1321eecdebad016134c38ff62aeeed0535ca1b2c33f9b50f2ede814a54b1c112562756ec1d52c9679d06f5b7ad22f4e266c6389e82c2a8c35dd75c81f19d0f1e2ce7325684e78047f4e1b9bea1d1c03c92c4"}, &(0x7f0000000340)=0xfe) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000380)={r4, 0xffffffffffffffdf, 0x7}, &(0x7f00000003c0)=0x8) fsetxattr$security_smack_entry(r2, &(0x7f00000001c0)='security.SMACK64\x00', &(0x7f0000000200)='systemlovboxnet0}wlan1trustedem1\x00', 0x21, 0x1) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f82"], 0x2) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000080)=0x1) close(r1) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) [ 2636.164209][ T2598] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2636.183817][ T2598] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2636.192240][ T2598] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2636.192249][ T2598] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 04:09:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a0b, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2636.192257][ T2598] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2636.192267][ T2598] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2636.192275][ T2598] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 [ 2636.254373][ T2598] Bluetooth: Can't register HCI device 04:09:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x40000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:39 executing program 0 (fault-call:3 fault-nth:10): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a0c, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x44000) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7fff, 0x80) fallocate(r0, 0xc, 0x4000200, 0x2) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[], 0xfffffffffffffe11) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/audio#\x00'}, {0x20, '/dev/audio#\x00'}], 0xa, "672dd5782812515339637048f6b56b7ee41be018ae463453d07a1791096841516a1e6822cdac06c559d3e9b62a388242fbcb6d7a9812857a8072820607f9a8cb73c1c8769ecc5147325156b9b78d2c62f9384d6d6b9c696440fd07fdc84023341e84f357aa2cc38df8f89ca382f61d628198e3b24b4f86281c5b0fbc5ad04104daa283fc568644d292e1a8731dc6942caa63c32d16dc0775c2d76fc1a0e6c4b27baf3de7f48cbeea589eb6f9b7292cbd41321bf8a87cb0c2cd84a99e74c37ba32f38dd52e8d534405e5446fe19cd62dea61eb4ce146f461f074c401ea68af899bb70bd256ee1c5d6f177e347a9a49d9e516b018fa4e8087989d142c06764"}, 0x123) ioctl$sock_netdev_private(r0, 0x89f7, &(0x7f0000000240)="e60ba5f72430435d0030098e3d746785a74c22332da18082f0a7f7e921020945a87e0fa3aa7e2c61d65363234a8c592263cd3666c3e6") ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000080)=0x2) close(r1) 04:09:39 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500b3f035bff2ff00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000000c0)={{0x7f, @remote, 0x4e22, 0x3, 'fo\x00', 0x24, 0x2, 0x7a}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x4e24, 0x3, 0x80, 0x7}}, 0x44) 04:09:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2636.449030][ T2621] FAULT_INJECTION: forcing a failure. [ 2636.449030][ T2621] name failslab, interval 1, probability 0, space 0, times 0 04:09:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a0d, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2636.491780][ T2621] CPU: 1 PID: 2621 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2636.499639][ T2621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2636.509721][ T2621] Call Trace: [ 2636.513037][ T2621] dump_stack+0x172/0x1f0 [ 2636.517395][ T2621] should_fail.cold+0xa/0x15 [ 2636.522005][ T2621] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2636.527827][ T2621] ? ___might_sleep+0x163/0x280 [ 2636.532698][ T2621] __should_failslab+0x121/0x190 [ 2636.537654][ T2621] should_failslab+0x9/0x14 04:09:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2636.542171][ T2621] kmem_cache_alloc_trace+0x2ce/0x750 [ 2636.547553][ T2621] ? rcu_read_lock_sched_held+0x110/0x130 [ 2636.553323][ T2621] ? __kmalloc+0x5d2/0x740 [ 2636.557767][ T2621] alloc_workqueue_attrs+0x82/0x120 [ 2636.562986][ T2621] apply_wqattrs_prepare+0xc8/0x970 [ 2636.568217][ T2621] apply_workqueue_attrs_locked+0xcb/0x140 [ 2636.574039][ T2621] apply_workqueue_attrs+0x31/0x50 [ 2636.579170][ T2621] alloc_workqueue+0x8b9/0xf00 [ 2636.583961][ T2621] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2636.589708][ T2621] ? __init_waitqueue_head+0x36/0x90 [ 2636.595029][ T2621] hci_register_dev+0x1b8/0x860 [ 2636.599898][ T2621] ? hci_init_sysfs+0x7c/0xa0 [ 2636.604605][ T2621] __vhci_create_device+0x2d0/0x5a0 [ 2636.609829][ T2621] vhci_write+0x2d0/0x470 [ 2636.614179][ T2621] new_sync_write+0x4d3/0x770 [ 2636.618875][ T2621] ? new_sync_read+0x800/0x800 [ 2636.623661][ T2621] ? __fget+0x381/0x550 [ 2636.627840][ T2621] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2636.634096][ T2621] ? security_file_permission+0x8f/0x380 04:09:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2636.639748][ T2621] __vfs_write+0xe1/0x110 [ 2636.645404][ T2621] vfs_write+0x20c/0x580 [ 2636.649674][ T2621] ksys_write+0x14f/0x290 [ 2636.654020][ T2621] ? __ia32_sys_read+0xb0/0xb0 [ 2636.658797][ T2621] ? do_syscall_64+0x26/0x680 [ 2636.663483][ T2621] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2636.669560][ T2621] ? do_syscall_64+0x26/0x680 [ 2636.674274][ T2621] __x64_sys_write+0x73/0xb0 [ 2636.678881][ T2621] do_syscall_64+0xfd/0x680 [ 2636.678904][ T2621] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2636.678917][ T2621] RIP: 0033:0x459279 [ 2636.678934][ T2621] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2636.678942][ T2621] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2636.678957][ T2621] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2636.678966][ T2621] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 04:09:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) fcntl$setsig(r1, 0xa, 0x30) close(r1) [ 2636.678974][ T2621] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2636.678990][ T2621] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2636.714765][ T2621] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 [ 2636.777154][ T2621] Bluetooth: Can't register HCI device 04:09:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a0e, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x10010000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:40 executing program 0 (fault-call:3 fault-nth:11): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:40 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x800) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f00000000c0)={0x3f, 0x0, 0x1}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a0f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x10080) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:40 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="02000000000000000000000080000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ddc4a2880e6a85f2"], 0x48}}, 0x0) [ 2637.032546][ T2659] FAULT_INJECTION: forcing a failure. [ 2637.032546][ T2659] name failslab, interval 1, probability 0, space 0, times 0 [ 2637.084384][ T2659] CPU: 1 PID: 2659 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2637.092252][ T2659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2637.102325][ T2659] Call Trace: [ 2637.106955][ T2659] dump_stack+0x172/0x1f0 [ 2637.111324][ T2659] should_fail.cold+0xa/0x15 [ 2637.115950][ T2659] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2637.121779][ T2659] ? ___might_sleep+0x163/0x280 [ 2637.126658][ T2659] __should_failslab+0x121/0x190 [ 2637.131618][ T2659] should_failslab+0x9/0x14 [ 2637.136141][ T2659] kmem_cache_alloc_trace+0x2ce/0x750 [ 2637.141525][ T2659] ? rcu_read_lock_sched_held+0x110/0x130 [ 2637.147258][ T2659] ? __kmalloc+0x5d2/0x740 [ 2637.151779][ T2659] alloc_workqueue_attrs+0x82/0x120 [ 2637.151799][ T2659] apply_wqattrs_prepare+0xc8/0x970 [ 2637.151824][ T2659] apply_workqueue_attrs_locked+0xcb/0x140 [ 2637.151842][ T2659] apply_workqueue_attrs+0x31/0x50 [ 2637.151859][ T2659] alloc_workqueue+0x8b9/0xf00 [ 2637.151883][ T2659] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2637.151905][ T2659] ? __init_waitqueue_head+0x36/0x90 [ 2637.168100][ T2659] hci_register_dev+0x1b8/0x860 [ 2637.193776][ T2659] ? hci_init_sysfs+0x7c/0xa0 [ 2637.198481][ T2659] __vhci_create_device+0x2d0/0x5a0 [ 2637.203695][ T2659] vhci_write+0x2d0/0x470 [ 2637.208037][ T2659] new_sync_write+0x4d3/0x770 [ 2637.212731][ T2659] ? new_sync_read+0x800/0x800 [ 2637.217513][ T2659] ? __fget+0x381/0x550 [ 2637.221695][ T2659] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2637.227958][ T2659] ? security_file_permission+0x8f/0x380 [ 2637.233614][ T2659] __vfs_write+0xe1/0x110 [ 2637.237961][ T2659] vfs_write+0x20c/0x580 [ 2637.242215][ T2659] ksys_write+0x14f/0x290 [ 2637.246549][ T2659] ? __ia32_sys_read+0xb0/0xb0 [ 2637.251325][ T2659] ? do_syscall_64+0x26/0x680 [ 2637.256015][ T2659] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2637.262091][ T2659] ? do_syscall_64+0x26/0x680 [ 2637.266782][ T2659] __x64_sys_write+0x73/0xb0 [ 2637.271389][ T2659] do_syscall_64+0xfd/0x680 [ 2637.275910][ T2659] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2637.281809][ T2659] RIP: 0033:0x459279 [ 2637.285715][ T2659] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2637.305326][ T2659] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2637.313752][ T2659] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2637.321736][ T2659] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 04:09:40 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xe5e, 0x200) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@int=0x1be, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) socket$pppoe(0x18, 0x1, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1d, r2}, 0x2f8, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {0x0, 0x0, 0x7}, 0x1, @can={{0x3, 0x5, 0xffffffffffffffff, 0x3}, 0x3, 0x1, 0x0, 0x0, "e3b7530c920e0971"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', r2}) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r2}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="0c841500"/16, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ddc4a2880e6a85f2"], 0x48}}, 0x0) 04:09:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2637.329818][ T2659] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2637.337808][ T2659] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2637.345796][ T2659] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r0) 04:09:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a10, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2637.416882][ T2659] Bluetooth: Can't register HCI device 04:09:40 executing program 0 (fault-call:3 fault-nth:12): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:40 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a11, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x300000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2637.597456][ T2687] FAULT_INJECTION: forcing a failure. [ 2637.597456][ T2687] name failslab, interval 1, probability 0, space 0, times 0 [ 2637.643858][ T2687] CPU: 1 PID: 2687 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2637.651723][ T2687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2637.661796][ T2687] Call Trace: [ 2637.665122][ T2687] dump_stack+0x172/0x1f0 [ 2637.669475][ T2687] should_fail.cold+0xa/0x15 [ 2637.674090][ T2687] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2637.679942][ T2687] ? ___might_sleep+0x163/0x280 [ 2637.684900][ T2687] __should_failslab+0x121/0x190 04:09:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) write$FUSE_GETXATTR(r2, &(0x7f0000000080)={0x18, 0x0, 0x7, {0x9}}, 0x18) [ 2637.691138][ T2687] should_failslab+0x9/0x14 [ 2637.695652][ T2687] kmem_cache_alloc_node+0x261/0x710 [ 2637.700967][ T2687] alloc_unbound_pwq+0x4c5/0xcf0 [ 2637.705930][ T2687] apply_wqattrs_prepare+0x35e/0x970 [ 2637.711248][ T2687] apply_workqueue_attrs_locked+0xcb/0x140 [ 2637.717084][ T2687] apply_workqueue_attrs+0x31/0x50 [ 2637.722228][ T2687] alloc_workqueue+0x8b9/0xf00 [ 2637.727023][ T2687] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2637.732769][ T2687] ? __init_waitqueue_head+0x36/0x90 [ 2637.738080][ T2687] hci_register_dev+0x1b8/0x860 [ 2637.742951][ T2687] ? hci_init_sysfs+0x7c/0xa0 [ 2637.747653][ T2687] __vhci_create_device+0x2d0/0x5a0 [ 2637.752868][ T2687] vhci_write+0x2d0/0x470 [ 2637.752886][ T2687] new_sync_write+0x4d3/0x770 [ 2637.752901][ T2687] ? new_sync_read+0x800/0x800 [ 2637.752922][ T2687] ? __fget+0x381/0x550 [ 2637.752943][ T2687] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2637.752962][ T2687] ? security_file_permission+0x8f/0x380 [ 2637.752979][ T2687] __vfs_write+0xe1/0x110 [ 2637.752995][ T2687] vfs_write+0x20c/0x580 [ 2637.753020][ T2687] ksys_write+0x14f/0x290 [ 2637.770943][ T2687] ? __ia32_sys_read+0xb0/0xb0 [ 2637.800477][ T2687] ? do_syscall_64+0x26/0x680 [ 2637.805173][ T2687] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2637.811265][ T2687] ? do_syscall_64+0x26/0x680 [ 2637.816199][ T2687] __x64_sys_write+0x73/0xb0 [ 2637.822293][ T2687] do_syscall_64+0xfd/0x680 [ 2637.826829][ T2687] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2637.832732][ T2687] RIP: 0033:0x459279 [ 2637.836634][ T2687] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2637.856253][ T2687] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2637.864684][ T2687] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2637.872674][ T2687] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2637.880657][ T2687] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 04:09:41 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={0x1, @null, @bpq0='bpq0\x00', 0x100, 'syz0\x00', @null, 0x88e, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) sendmsg$nl_generic(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x41, 0x10, 0x70bd26, 0x25dfdbfe, {0x15}, [@typed={0x8, 0x1, @uid=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2637.888650][ T2687] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2637.896648][ T2687] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 [ 2637.925652][ T2687] Bluetooth: Can't register HCI device 04:09:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a12, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x400000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:41 executing program 0 (fault-call:3 fault-nth:13): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getown(r0, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000080)="3e66b7cec226de3511c2955be53900489fce947c2277e7665d33875d20c5d793bd2622bea374c3804817a859623269b7ce1594", 0x33) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8bc8f8aa6d47731f35bc2829325e6a91027aedfc6c246453e5df93ed0f0ebd2859ae89feef2ec2824d450f45153a4b32558c53b6d857b75b067b4f932ab22d98665522c5500a0b10f5d20f18fc81049869c79e78b255d13295cf56fb18ba493c5a667a8d9e347a228f9a0d79849997761a0671b46d3678b82e0544039f77b9f277"], 0x2) close(r2) 04:09:41 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000500)=@ipx={0x4, 0x1, 0x2aa7, "f0a8bb5cc754", 0x3f}, 0x7d) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="0200"/16, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000000ddc4a2880e6485f2"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500020000000000000000000000000032a9537d1d8c44d698754d650e06195e1fada2cfb4b0123b7653a4d9d995523951e0e41c9110020000006e5bb0f59d565bd4f044588f62673e5e91ef9364b458ff0ea2d752ff876deeb87d806709af34f7241c0e04176cc2232677d2af87ed7b62e7b54d5a80f971c841432a2da8c060336eb1a50313ec40f83c17380dbc40d522362d2694e6ee88ed557e8031e311c65629f3d48096e3d5f6774131f2c20dd90dfbd4163da1ff4c0412", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000e0010000000300008021010000adae3e4badf8fc9fa944365e370629af1d38365d38db22a2bd1c8ca69b6a96e3366af9bead5b302c9bd5f6dbfdcd37e151b4e778965bc350a0e5721f4b269010"], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000380)=@ng={0x4, 0xc, "cde535"}, 0x5, 0x1) 04:09:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a13, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\xbcSQ\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="cff00ae99662a46a117e0e90a4dc44101071971f31c2164f6e997b120792abef57c0ec15398743f9049461017f55dc30a5eea7a579265b3ebd0235b4f7002224cc6f9b5f7cf456ad717ddf3812bba7213797e22cb5d3005e0378c7d216e66c9c9ed2f9fc6a43dcf4fd46c2f8e13cd90290655424c7275da66af79a9f1f6ba410ce281c56c350b5db195a30e63b770385ae1b917447e1895fd3d27f4cb31566ecf771b78128fa6a2cf3c917ff4b0802bbe1b939fad7e8e4e32f987a42"], 0x2) close(r1) [ 2638.200962][ T2724] FAULT_INJECTION: forcing a failure. [ 2638.200962][ T2724] name failslab, interval 1, probability 0, space 0, times 0 04:09:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:41 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ddc4a2880e6a85f2"], 0x48}}, 0x0) [ 2638.253137][ T2724] CPU: 0 PID: 2724 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2638.260991][ T2724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2638.271064][ T2724] Call Trace: [ 2638.271108][ T2724] dump_stack+0x172/0x1f0 [ 2638.278714][ T2724] should_fail.cold+0xa/0x15 [ 2638.283331][ T2724] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2638.289188][ T2724] ? ___might_sleep+0x163/0x280 [ 2638.294075][ T2724] __should_failslab+0x121/0x190 [ 2638.299038][ T2724] should_failslab+0x9/0x14 04:09:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a14, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2638.303582][ T2724] kmem_cache_alloc_trace+0x2ce/0x750 [ 2638.308975][ T2724] ? rcu_read_lock_sched_held+0x110/0x130 [ 2638.314708][ T2724] ? __kmalloc+0x5d2/0x740 [ 2638.319233][ T2724] alloc_workqueue_attrs+0x82/0x120 [ 2638.324455][ T2724] alloc_workqueue+0x190/0xf00 [ 2638.329241][ T2724] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2638.334991][ T2724] ? __init_waitqueue_head+0x36/0x90 [ 2638.340305][ T2724] hci_register_dev+0x209/0x860 [ 2638.345186][ T2724] __vhci_create_device+0x2d0/0x5a0 [ 2638.350398][ T2724] vhci_write+0x2d0/0x470 [ 2638.354734][ T2724] new_sync_write+0x4d3/0x770 [ 2638.354749][ T2724] ? new_sync_read+0x800/0x800 [ 2638.354768][ T2724] ? __fget+0x381/0x550 [ 2638.354794][ T2724] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2638.374696][ T2724] ? security_file_permission+0x8f/0x380 [ 2638.380344][ T2724] __vfs_write+0xe1/0x110 [ 2638.384696][ T2724] vfs_write+0x20c/0x580 [ 2638.389047][ T2724] ksys_write+0x14f/0x290 [ 2638.393395][ T2724] ? __ia32_sys_read+0xb0/0xb0 [ 2638.398173][ T2724] ? do_syscall_64+0x26/0x680 04:09:41 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80400, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00000000c0)={0x3, 0x101}) [ 2638.402858][ T2724] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2638.409031][ T2724] ? do_syscall_64+0x26/0x680 [ 2638.413732][ T2724] __x64_sys_write+0x73/0xb0 [ 2638.418334][ T2724] do_syscall_64+0xfd/0x680 [ 2638.422858][ T2724] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2638.429022][ T2724] RIP: 0033:0x459279 [ 2638.432933][ T2724] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2638.452899][ T2724] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2638.452915][ T2724] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2638.452922][ T2724] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2638.452929][ T2724] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2638.452936][ T2724] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2638.452944][ T2724] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 [ 2638.489939][ T2724] Bluetooth: Can't register HCI device 04:09:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x600000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00QS\xbc\xc0\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:41 executing program 0 (fault-call:3 fault-nth:14): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a15, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x700000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="ff832ae781"], 0x2) close(r0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x1d95) 04:09:41 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000001feffff010000820000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a16, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x800000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$binfmt_elf32(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x602) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000007c0)={0x0, 0x3}, &(0x7f0000000800)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000840)={r2, 0x100000000}, 0x8) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0062d0154fe5de48f722214b8500"], 0x2) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000740)={r4, 0x2}) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={r2, @in={{0x2, 0x5, @loopback}}}, 0x84) close(r3) 04:09:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:42 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000100)={0x0, 0x4, 0x9, [], &(0x7f00000000c0)=0x3ff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r2}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2638.848319][ T2766] FAULT_INJECTION: forcing a failure. [ 2638.848319][ T2766] name failslab, interval 1, probability 0, space 0, times 0 04:09:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a17, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2638.900959][ T2769] QAT: Invalid ioctl [ 2638.911935][ T2766] CPU: 0 PID: 2766 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2638.919783][ T2766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2638.929852][ T2766] Call Trace: [ 2638.929888][ T2766] dump_stack+0x172/0x1f0 [ 2638.929913][ T2766] should_fail.cold+0xa/0x15 [ 2638.929934][ T2766] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2638.929958][ T2766] ? ___might_sleep+0x163/0x280 [ 2638.929986][ T2766] __should_failslab+0x121/0x190 [ 2638.957743][ T2766] should_failslab+0x9/0x14 [ 2638.962264][ T2766] kmem_cache_alloc_trace+0x2ce/0x750 [ 2638.967660][ T2766] ? rcu_read_lock_sched_held+0x110/0x130 [ 2638.973404][ T2766] ? __kmalloc+0x5d2/0x740 [ 2638.973428][ T2766] alloc_workqueue_attrs+0x82/0x120 [ 2638.973446][ T2766] alloc_workqueue+0x190/0xf00 [ 2638.973470][ T2766] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2638.993587][ T2766] ? __init_waitqueue_head+0x36/0x90 [ 2638.998899][ T2766] hci_register_dev+0x209/0x860 [ 2639.003793][ T2766] __vhci_create_device+0x2d0/0x5a0 [ 2639.009008][ T2766] vhci_write+0x2d0/0x470 [ 2639.013351][ T2766] new_sync_write+0x4d3/0x770 [ 2639.018039][ T2766] ? new_sync_read+0x800/0x800 [ 2639.022833][ T2766] ? __fget+0x381/0x550 [ 2639.027019][ T2766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2639.033284][ T2766] ? security_file_permission+0x8f/0x380 [ 2639.038942][ T2766] __vfs_write+0xe1/0x110 [ 2639.043300][ T2766] vfs_write+0x20c/0x580 [ 2639.047583][ T2766] ksys_write+0x14f/0x290 [ 2639.051929][ T2766] ? __ia32_sys_read+0xb0/0xb0 [ 2639.056702][ T2766] ? do_syscall_64+0x26/0x680 [ 2639.056720][ T2766] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2639.056735][ T2766] ? do_syscall_64+0x26/0x680 [ 2639.056754][ T2766] __x64_sys_write+0x73/0xb0 [ 2639.056775][ T2766] do_syscall_64+0xfd/0x680 [ 2639.081278][ T2766] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2639.087185][ T2766] RIP: 0033:0x459279 [ 2639.091112][ T2766] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2639.110732][ T2766] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2639.119184][ T2766] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2639.127167][ T2766] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2639.135150][ T2766] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2639.143132][ T2766] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2639.151124][ T2766] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 [ 2639.163261][ T2766] Bluetooth: Can't register HCI device [ 2639.169376][ T2769] QAT: Invalid ioctl [ 2639.197603][ T2780] QAT: Invalid ioctl 04:09:42 executing program 0 (fault-call:3 fault-nth:15): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:42 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockname(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet6(0xa, 0x0, 0x9) connect(r2, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x3, 0x1, 0x2, {0xa, 0x4e24, 0x40, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2b}}, 0xfffffffffffffff8}}}, 0x6d3c3cc2a4f67a86) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000480)={0x0, 0x0, [], @raw_data=[0x2, 0x7, 0x10001, 0x7, 0x0, 0x120000, 0x1f, 0x800, 0xb26, 0x0, 0x475, 0x1000, 0x8000000000000, 0xed, 0x6, 0xfffffffffffffffa, 0x8, 0xff, 0x7, 0x8, 0x3, 0x30, 0x2, 0x1ff, 0x20, 0x0, 0x1, 0x7, 0x0, 0x6, 0x6, 0x7]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r4}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a18, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x900000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") socket$rds(0x15, 0x5, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x480, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x77, 0x2) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[@ANYRES16=r0], 0xfffffffffffffd1d) close(r1) 04:09:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a19, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) rt_sigqueueinfo(r1, 0x14, &(0x7f0000000100)={0x26, 0x8, 0x9}) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) r3 = syz_open_procfs(r1, &(0x7f0000000180)='net/fib_trie\x00') write$9p(r3, &(0x7f00000001c0)="af43c97ef19698e4946f5798ca5bc510b2b2144fd83636beec586e9ed56955a5b68411cec1e5c95ef7f21db394ed967259fa51244add2085bf1d4c9efbc3386b", 0x40) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[], 0xfffffe09) close(r2) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8000, 0x0) ioctl$TCGETX(r4, 0x5432, &(0x7f0000000080)) 04:09:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xa00000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2639.439128][ T2797] FAULT_INJECTION: forcing a failure. [ 2639.439128][ T2797] name failslab, interval 1, probability 0, space 0, times 0 [ 2639.486422][ T2797] CPU: 0 PID: 2797 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2639.494278][ T2797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2639.504346][ T2797] Call Trace: [ 2639.507659][ T2797] dump_stack+0x172/0x1f0 [ 2639.512024][ T2797] should_fail.cold+0xa/0x15 [ 2639.516643][ T2797] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2639.522474][ T2797] ? ___might_sleep+0x163/0x280 [ 2639.527345][ T2797] __should_failslab+0x121/0x190 [ 2639.532304][ T2797] should_failslab+0x9/0x14 [ 2639.536819][ T2797] __kmalloc+0x2d9/0x740 [ 2639.541089][ T2797] ? apply_wqattrs_prepare+0xae/0x970 [ 2639.546487][ T2797] apply_wqattrs_prepare+0xae/0x970 [ 2639.551711][ T2797] apply_workqueue_attrs_locked+0xcb/0x140 [ 2639.557538][ T2797] apply_workqueue_attrs+0x31/0x50 [ 2639.562672][ T2797] alloc_workqueue+0x8b9/0xf00 [ 2639.567465][ T2797] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2639.567492][ T2797] ? __init_waitqueue_head+0x36/0x90 [ 2639.578505][ T2797] hci_register_dev+0x209/0x860 [ 2639.583367][ T2797] __vhci_create_device+0x2d0/0x5a0 [ 2639.583391][ T2797] vhci_write+0x2d0/0x470 [ 2639.592924][ T2797] new_sync_write+0x4d3/0x770 [ 2639.597612][ T2797] ? new_sync_read+0x800/0x800 [ 2639.602398][ T2797] ? __fget+0x381/0x550 [ 2639.606575][ T2797] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2639.612839][ T2797] ? security_file_permission+0x8f/0x380 [ 2639.618493][ T2797] __vfs_write+0xe1/0x110 [ 2639.622851][ T2797] vfs_write+0x20c/0x580 [ 2639.627130][ T2797] ksys_write+0x14f/0x290 [ 2639.631502][ T2797] ? __ia32_sys_read+0xb0/0xb0 [ 2639.636316][ T2797] ? do_syscall_64+0x26/0x680 [ 2639.641066][ T2797] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2639.647196][ T2797] ? do_syscall_64+0x26/0x680 [ 2639.651935][ T2797] __x64_sys_write+0x73/0xb0 [ 2639.656576][ T2797] do_syscall_64+0xfd/0x680 [ 2639.661167][ T2797] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2639.667169][ T2797] RIP: 0033:0x459279 [ 2639.671126][ T2797] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2639.692308][ T2797] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2639.700817][ T2797] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2639.708916][ T2797] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2639.716988][ T2797] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2639.725027][ T2797] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 04:09:42 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000076feffff190100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="0200"/16, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000fafbced3751fcd3d703e5e3b5428f597305d4cbaf3bd254bdceb9767fce570c59ffbb80760a61adc6d2046c0d7c5f6369b3920216d802996c5059f599fbfd659d22ba3b0c6810f180bb95d2b2c85c68d7745d08eb9cd731be1035bbf261e1559fb80ca764809caa0074e8afadb5c7d153db368262d53066228a8dc4518e5675635489f0e2b460948411126c2e450f89b60e18bad1919e6ccea67e42011070000000000000006bf3a0bf46b06239c1fb76816c2f862d9c647bcf5adb786"], 0x48}}, 0x0) [ 2639.733227][ T2797] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'os2.', 'proc\x00'}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) r2 = dup3(r1, r0, 0x80000) lsetxattr$security_selinux(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x3) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={@default, @bcast, 0x1, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) [ 2639.907697][ T2797] Bluetooth: Can't register HCI device 04:09:43 executing program 0 (fault-call:3 fault-nth:16): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:43 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10000, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x80, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xb00000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a1a, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a1b, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:43 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) r2 = add_key$keyring(&(0x7f0000003740)='keyring\x00', &(0x7f00000082c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$reject(0x13, r2, 0x4, 0xfffffffffffffff9, r2) r3 = add_key$keyring(&(0x7f0000008300)='keyring\x00', &(0x7f0000008340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$negate(0xd, r2, 0x40, r3) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000008380)='/dev/btrfs-control\x00', 0x535b263e7393ad9e, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000008440)='trusted.overlay.redirect\x00', &(0x7f0000008480)='./file0\x00', 0x8, 0x3) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000083c0)='/dev/zero\x00', 0x2001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000008400)={0x17, 0x1000, 0x5, 0x7, 0x1, r4, 0x1d, [], r1, r5, 0x0, 0x3}, 0x3c) getsockname$packet(r4, &(0x7f00000084c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000008500)=0x14) sendmmsg(r0, &(0x7f0000008080)=[{{&(0x7f00000000c0)=@isdn={0x22, 0x9, 0x4, 0x1038, 0xc9}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000040)="7df8881bdcf2ccf158fd432005e4bab6b1f1b9945a498d3c201b5bd96f6d7fd579e9f2282a089439491349bb1009c1bc573152cd413e474cdb4a9f761259e3", 0x3f}, {&(0x7f0000000480)="8732e393f8cbb05cab1aae6238589ea1ede28998fa3efec5675a3d79ccc608727c62071efe7aa716078e76f2ebb85a26846f34ed36e67da384b71d38c44c6461cfdbe07c2874eb4662ffe94c8576cb38d954f3498b07edcb8073b477700b19b566f18f68df", 0x65}, {&(0x7f0000000500)="2f37f19858bbea4b2d31bc3236f62131ff0d0a979a5922aea1c419add10b98e7f98697ba40caad3859518dbf2d8aba48930ddb3170bc18fe43facc875878a90463d87c57ee7fe505d3bf3aed7a04cd78a87f8ec8ad83504225af55e42411c3b0", 0x60}, {&(0x7f0000000580)="2861302118f07790d0f5a9c7c27cb5026cb05164efa9d2b472cff86b65c4510a07b8ba94ea0106651bbfad5e918e4b131ea9f3a59c154558d2f67371bd1e6a668dc827d34cc4c3860c8990fc0ea9650e6b8784358a3954de6f09c0ddf97e6fbbe493a83329b93c3acc14341967ed6160a2959b7fdb369d7bee4b61130369122e6309530531d4ebbde4d7e79a0a5bbbfb6a17fcbed4027a5c42d385e24a4995b168e096386dbcc81a3744244112c7856d393767e7b1b3098b576b57188eb128", 0xbf}, {&(0x7f0000000640)="39b3209faf6d60b7194daa0dbb6be7b2db2a8ec3076ba7a6f975222cb41f0f201393617bb26ad34693839d7069fc1976a5e8fcc8cb2114b3c2c0c3265f05a6937f63478590aa99bf3f3d24e5678ce5ba1b479edefbe2e9325d3c41ef34adfc4de75a0e36faa4251fc85645300966bd0de964b53da2b8a5c1056b3c3e007800bf59cff4a64d24529cf0b8a6f447d6b7cc45205c67a1b552fde18e402e", 0x9c}, {&(0x7f0000000700)="223875ef1f949e6cab29db38d3eedd3ab90d912552e344ce065e476222fe6a215eedccd1a977dcc33a26acb2797c6b12c618b88d63b87eb6b088434625091d34c2b69eabb78b135680d24b4aa4860f7d2fe809b5d0c3e718b1ec3b49a13e7858f2928e6b21e8f6c13ee9fa9c46cf61691c009a82fc802b95d5a360afa9f708f05d7d1404e3b650f6ae93c5f595e12b901a39c9f9520a1a4afc73f3b2d4610255d461f0162e84fe580bd5f3bfd030f6a0ffb52e050c9f3e7ca4582737ab7c22ccaf6853a1ef6cbb1073", 0xc9}, {&(0x7f0000000800)="4eca651eb865e59d080281fc9dc8cdba1ead60543df2ef3774779032a98e7e13bcccc926830f9cf4a3fb32486360a0f4ebb47037e7ed5d10d4f871abfcc5a30af5301bfa1a86281fc1d3066d64168ea08addf595f44df7932cb8ff037b65f0d5ad351d13150389e1170249d237ace3ca1cdf09343a9a647d51eac40746ac96ecac3375a4b8f840d70096fb1c165dcccab9606aa3266312c2f10a90fc4ccb5329aa01e00ef4716dc4099cd6422351ec64ae75326abc21316f6db964037c70aebb6aa5611fec1c52167e3ff9247c91dd0f", 0xd0}], 0x7, &(0x7f0000000980)=[{0x10, 0x117, 0xffffffffffff0000}, {0x38, 0x10b, 0x200, "64a5e7750193d9b2d6cdb47900f596f10235f21664d4a8d9f617a85a13610ae80fd184"}, {0x1010, 0x10b, 0x80000001, "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"}, {0x90, 0x116, 0x7fffffff, "38bf567e25c804aa3089f042e788cbfd925f2ff578cb60e6f93a3d508cdee512389ae0b749a9e61104aa6f6376b4a6f221fc2392117d2497bf4aff5ebac19194b69f1300997f685610678ab310d650a02e76d0a8a61410214b504b0046fee5c667be6abc7dd973edced464fd20e010d4e6c14bc5cdf5b342b3b4bad923"}, {0x98, 0x10e, 0xfffffffffffffffb, "5eb273a0ea7fc347a1f7bce413ff2e0ce99ced3091910a6d9580ee6ff27f69614aad2cf18c00f5ee073b39bf19235bc8b1c92aed62d80ff051d261beef4afb3c2fd8026512c2165eea00230f331b4ac841c584bfd2030a5953ca71c7fbc4cfe873bac197b3c7bb158a857af68372036d6485ada1595d2d071b79778d686e7752717fb9fd51"}, {0x48, 0x12f, 0x2, "bf8ffafde00e99e567c8e7d58bf13a90ce448f65cd9863d1544d037bfc778944ff86c44be1b88c6b3ef6a3ca52df6b6ed9efbb"}, {0xf8, 0x13b, 0x9, "0bddf723ec211eac378a1e97ca1e64f13279dc79b4863941b2acc695e8f74bdeb5a18f377a46a3ddd0c6eb7608fccddb0048775f797c097bbddeb60dfde7606fe684f580602aff1892ea46f620c513df4144cba58ccef2cdbca256c96ca84d5b1f0533aefc61a03e11985bba7e69c8309ec17344598f5b6cc8e06b0a9c33f49e6d395f71942aa926f9e7320b185597e42d23c593eed63eae99f9974723378efbec080683c8b3ac72b353ee72df66446caef6e8705791025e533381056e9850d8e3e71b2c908c217ead3c8ec1f1b0ce67433faa6906c3a35f95d1af6e3ef10fb208c834e1"}, {0xb8, 0x101, 0x8, "de6e2b429a9d4c993a5e3e01cb4166ffd80038f75f0fc8ebb91bd45aee56327893f055766a0dec9bb88204a572c86e24a904772acd5993c25e6d4a465c1b290c9d9e3d00b2c42249f76b3a9c1bc54a30c98e61929f5b78f8f9e55f8b2569691ed438009d5c559d27753b2164e336473c1faad94700af87236641df9c900653ea4db82141e050f87cf214e3f1c55235ddf609f049e08b9e5ae215ba1e3b8155895f7b9695291d72"}], 0x1378}}, {{&(0x7f0000001d00)=@nfc={0x27, 0x1, 0x1, 0x4}, 0x80, &(0x7f0000001f40)=[{&(0x7f00000001c0)="25963626c71fa7237b5e3bde40504aef57953f10b4d7ba52", 0x18}, {&(0x7f0000000240)="559994c884f73ad806f64f48db54624432fb61c4fb092231b406a62dd5ab161a57686335f906993783beb753d4bbe9d7c616254cd5e589", 0x37}, {&(0x7f0000001d80)="06bb108dcfbebbc892accc5f9fe6020ac952dc838627902116c27290d063105075b5838e0ef6e0", 0x27}, {&(0x7f0000001dc0)="b30fd10f8d9faee1c6d969c2cfa11aafd0e87ff68c1e0318edc2bd1a08899e39ec882d1bdb644c9023224ac67bb6748d76b844de957f41bf452172ab827a0065a110dd532379630e5ca8f48c6226ef4a352c6ec2d018ca3f1fd0e5a9dd3c5a32aad20938c03f041b645dd399d4497e3deace611a8baa7e9c71dbc97d08dd3989b002047030c120860425f42ab28f57cc9573449c69d5c48147628cf69799bfb9121ff557b3540e6716bf9611a36035c8bc2364", 0xb3}, {&(0x7f0000001e80)="8b7af2014e4a763e13b75be03746f747f47d6c844510b19e8c9ac4f4f3a13d06866a00466f3dc638f58c9041947f8e2a7e98be6fe0033fc1372afca44386012f9b55745b31c2b55112c791d9d30f0e79573858e323dfa64e4088c365189a436e70fc6618f1de8fbd48f91efc2b1a94d9b73d772bc4885c6e", 0x78}, {&(0x7f0000001f00)="25808d2ba44f05abf87c381dad2e077dcc2fafeb811bfa424ac6e574f19faa69183aabadb73cc17ba7ee51a78b328ce8732c2187f262c1aa5a6d", 0x3a}], 0x6, &(0x7f0000001fc0)=[{0x48, 0x0, 0x8, "fd01c4e8f8023d675276eb6cbd6f29d1f3d7923facb3501958338a49051fb8e486c8e4c18531067aa485b7b424ec6251b6962b535249cd76"}, {0x68, 0x10f, 0x80000, "b98e91a9ea4eb185c3356339dc367a884452d9b0594cb5f4e10bfbd4e7a4bf5b2b1a695cadaae65f824e7e1683e4e42681a43466e4d166efa6369cd389bc22377d497d517776aad79f63be17160ed1b30b87"}, {0xb0, 0x11d, 0x4, "9b58fbc245b84fefb8f4b4091ddfa7a2e5419a95c7cb47e97f51ee1a56d7da0b8297f4f72c88321f0d5a3370a0984e30400060379f885040a6e70aa552b93b27c84a5b98029be56abef2c23b03756869b93f8a0b4f846775758b0d615aadee27400de0c95c204b8a64ae77cbde0bbac9013db1e917144a3ec227b4b5ba6811dd6d7e83c6412ebd7023ac2051afd0f47a853cb7a171877bd4308fa4ff"}, {0xc8, 0x88, 0x9010, "1b1137d464a46d443910465b297a03cc139cc28d387ff87413f9375e71aa1f939b53a17d1803f795ef2edef50c73551ae73dd09603d97d34f843cdfb90fd014a96d29c46e087abb5c208cb6a78f82116a2d2ce72ee08f903cf0a3213b12980ae19d4a3482e83fed9a1df66c38c278cb5f1ea419a5f7327310fc0325336ab4a2941891917fb1a610cb1324a6b88b9f5d55f6dfb017a6c5e3fb957998f82ab30e6f4289268b8d1d56b37bb57ff1a8dc4f97b3a"}, {0xd8, 0x0, 0x8, "837a48f0d1e414849b7f2e7b52e45de675549d84a712dc7e49aa3b69b58359ab2b61db2fb2b4c65f1fd3a3bc8a24ba4542e91c0e17afdead3923fd1501789f794bcbf47d4358fdc9c02dee75d0634de56ed737486df08363adbfd062dd6d0b041eee6926b71c2cf4f6178284182cf87f0042332f519a15f82634cd28e4f741e4742060c59fe75df493996caf6086a8334acc6ecf93438067df9999153d5ead567cf03c2e854f7f0949fa335bd3b32856e80892347c83007962a45a9d68364f8a4d230f760acc74ce"}], 0x300}}, {{&(0x7f00000022c0)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002340)="dde1e7fdca463b4e7864de5e29a9f443281db3ed757ccdb485f373f461837cff7f2578f0786222c5546c2e66fa010f4e0a45b9ae85589b01a385c39828be93ca64c742", 0x43}, {&(0x7f00000023c0)="5c758ab01247dc8a6fa774aadedb827d1797da7b6916bbf8337ca28117bc5a18185afa6c07e6bdbde02854db01daebe223a28db6548c84eefdb3416a0850b95777ae552e83b12da906ba629bf6e4bc616e6789d2a08e572219682c2c4d6cd2e75d07f5f0039cf33aaebd", 0x6a}, {&(0x7f0000002440)="72ebc5c91aaf53659c98b26cf0f5905543e77f7d60d596c448f3bb829a3621eba47a54cb8307de4e4da50880f6f4084121120c42c8f3a86fccea87c8922826cfcf247d91669bef8d96154497c078295d489c0ad2ff3d15119f64ef2296442877b9991126c2f92d27e6299321ed653ec086bbe86bd6ae88c37e277435a67f2d3e4c93c191a5c32e0e0dcdbd8d37dbbf36a3f01fb70f28d49584cb7cf53f158d08ccd9166576d6976245914813299c4a094bd683f883f51a34c1af4b7adfad89763f4fc2d0ea3066a3c23dbcd76dec4e563c9645e2c4248b494b5508", 0xdb}, {&(0x7f0000002540)="124e1cd554d6a529a813e197a2fea33e09add363050baad13e56f93a8384f498dee113cbf2bb01c48015bee13624cbccca06ba1f24e8c62fb1cb0415e47e606d38e9520da7ad6bd6a5f9112e6293b9e2a3116e0828149ce6e44c5952c3f6e91dab256e160924c54d0cd5684ceac9fbc279c0e4c74bb15f8e80e6ce7b8965f7861811bb3c30a43eae9e9bb9d2afbb9166d86cf82178abc0d8368cd43da6845e1bea8e3f90", 0xa4}], 0x4, &(0x7f0000002640)=[{0x50, 0x88, 0xffffffffffffffe0, "c6f666ec432c655e981ae09dade68caa7116df9827846b891664bfd321fc8ad3121464dedbb4f58bef868b3c4750377fc7a3387d77690e96442c4af9052579"}, {0x10, 0x1, 0x5}, {0x1010, 0x117, 0x1f, "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"}], 0x1070}}, {{&(0x7f00000036c0)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'bridge0\x00'}}, 0x80, &(0x7f0000003740), 0x0, &(0x7f0000003780)=[{0x1010, 0x110, 0xa0, "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"}, {0xa0, 0x1, 0x3, "ed0cf2272f80c10f167fcaae84139b19a7b463ee86b4c4a8f14bb48940865d8787d0c69315c771a3829140113b3e6a636f818c4754a9e4bc5657baeb525268d9c3eb2818fe122770265ea219abaccf0bc8cb452d093ffccfe74ed7ad0411c262c8c627fc8bfb655ec18526f336b702bd72f8d5f48592ba05176f706bf957e804c85efa71383bb10e6f"}, {0x90, 0x11, 0x7fff, "0eb45084ef4aa70163ca15828e80a4fa5c94305561dc49408061d2afa427762cd6ee8ef75b8beabe5525f52304974231ee99b4c11c0ca1d72f888600df34c4804e8cee38b6c9ef2c8a5d7f92780d6cb523a3d61561bc7b58a4bebc2678d7f85a5dbc470ecfd77488376e492c3bd547a01458c7abcfea8859de338877ec44f2df"}, {0x40, 0x10f, 0x1, "a6d430e1d9c450e4b112a59cbc36f887ce875cab02bc9664bbd3082dd1b0a0fc0629e8e6c0357e122bc88784d91f"}, {0x110, 0x11b, 0x80, "b2d14b93fdaa54aaf765b9ec794d342a14b70a59503906037ed56078ac972babca56aa68e46908c3b389c8935861b5ced499c82a64253e9cd381dd3d1b79d3d24a356b738bf624c3d671c973a136350871263fac17177a8a8062b78ab132934c473f27156041b55cc2695640779307020891c1c88f701618125684af490a8f990ec85da3524c54716f11fbad045df98a8f969a6724043dc650cd3237f8c8252fa43c1a4c6e3ea1a04edb53f216d7adf9be8f6bcd01dbd8b763d1f0e6ca0366ffa9c837ceb6cb0598c3af9777359c85db35948a33eb30268319f8a3d2eaf015bc064e3445d0f94681e23014704a54066b10c5aa3d1079113b98"}, {0x28, 0x0, 0x2e, "ff87b8b12bcc97003010d6ef0c4debf3476099da5fbb0eab"}, {0x40, 0x10e, 0x1, "17cd1ccaef78e30aeca966e935b91aea70b05c6c97461eeb124c07213d728b168d3e3caefbf2049bbe92"}], 0x12f8}}, {{&(0x7f0000004a80)=@nfc={0x27, 0x1, 0x1, 0x6}, 0x80, &(0x7f0000005000)=[{&(0x7f0000004b00)="86e6c1790f", 0x5}, {&(0x7f0000004b40)="034afc9a0d36363bee7d6f6db0e8ff0059f0968a268ae24f53c365f49e7599040fbd483dff03cd6326bf95ebf7ac5f5c55a51828e7c8fe995a802393144109a59177ecbf73e46a788edcd2ae7d0196021fb4b36f65430dc75018920cf26bdb95872fc817027b4b5324b2e84e4025c80f38b527034057e54927f00d048f6649ba7ac374ac1dc953a33e2a3ee347bfdc3eda5af2e613581926945f75e67d40cc88c86d81585df26677d9529b05756dac9f443bf4bf24293a5d2a436d2051d4ea0d6c3840c5eed61a89b32e", 0xca}, {&(0x7f0000004c40)="37be5a07e63ce303d031e6db7ec30ea56feb6cea4c30071d983748c498ab382c07b74450caad3edd927b1b94bcbfbafef6a3f7f0248dd941794192dae75e6d103a82f020aeb2e00316f9e9c4b610c7cf65b7d399211bfbb06526b5d03100816d7248e33a7a30d33324c7a3d5ef3237212db4d0829451304062537ffc120bd5c6a88e51e5b98d4d0128412ce2e41d4a4284039e94e07c43e07b5c1f1ed5c7dc168105ea5ee4d21a6357ecba64205fedac39b057a5d31d4b077d1e3617592705cdb495eef7940fe3eabf69a17f911c55bbf4b89bce4627f4c2eb0f7df784453feae43f7550003c3723628a2a27", 0xec}, {&(0x7f0000004d40)="a2fa49e234cf6edff04aac5355ce1657116790f15ba07e10bf3558fcbac79ef5a0f3a3ce1fb1234c5c150cc9b0f1117b824f04d1775764308fd54a63145b99db4802f7c4913cbdf59f766ddad6a267f7e8d56a54692eb6b7f00e960b8252ca695abaa16c26dac89c51b47365800bd4fbda1c6dd8100cad3188eea1d5b1c2359c3ffff1c6fd7bad6ea45853ca7617a1f4af0566ce040b9cc36e5467d965be8b1aaceb72919be1539b8337632faa5152ce3341855d8e2a6ba3cdc3cbb0e383c96552b08614a7a722d21e31bb1379fa0c57", 0xd0}, {&(0x7f0000004e40)="05fdbefb0514051778b63bed3b47d75a2665e45482c75537f77e52409a5651f7d75082b68c38cfb260958a9038abc57ac6a518173eb26eb5afdc10c009f66a0982975cd2af37d694d34363d2a5bd5a210ab4d04d9bd912d89627f8abe6b57d317e29129836a4763ba02925d88ebc4ed7cd3ff8afc123f54c24b5af610e49f5a23b0086fbe11ed9d4981d43c2b8cbd3e2d68ca9f4a58d", 0x96}, {&(0x7f0000004f00)="3a2e9eb6a01914a85262bdcc6d829a4ee4441a7a6bc68858254113cacac037666d5cfb62a4f7444290abba8b011f73e88735d19fea52fc57f291e4dd3dafe741c0c42b9c552fdc9340", 0x49}, {&(0x7f0000004f80)="b17c2028e6ba192133ea141f7fa9251b08f4799be2e40537d79a93c08fd77a56f7e5d49103ab312d844ddc199a4eee3c676784148bc210b3e3d5283fe0f23155ab098219db9b9d821f5af08bb8cdc5960894efd0355c", 0x56}], 0x7, &(0x7f0000005080)=[{0x30, 0x115, 0x0, "cf3cfd6d43a7c2af55b5a7d92d550cac2d6b68a05a5348199fc3"}, {0xf0, 0x0, 0xfff, "6e1900c451065a22b4f433246e65c273fbc427ce7b30d223ae2074967f80030992d7d60a6e65ec2ccb2d2966339bd4205cc43d770ab9b4dae5075211d8243faa44e8345a76ae1ae1794c4b3ff5c09cc9709700af8a72a3a014234bc1073843659bbbd67e4ea159026ef9498aef2cba7455a76685a948d5ecd3bb6a948b2d8656f79b026d08ea130a24e2a133bbb5f33da1c3252b2cdbae09aac92a5e18814437c961903b3d461eae4ab04aa8a4a0e133eb1ce02536125d90ce40e9d217dcbd9f5667c321338db48d0f392c6b2e69d0c3a5b77eb52370925ad345"}], 0x120}}, {{&(0x7f00000051c0)=@llc={0x1a, 0x21f, 0x1, 0x3fc103c6, 0x4, 0x5, @random="1ba7b077b47a"}, 0x80, &(0x7f0000006480)=[{&(0x7f0000005240)="8d923a33aa69dfa4b8d24569827add3e2ad51489beb5a71187edc2693fe6bae241d95dfd845689776d12146f33dc1e9cc2c19f718c39d9582e4266790ec4a693c6b37c2f4bbcbed9bcdcc21146f3ad53901c19767118847ceaa13ed6f85e4b9598ed39d9fb2316823907d7bb5c7a30bf32d606178d4da8f88d562c", 0x7b}, {&(0x7f00000052c0)="4ed6df851cf5983341cd9f6aa0ee642bd55796a572c7e64e3521bac6f9e8663ff7a56e40103787597a263c7b0bf13cf5c8473e213237807a448b342f420f7109144f0c781001adfeb331ec7ce9a711e38a3e31ad371fe6844f9dbad8c43628db3f7986d36f27b859369a54eb00552efb24413781e2b54e450919", 0x7a}, {&(0x7f0000005340)="470d5c8d212363585985f8ce8b86a0f35aa02f49f1840fac15ce47ebfeffa85dfe374711e6d31aa64ae6255d61c237c66ee17362508269f32d3a82c3cd1e30c16a24dab64bf2ce6dccdcf5da33ab765b063cc1fc01d67b0ba57399239947d6dc86624d4dcf0884503ee4d6daf777aec80c5228306f43b861cf587c271f1510dee22ac2665c8b5fff6d4a2821c8545294a33ec92e29bce7d72ecebc72ec12879efa641345b6d0e3f1b2bca6eaff9151c6a872d8e298ba928cd23ec09ddfc2f8518940dd4ecbb5376bbd26ac34b8e0db96c8b8badf0122c8e2a58cdb840a29887e57b0fbf79562144f6bda9c788d3e7dfeef630489492350fece3f3a9e6e63b57b3c92741ad28ce7cb8b59ef273c050034187e1fb91ef0644c2b7161b56ee1ed63158d2de4d600bd3c17433818afa3b6271322a8da6bba18eefa4aa9dfb5a1888e463c2bc40ea2340c0809ce193ca6cbef2fbbdf96948fc09155e783a652e7262459fa833d8a9410aeb60e523edc6c8d405f01408c78a41d0e0ef48ce862e53a1708f20c0b7249a0b6e626e2f394322a8011bf485f281e2ad08ca62481500abbcba268e45df5dd391623eb8d962fc8d499e5ed1167d6d3ea5962ca4122d4a0cf28bf07be6e7b85f36b88f55542d6e699b4ad04709d81a1bc4ff80bcea5c20f0c0fa6420791be863fbe7bd8cea82474c976e38285538e3ad5db35b910bd32533866652f5ba9f78a33878527b960dae96fa7b7315bbb58f3bf1f4b059d7a5b6c470fa622936fc6960065fa292493a2eacb9575f9176c168438dd239b93d6d28868ed4fee6121613f2a40a754814333a0a1ddbc41606dfc9085e95a4d13e8fd919a12fc8b4901baf7e81a164eb60f2cf2db80c4894375c29a40267dfefa513d84c98b77a612275f934b67f53451edaa99aba8f97b555d8ddc3ccef068eaaf12c4f494a4ec759451f78cf6ad8280572dc665c1086464e63371e9de89bc0e27dd06a45afb333be16f5b23293e39a5399a8369dc7ae8382eb134e6c2c4041c7557e7c57bde706acd28e1a1299a212d96f915a4b04d6f71314da55e6d8c384bbabbab13c4daf7c73c23722c8798dca4104f831ae0d93e12f364891605c645c59922d33af9e795802671905e7d46f83a565b360310c8600194918e78a6f2d5ad2ebc2a69224671f1accf2ad3a4b8bf1320154f8757505377ab45b13df87fe1f2efa7e91cde70315b32fae45b1043497550edfec6b2911c4567f11e44138b780425f11a56f00df26e1a757fd6576ab616aaf5f4acddae1f817ee1788245b29e13078e3227f1e4254064ffc2e844d7be812656ddb4234f84830a241288e2de3128d23e53ebbfbb8ba2ef7a441f9feddcfaeb936a46035c3cbfb4868c69311dca21071ed49b71cf87f4aa7751eacde9a6f8b1a78167d63b27cf93eb52b22ed0bea27da1b4e0471832cc660e86bc81581ace7b828f44f9b2ec5e9d0f0ecb8e52d9fe79b01eacdae797ac8d7857f59efb1b889b80bc87e8fd573202c82edf5688149dfc666845a952cff1bf1bd14cf47ec07ed1a386a04da5ccc47fe7a405095ec97d45744db6ec87abfd6f357839c3203942cdd81690d40fccecb326ba03a716e1c4d0bd350e6cd4248c0bfdf2843f3db00ba60fbcb0cbea255e849eae5df9f3fd8de8325de1fbcb1041e2be0cb9299a33e247a73010e43344933cf484ac4392eaa77fb8f0f0b0af98853d010c2c9f30944055c41ad3af49ff006489ba6a9d9ee72e38705df6bdaa6e631f47d1f45f666fb8cba1c97d94ec24e48286b41fda36d3550a769c150cc2b0bb208a77495fb05015cf440675e9ac7d1900d7f764453e6741ab8127ea402cedcdcdf832380ac7f71299fc19fa26c220c65dc15f1ab9a31890df834538665868245ae369577977b6ab97110a189319c3013f657a3ed92cca7b397db64a7b446c08e8f2132c9de502d9ccc98e2e8f2a999f62f94b7eff09e5d265a0130f776990f35e44843749a050381f06c045d7ccd5b91e9976987714eadec8d179dff63cdbd22dae725315b9071ea238bab5324f43bb8694fc04380b8d228a30c30e80158f778d215095f08d073b947e7ea282cdf400765c4620b81735b9326f1b0be1a2b71976e35f12d454b491242c1c3aa5dd2bed4598ca17a6fe797746fec8bb61ba2d88e4446ef9f799b8f9abe82abf659046bae03213592791d92354232fc631754e6c9344f79652223852d516c72b467ceba2545a626456d4e9fe316e988bcaaeb6ca3eafac2d035f9bca3861ea1b738e27fb0fad969727381a334d4bf25131c6e62a0fc521fb97f3fa45fec9c2b0fc67a20a17f6bda27e77e47c8aeb75681626d62718b9eeea7a1b9181532128fc0dcf9b92bb8c23dbc05e3e4c9e874c6997a7be95d4efe66a173893bc824f71c684c3005bbad2b47bb1de374c92f0efa63dde4db2f0ffcdbf24724e5afba1c1971e4d02439d4825f7abd151d8f8c98dea76a659fffd69e1855e6823dbc9ee20e6f507003bb725415805d2e19dc4810e1805b51f0eab5151f3b1d9e1c01e770eadeea64d6a7c69f0b28ce24037b19bd9db6ffe1583bced5fb38abcd22ee86ff6df103075b2f54eaf9434395171c2320d85d6b5df0bea254ec2cac68db59ffaeb2d78ee923850f2cf8763d6b4a540d477f7de244a488687f7f648784dea7753c1dcfdaedfe601062a6739fe35a6c726b302dcea3570034a2fc86a758a7d78a4e69c2b36ed34e977d4a78d92ac7105985a8e5475f3f67625e49d53760ad55ea8a0df825ba8fdfa4e2ebf96e1b3cd393999ed0af1cbe84dcefe5260b4b80416211e7ed0d67dafab3c7eccc80a45b3fb0eb03801af41608722806e98fb0971dfb80e64b74c5f77997401589a4847ecac43ce1723d0da2eea2a7856120cf083d67e3740684870a5a3a75589ff3efc6bf1e2868fc27d1ddb8bccfee03f941dd5b62f3e5ba964fe8ce0020e17cabf76049e037ad881c749ec96556083e8e9cb759edf6cb26202a224a3b43df5c0443dd3b468b64ce7a576777dbfecc6211bd05f8e6b94dd8725de2a7b9ae11e87219ca20da61af2514c1b722bf89d7c8a72510abc8e51f97ec88c89ca66ae859c5474bbeb112fb04ae1002be395a4d806295de4d2efb4cd1c7c7103a30cbd0bd56daa572151fad1a66885b7c21c4ac5b39026b296fce99655adfbe3df0b707dc9453042ef8b8a34a5a7fd95699a26f8e75a8c98d5230abe079c42fcedabfd40cdd648a8f92b22a60b75e1346780df18902e05c93b1e0953da232b94019fa52a3549598373c525741eb5fb60a570667afc4d99f70cb27aa5ddc4c0bb23b0c4aab2916c159e431ab5020363fcf5c1886c80ee9b40f3beea6fdf82030111d7ad6656ca8790f7acf7726782104d76f4a7efcfa1055c4bc216a4f3350ff3e06d7178a9615382fb674704dc9ca89b17da4d6cdb594f841104862a22c7fe11c0da8dd2b6dbe4143dca1428ae5ed376af1928794b290914b6d63fa79fdd1a501eb21d07afbbcf9db94ae693f166c5f78b9a030584235821abe22df880854f87bded8484c3e937edd849fec5808a1dff2d0ed3dbf354c3a9e6d628b56a92dbe60d3e41b48b93cb91302fb15f33fb92b822d14851b7d8aca750990ba502b373dc83954075f944fb3f02d50b1444a60c786200f106dfed4d6fa49243f64b9b65a79c233d2f8541009506bdeb7b541e2548dda31f5ca6bc034bceada8d101627bfd71f61a22b4c7da4783c1d60d40b9b0ee2b8a2ec073474d5d0f2eec5fbbd827b3f5cc7ea62dcb0cf63ed252d82210109ac0df4eb10cc63709b239c3f068db28899d25f2172c515eee888bdc07f26cb39566215e75bb815182f3a97d772a5183762bec0ee8bd88fdbd7d6c23264d165497100a793e23801a5d094e276eb8d09040926cb98a2720c565c8c6d47f459cf77a7f5b690ef615f4f47c2a437d8d0d14e765dc93702f670faebb168773976bbebf7cb11648dde8789d81e4fdcedca4fe36c5dfdd1ebf6130cdf94b6bb10e886a36f9cd5af30620f6913beb6c60c14089eb83d37dbb4b102f3dfb2ec6e89d4931ce41c31b248912dad6b8117bf218961b12f3dbe4ed33ee64fc77f054b347e396e27d500faa50ba9016668d15b0306b4eb28dd1b56309cccac12334a30a14b639cc245c467af4c7c319a9b9772f9de3cc334b8489014278dbd64dcceec5f4ccd81d4a25917206c79151ad72fbbc89f66dc56c1487b5404312482eea1be5f93b9ef96ad3dbdd8ac2e449809311165b5c093505818322a0760216c55152030a606ba71adfd995e476a5d76a4ef1f74643adb8550c2d20eada2931be9052f1db6084c3018e55df9a387cc685fabe2651b1bcdd7199b9c603ad8632e86878ef34a19c8ad0c8e562411782dcb02744ec365d0f28237d511edd3d0ecfdb39b1edebde40b6fa57ae700f0fba161424e4317b792f3e0c8378a6b854a40a056a71aeeeaa4f3de43b2c9bc6e096b59683965667bac01977bdc609ef4bf993ec72a15a563de4b1b27fd89550573c6f53662aeea6795ed5f0618bccbcf45ccad79434cb4ec22ba9d76ae12fbd45c4aa84f69eef276fc9491464484639e10f151383803b763ae499509ad4fafc8da021771b49d6bd21ee94c5e97909a997b9231bd26b34276cf7ca1454328fe8d780b44f8842bade33ea09cd0cf705e642652e634756e463f9d913d9b482e9a23b5d1cda3b077c435fd7afb00f77126797f6f933a9210b3da649cce8ead7dc461e0a8f800fd630bfc5e12ef78a530c83067d4ba384a689882ed88e838d8b4833d1318bf91eb73efaffc6a5928ec7ded81fbd752d9b977b9c3938acef23cb568f30f225ef02384d53ede1151dc259ebfcf6ad8f010135a4ded2f0b9e7d2b1cd29e5dd347e58d2639be02968842f3a24a58094389d1a4fc837d748a0990b8515de96ca15db52874d6269d51e84bb57151e22423b9bd8aae5d3be51469a230f9800c9f775a22833b0a7c5ec726b05fedec7c64fc3561a265e8df6ee12f00c636ed16cb062dc92020817f3a0424e9d567508c4adce813d4e3687b651342f5e7efdcc789412a15e04dfdad1bf45276169c22cb4838c06f62001b7e15941828ced01d54ce1768c44c07d6846db4f4d6b0d77534934cfe0d313e1912b6dfc0dd01f388329dee799947ceccd36e62d9bb1ad75235c02f01b4b10929f7fc3c734e86d611754e6436febc2e92d5917aa46a9eacf031562da8e67f26deeef77b2de02249b027fd35db645ee6c01edfa143639f18e0b38b5b96e3045bd42db9723bf33a04a335f97a95d824ccb426716552312b23e6a83a1d07f4c0175f7b2a6ba5ab1571df5b5d7d8bf312f11a093d8c904602cfee4f95de3e744828aee8c769ef1439b4e350435a32a8109cdd8ebccde747bd920622d3787f7115e50cb439d77ac30cd13bbcd6e31c41f2d75a55000659977a4b8dedc8ea795219a7a1abf6b0fe0fc5c6550ccd6faa750cdde22a6751f2afc9596988e70fd49f879e7e95f10efa380fbf54fd3fe8357228ef2157b353a0905d5067be857412ef079dfe6a649c0e21e9a50b08079dd2c23c853f2762e73d7abfad5f90d4d19ed91f7ff8f7625ff951d8631ed0da5e3ea6598b232d01d6e3c320fa7a27fca76e25dcf769ada7c7ea1c281255f3dc3aed7256e40bd088129b287127869f1d4c445f5fde8057a130579ef68416f5ca990d3b89a5462d9c7c47cb49c5314a344d8daf4d50de3904cbf9cb52d56e4c22edb3cbaa71e6a17f4fbce2c6740cfca3dd3bd7a4a40a5", 0x1000}, {&(0x7f0000006340)="e9fa91b8b62d4312da7e5ec1b9a16222330445ec36fd08090a6e050034f7979a89a810a482d65131d0c9d2413f0732d615deda232ba0902d15ceae5ad510b9662c8e6a670349f14c904c0191db89a15f8df9f503bafca17fc1a65915a966af64988802a27f0f", 0x66}, {&(0x7f00000063c0)="32cf53b1a5ec71224be1c604340d7fd34c247f354bb8b1ffc4acd022da84da5ead0e5f466ac5736aa295d97a22dd85b6fe4629dd9fcd2b3e5b6a92d08067640b5e4a9dac8108182f4f37a482622ddffae8b80ebf80d0b5111fe829cc503544b007de2a421c245aaf63be6b57d23737f8c5268944d98ba5c6a04f9fd3e700fb1ec860d7fbdea482f88e44398e997b9c0c8178eaf9013bb42f6e769a9f66739a", 0x9f}], 0x5, &(0x7f0000006500)=[{0xd8, 0x1ff, 0x9, "5fdcf45673605bbcd38a213aa10dd5c73a397fa5930cc19cfab6a7f59edfba39755354c0ceb6a52419b02d0f286143bbae1e9b8746a1ee2de105aecd953ad1e85eee9dcdd479014e8f5b0db0d0292e659fee1bfe65a9cc48dc3c40e17e0db790193aadea131cb5cd6e7eb03293db2fb5d0a02b4626ab6be3ae955b455e92d7ced2d795f7bf575969f36598e4ac78a635a844f05ba413dad7301462e67b28c19554843e3044f642ea37c99fe825fb3f5903c23caa85eef3a7600cf4e136196922d5a707"}, {0xa0, 0x119, 0x7a31, "7759596247c7d8d648f11f9e5de359ee3ffab1785c46457ab3a376524853c27ac135f27a2bed3b41e6e08b742ab88f53f24b07bcc1ef9ee0dea758e4e8d17bf931562f3a24d77170de36dee6e6b0bc10476336e0cc5d51280c8bb7cdbbf6f41d71bfd8c2b1745081f1fcd965350136f85f41a8d208d72773bd65fbd84dac66bdaf576e369b3552d54743aed93238d4a4"}, {0xc8, 0x103, 0x401, "d03e875aec7bedf146f3cbac48a2dcd2240844837ffb0057df11977119fc5e8f50df681ad468718160b7e763e96952e14ef867db015999c25477725f33b6e1f5762161c824d8f0d6306864351990a41d327b12a6284272f63d9ff36c0cdc17bcbbf3c7d0e3074ed767da865c0d0e0fcf56826b20e3b955f9278d86234268197286026942a38beb7cb9918c967c1e3505a431423c7a8980b6c3303d0d246ab230c0b9dbc06e7d34682c1670535d4c3579901be196a28275"}, {0x30, 0x0, 0x9, "dee204791ce74341db63c5ec95629b25336ac7776c076ac01377e0e2c7"}], 0x270}}, {{&(0x7f0000006780)=@pptp={0x18, 0x2, {0x3, @multicast1}}, 0x80, &(0x7f0000006880)=[{&(0x7f0000006800)="5f6ef9bcf99bad885b1323b7c9f36fc07410e95184a16d72544a835cb7993e0c98e180a2710ab3daaeac49a3976a0c7cd958ca3e16e0b6631f0641a2450df39c20e6919961383d56b8a13deb83af4742709a3a7b10b49756f700bf438f9d54afa01435eead073a9b750feb0c8cfed6e2e64b247f", 0x74}], 0x1, &(0x7f00000068c0)=[{0xb0, 0x11b, 0x407c, "66dbc6a631d1ceecf4f2bb87758b2ab0113e5e68d3ffbe9a8528e341331c57ed80d4cfe2bea4c8563565433145fd350578250e6eaa6a904a0205a1cb99e38f82c7db1f9c83e68ea6e80ac5312fb2b8710dfbdcd77882b8c1c0b22f507bc23bf2b81798bb9e21a83f9f39d8ed6d862c4239a2fae5ec01b322c8a7a7058d0590ddfec88cc3bd0e21615207c7dda5ca17a6b9b1435ddca165df9eaaeed037345d"}, {0xe8, 0x11b, 0x3, "4c6d840c540bba8d6dd63130731716afc260af14aa1d34665a85e269e60d9ffa060f107386b8011c8ab44814ae48883c4647f7bc87e58e409063cc062c34612717620031ff57aa1e85c21e4888916acaaed2c6482ff892678425e18c88fca49b07d75d275d1934b85646d3097fdd672c0aab01b2e0455ef151671e596294e47cc570aa004a23d9e1e6da8376ac57a45d48ea1c4c0e9dd69d2719c15dbf61b3738a16b387770a429bb4f7d91cb39bd39b2b62f50465fea6fb2ada25b553e404df7da493524d2ab8255ed53f7c1fb0c3a7cb"}, {0x78, 0x18f, 0x6, "bf68c5fe5b3330b8d92d627ead878157f98660b9292fe2fe3ec81926ef51c7cdb23bad7965fcf95bc6ef0181c9b44acdb724e06bd9b72e988435ed81a9fe397f31fd229334c95cce962b9194d55342db059496fa0e29c7da67f678762d7405cdb61cbbdc86c9a4af"}, {0x20, 0x112, 0x8, "10d36105989c0cd38376500034283f"}, {0xd8, 0x11f, 0xff, "c6525d3d44c2e0d7a45ca45390c2e4bd17345e2dc9ee904f34f4ff058655cc619d30598bb17d37fe2006bf2d0a59d05df70b77ccb1087e6c5c269eef63c255e68600194e51bce55845f6368d707e4fa8dd4be5da89cbc80323992c240e1b58d1abd185b34d8652f61680ed8aa206847a55b63bcdda280328a67411dd2e46714c4eeb8dda7bcfb49e67d34a8973b8b00ab1f86eb505065a81f68adad91ea2438fee2e6691feb8977d6e2fa1bba2a2b853e366190dd39d1b9a3857b6295003c784c1db215c"}, {0xb8, 0x108, 0xf48, "1c3a4fac5187a37bccd517201b443c01139a7494072ccdc5412d0a4cbc5e62a60eb25b7e586d5aa3569a405aa881734b3feeb8eb800420288a89ef383080a55064c1596c4db84999d8c1e7589ba5712c46537aa524867575dd748562d18c8200c2c447bb8ce37d8ea83f8b824b53e162c8c2b94992fa3777ffc4aac3d1ef4b518b2108f1ab781aff8cfe4c7d6179fe2c0f0a5590db3cab0e6214ea9343687eedb62797f55e"}, {0x38, 0x11f, 0x401, "37a0ff449b2a9e8b05d3ffc175a48e0246bee1038841638f6b4bde4d23d1aa096c5928f2b5b4"}, {0x18, 0x115, 0x7, "c235938d76fa"}], 0x410}}, {{&(0x7f0000006d00)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, &(0x7f0000007e00)=[{&(0x7f0000006d80)="548c7966473f363a6b1df42a6d05d6637e8e50c56c95f2c469e8e8f678af8d00718d63f3bdc7c2f7bf9689158686798b13adf1f28f91d8", 0x37}, {&(0x7f0000006dc0)="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", 0x1000}, {&(0x7f0000007dc0)="2b18a5f9abe386c2383d3aacdfbaffc385558cd29711d1b8118f8645acc473cbdaa6", 0x22}], 0x3, &(0x7f0000007e40)=[{0x30, 0x0, 0x4, "b8a8bc09dd851180a67c29ceb40697feb1f2dc9a2628c327406a43ef1e85e6"}, {0x60, 0x0, 0x3, "3746e43c11c7f793577cc410896ae0183bd22a40ce5fcf807d5787be9c3ecdd2692796ef69d65dc57f5c7002582f4151044bf0c1b01694f0774f6dc34c248fd253eba445041f5fd41a"}], 0x90}}, {{&(0x7f0000007f00)=@llc={0x1a, 0x304, 0x8, 0x5, 0x6, 0x6, @dev={[], 0x26}}, 0x80, &(0x7f0000008040)=[{&(0x7f0000007f80)="5c68e03a86401863aa617839c501633d0ae7a63a4e731eb167e367a4661c90aead606b7d7bf4c87617e555d8e645a64ec0b9a3decc05ea2348456a9b1428786d36fc4792867df1908363471854926e556ab8d422e153dc88be8923d8383019d680b9efdd4f09a3d5a8cca81ae88d138e1148ed34d65660ce97c58947777067b3d5956f7ddd54c9c84c6d0d5bf4584a792c35cfe0abbe0f65f445df87ba82ed2958d0a71643aca5146f366c434224402167afcd", 0xb3}], 0x1}}], 0x9, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xc00000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2640.146968][ T2828] FAULT_INJECTION: forcing a failure. [ 2640.146968][ T2828] name failslab, interval 1, probability 0, space 0, times 0 04:09:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a1c, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2640.233385][ T2828] CPU: 0 PID: 2828 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2640.241292][ T2828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2640.241299][ T2828] Call Trace: [ 2640.241329][ T2828] dump_stack+0x172/0x1f0 [ 2640.241358][ T2828] should_fail.cold+0xa/0x15 [ 2640.263877][ T2828] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2640.269695][ T2828] ? ___might_sleep+0x163/0x280 [ 2640.274565][ T2828] __should_failslab+0x121/0x190 [ 2640.279515][ T2828] should_failslab+0x9/0x14 [ 2640.279532][ T2828] kmem_cache_alloc_trace+0x2ce/0x750 [ 2640.279554][ T2828] ? rcu_read_lock_sched_held+0x110/0x130 [ 2640.295140][ T2828] ? __kmalloc+0x5d2/0x740 [ 2640.299580][ T2828] alloc_workqueue_attrs+0x82/0x120 [ 2640.304808][ T2828] apply_wqattrs_prepare+0xbb/0x970 [ 2640.310044][ T2828] apply_workqueue_attrs_locked+0xcb/0x140 [ 2640.315878][ T2828] apply_workqueue_attrs+0x31/0x50 [ 2640.321019][ T2828] alloc_workqueue+0x8b9/0xf00 [ 2640.325804][ T2828] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2640.331544][ T2828] ? retint_kernel+0x2b/0x2b [ 2640.336156][ T2828] hci_register_dev+0x209/0x860 [ 2640.341019][ T2828] ? __vhci_create_device+0x2c8/0x5a0 [ 2640.346406][ T2828] __vhci_create_device+0x2d0/0x5a0 [ 2640.351622][ T2828] vhci_write+0x2d0/0x470 [ 2640.355968][ T2828] new_sync_write+0x4d3/0x770 [ 2640.360659][ T2828] ? new_sync_read+0x800/0x800 [ 2640.365454][ T2828] ? __fget+0x381/0x550 [ 2640.369627][ T2828] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2640.375970][ T2828] ? security_file_permission+0x8f/0x380 [ 2640.381617][ T2828] __vfs_write+0xe1/0x110 [ 2640.385956][ T2828] vfs_write+0x20c/0x580 [ 2640.390221][ T2828] ksys_write+0x14f/0x290 [ 2640.394565][ T2828] ? __ia32_sys_read+0xb0/0xb0 [ 2640.399342][ T2828] ? do_syscall_64+0x26/0x680 [ 2640.404027][ T2828] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2640.410119][ T2828] ? do_syscall_64+0x26/0x680 [ 2640.414813][ T2828] __x64_sys_write+0x73/0xb0 [ 2640.419416][ T2828] do_syscall_64+0xfd/0x680 [ 2640.423934][ T2828] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2640.429834][ T2828] RIP: 0033:0x459279 [ 2640.433737][ T2828] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2640.453589][ T2828] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2640.462169][ T2828] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2640.470174][ T2828] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 04:09:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2640.478295][ T2828] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2640.486801][ T2828] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2640.497031][ T2828] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 [ 2640.567002][ T2828] Bluetooth: Can't register HCI device 04:09:43 executing program 0 (fault-call:3 fault-nth:17): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a1d, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xd00000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:43 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x1000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="a1f81aee9341463115e624114ae867b7486f03a73cc065aa3d3008dd204ab7f3b8bef13c1c41f888370204cd5042affb59fb64ad43793c2f6918bb27a23cb57047b6ed98c08f2d83bd263dc2b6087c5c121418ec77370477a21021652885b1c16835a9d5db7b4117af283d27628d738ce773e8e7a3a1b22c89c9369a896193831f35f9fba01a18594608fc914b41c16f7485ee4f88d6a11356a0aa687e8284b954245e9d99be3ff294b130c242a01f3d9b150acb96851f46e61638e82767f430f1f2ad3846664b"], 0x2) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000080)={0x78ed00000, 0x1}) close(r2) 04:09:43 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xffffffff, 0x100) accept$netrom(r2, &(0x7f00000000c0)={{0x3, @default}, [@bcast, @null, @bcast, @rose, @default, @remote, @netrom]}, &(0x7f00000001c0)=0x48) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xe00000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a1e, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2640.759605][ T2852] FAULT_INJECTION: forcing a failure. [ 2640.759605][ T2852] name failslab, interval 1, probability 0, space 0, times 0 04:09:44 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vsock\x00', 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dlm_plock\x00', 0x80, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x7, 0xcf) r3 = syz_open_dev$sndmidi(&(0x7f0000000600)='/dev/snd/midiC#D#\x00', 0xdd8, 0x80042) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000640)={0x7ff, 0xfffffffffffffffa, 0x3, 0x0, 0x0, [{r1, 0x0, 0x20}, {r2, 0x0, 0x4}, {r3, 0x0, 0x8000}]}) r4 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2baa, 0x3d1202) lsetxattr$security_ima(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@sha1={0x1, "7a24b86e0542c9c1b1ecc1055956d689a1c8a60b"}, 0x15, 0x3) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000380)={r5}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000000)=0x39a8) r7 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) r8 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') fstat(r8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25ADDUID(r8, 0x89e1, &(0x7f0000000540)={0x3, @bcast, r10}) sendmsg$SEG6_CMD_DUMPHMAC(r8, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, r9, 0x0, 0xff, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xc0d}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000090) write$P9_RLERRORu(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r7) syz_open_dev$usb(&(0x7f0000000480)='/dev/bus/usb/00#/00#\x00', 0x4, 0x800) [ 2640.844770][ T2852] CPU: 1 PID: 2852 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2640.852633][ T2852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2640.862701][ T2852] Call Trace: [ 2640.866026][ T2852] dump_stack+0x172/0x1f0 [ 2640.870387][ T2852] should_fail.cold+0xa/0x15 [ 2640.875003][ T2852] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2640.880835][ T2852] ? ___might_sleep+0x163/0x280 [ 2640.885712][ T2852] __should_failslab+0x121/0x190 [ 2640.890678][ T2852] should_failslab+0x9/0x14 04:09:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xf00000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2640.895191][ T2852] kmem_cache_alloc_trace+0x2ce/0x750 [ 2640.900587][ T2852] ? rcu_read_lock_sched_held+0x110/0x130 [ 2640.906319][ T2852] ? __kmalloc+0x5d2/0x740 [ 2640.910765][ T2852] alloc_workqueue_attrs+0x82/0x120 [ 2640.915982][ T2852] apply_wqattrs_prepare+0xbb/0x970 [ 2640.921213][ T2852] apply_workqueue_attrs_locked+0xcb/0x140 [ 2640.927139][ T2852] apply_workqueue_attrs+0x31/0x50 [ 2640.932275][ T2852] alloc_workqueue+0x8b9/0xf00 [ 2640.937061][ T2852] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2640.937085][ T2852] ? __init_waitqueue_head+0x36/0x90 [ 2640.948096][ T2852] hci_register_dev+0x209/0x860 [ 2640.952972][ T2852] __vhci_create_device+0x2d0/0x5a0 [ 2640.958185][ T2852] vhci_write+0x2d0/0x470 [ 2640.962529][ T2852] new_sync_write+0x4d3/0x770 [ 2640.967223][ T2852] ? new_sync_read+0x800/0x800 [ 2640.972091][ T2852] ? __fget+0x381/0x550 [ 2640.976269][ T2852] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2640.982525][ T2852] ? security_file_permission+0x8f/0x380 [ 2640.988192][ T2852] __vfs_write+0xe1/0x110 04:09:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2640.992527][ T2852] vfs_write+0x20c/0x580 [ 2640.992548][ T2852] ksys_write+0x14f/0x290 [ 2640.992563][ T2852] ? __ia32_sys_read+0xb0/0xb0 [ 2640.992587][ T2852] ? do_syscall_64+0x26/0x680 [ 2640.992604][ T2852] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2640.992617][ T2852] ? do_syscall_64+0x26/0x680 [ 2640.992641][ T2852] __x64_sys_write+0x73/0xb0 [ 2641.025938][ T2852] do_syscall_64+0xfd/0x680 [ 2641.030460][ T2852] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2641.036363][ T2852] RIP: 0033:0x459279 [ 2641.040261][ T2852] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2641.040271][ T2852] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2641.040286][ T2852] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2641.040295][ T2852] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2641.040304][ T2852] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 04:09:44 executing program 4: ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000001c0)='hsr0\x00') r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="09000000feffffff0000000005000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)) [ 2641.040313][ T2852] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2641.040321][ T2852] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 [ 2641.123771][ T2852] Bluetooth: Can't register HCI device 04:09:44 executing program 0 (fault-call:3 fault-nth:18): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1000000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a1f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:44 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) timer_create(0x5, &(0x7f0000000040)={0x0, 0x1a, 0x0, @thr={&(0x7f0000000480)="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", &(0x7f0000001480)="593a6747249739c933a3fb48d7e19ce276dbab437463c56994c33c2466a8300a4ea5d67e70792c5645623c6a479704d731186ac2d6f7385f4af2a7b693355b43d1a4ee9350a9341c9eec2620ab99c1d3e3e94d4856908b6c7ecf9ec54f60eae7a7b7014581dfc94a5121e052a8bef33059ab535b5391565ea0a31b29bb4f645367a949f9f177f53b05b8b4c5"}}, &(0x7f00000000c0)=0x0) timer_getoverrun(r2) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0xfffffffffffffff8}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r2, 0xfffffffffffffff7}, 0x8) 04:09:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a20, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1100000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2641.395587][ T2883] FAULT_INJECTION: forcing a failure. [ 2641.395587][ T2883] name failslab, interval 1, probability 0, space 0, times 0 [ 2641.441855][ T2883] CPU: 1 PID: 2883 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2641.449740][ T2883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2641.459807][ T2883] Call Trace: [ 2641.463123][ T2883] dump_stack+0x172/0x1f0 [ 2641.467483][ T2883] should_fail.cold+0xa/0x15 [ 2641.472197][ T2883] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2641.478031][ T2883] ? ___might_sleep+0x163/0x280 [ 2641.482897][ T2883] __should_failslab+0x121/0x190 [ 2641.487857][ T2883] should_failslab+0x9/0x14 04:09:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\xbcSQ\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2641.492375][ T2883] kmem_cache_alloc_trace+0x2ce/0x750 [ 2641.497755][ T2883] ? rcu_read_lock_sched_held+0x110/0x130 [ 2641.503479][ T2883] ? __kmalloc+0x5d2/0x740 [ 2641.507915][ T2883] alloc_workqueue_attrs+0x82/0x120 [ 2641.513134][ T2883] apply_wqattrs_prepare+0xc8/0x970 [ 2641.518360][ T2883] apply_workqueue_attrs_locked+0xcb/0x140 [ 2641.524185][ T2883] apply_workqueue_attrs+0x31/0x50 [ 2641.529311][ T2883] alloc_workqueue+0x8b9/0xf00 [ 2641.534095][ T2883] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2641.539839][ T2883] ? __init_waitqueue_head+0x36/0x90 [ 2641.545141][ T2883] hci_register_dev+0x209/0x860 [ 2641.550004][ T2883] __vhci_create_device+0x2d0/0x5a0 [ 2641.550025][ T2883] vhci_write+0x2d0/0x470 [ 2641.550044][ T2883] new_sync_write+0x4d3/0x770 [ 2641.550061][ T2883] ? new_sync_read+0x800/0x800 [ 2641.550082][ T2883] ? __fget+0x381/0x550 [ 2641.573191][ T2883] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2641.579449][ T2883] ? security_file_permission+0x8f/0x380 [ 2641.585095][ T2883] __vfs_write+0xe1/0x110 [ 2641.589435][ T2883] vfs_write+0x20c/0x580 [ 2641.593696][ T2883] ksys_write+0x14f/0x290 [ 2641.598035][ T2883] ? __ia32_sys_read+0xb0/0xb0 [ 2641.602810][ T2883] ? do_syscall_64+0x26/0x680 [ 2641.607502][ T2883] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2641.613590][ T2883] ? do_syscall_64+0x26/0x680 [ 2641.618286][ T2883] __x64_sys_write+0x73/0xb0 [ 2641.622894][ T2883] do_syscall_64+0xfd/0x680 [ 2641.627416][ T2883] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2641.633316][ T2883] RIP: 0033:0x459279 [ 2641.637222][ T2883] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2641.656836][ T2883] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2641.665266][ T2883] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2641.673255][ T2883] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2641.681246][ T2883] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 04:09:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a21, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2641.690344][ T2883] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2641.698330][ T2883] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2641.743534][ T2883] Bluetooth: Can't register HCI device 04:09:45 executing program 0 (fault-call:3 fault-nth:19): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a22, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:45 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x20000) r3 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f00000002c0)='vcan0\x00', &(0x7f0000000340)) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="01000000feffffff0000000000000000e1295a780604cc221e7985f7c4886d974ae104652427bfe36561905418121fe1ba6edba35283d923c3006358ee13e6ad3b70485a921eb502e07a2d4a9c16f3b91fdba9b08b54730dac9eca63032532f69e0fb0a4931353fd9215aa805bcb1df8d6f468c4de2886c1a867c0fb6a2f3d24ce702b2620325f5e9564875997ad101700c01280eaa9eed336d0dbc2703df8d56cd92b82b1", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="21f6d4", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000002001000000000500f7ffffff0000c4a2880e6a85f252d80e90bbb7f1a24841c475955bbb3eb539f3a53f867a5094eebb7df0266b114d1fdcbef224feb358e19eaf61fdbab071"], 0x48}}, 0x0) 04:09:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1200000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x200000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@gettaction={0x7c, 0x32, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x20, @TCA_ACT_INDEX={0x8, 0x3, 0x3f}}, {0x14, 0x12, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x10, 0x16, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x10, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x18, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1000}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x10000) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000080)={r0, 0x7}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") socket$inet6(0xa, 0x0, 0x6) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x1b}, 0x9}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e24, 0x9, @ipv4={[], [], @local}, 0x5}], 0x68) write$P9_RLERRORu(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r3) 04:09:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a23, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1300000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2642.018928][ T2916] FAULT_INJECTION: forcing a failure. [ 2642.018928][ T2916] name failslab, interval 1, probability 0, space 0, times 0 [ 2642.058007][ T2916] CPU: 1 PID: 2916 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2642.065955][ T2916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2642.076019][ T2916] Call Trace: [ 2642.079329][ T2916] dump_stack+0x172/0x1f0 [ 2642.083684][ T2916] should_fail.cold+0xa/0x15 [ 2642.088287][ T2916] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2642.094106][ T2916] ? ___might_sleep+0x163/0x280 [ 2642.098977][ T2916] __should_failslab+0x121/0x190 [ 2642.103934][ T2916] should_failslab+0x9/0x14 [ 2642.108455][ T2916] kmem_cache_alloc_node+0x261/0x710 [ 2642.113789][ T2916] alloc_unbound_pwq+0x4c5/0xcf0 [ 2642.118764][ T2916] apply_wqattrs_prepare+0x35e/0x970 [ 2642.124084][ T2916] apply_workqueue_attrs_locked+0xcb/0x140 [ 2642.129908][ T2916] apply_workqueue_attrs+0x31/0x50 [ 2642.135072][ T2916] alloc_workqueue+0x8b9/0xf00 [ 2642.139858][ T2916] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2642.145630][ T2916] ? __init_waitqueue_head+0x36/0x90 [ 2642.150944][ T2916] hci_register_dev+0x209/0x860 [ 2642.155825][ T2916] __vhci_create_device+0x2d0/0x5a0 [ 2642.161044][ T2916] vhci_write+0x2d0/0x470 [ 2642.165409][ T2916] new_sync_write+0x4d3/0x770 [ 2642.170096][ T2916] ? new_sync_read+0x800/0x800 [ 2642.174875][ T2916] ? __fget+0x381/0x550 [ 2642.179050][ T2916] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2642.185339][ T2916] ? security_file_permission+0x8f/0x380 [ 2642.190983][ T2916] __vfs_write+0xe1/0x110 [ 2642.195766][ T2916] vfs_write+0x20c/0x580 [ 2642.200029][ T2916] ksys_write+0x14f/0x290 [ 2642.204372][ T2916] ? __ia32_sys_read+0xb0/0xb0 [ 2642.209147][ T2916] ? do_syscall_64+0x26/0x680 [ 2642.213833][ T2916] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2642.219907][ T2916] ? do_syscall_64+0x26/0x680 [ 2642.224601][ T2916] __x64_sys_write+0x73/0xb0 [ 2642.229209][ T2916] do_syscall_64+0xfd/0x680 [ 2642.233729][ T2916] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2642.239632][ T2916] RIP: 0033:0x459279 [ 2642.243543][ T2916] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:09:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a24, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:45 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000feffffff0d00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400080, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1d, &(0x7f0000000100)={@mcast1, r1}, 0x14) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f00000000c0)=0x30000000000) [ 2642.263189][ T2916] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2642.271622][ T2916] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2642.279621][ T2916] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2642.287615][ T2916] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2642.295609][ T2916] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2642.303601][ T2916] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1400000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2642.473272][ T2916] Bluetooth: Can't register HCI device 04:09:45 executing program 0 (fault-call:3 fault-nth:20): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a25, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:45 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0100f0842ae80dd2eb7120f69cd28e4febf70000feffffff0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r3}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1500000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x14e, 0x400) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a26, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1600000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:45 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40000, 0x0) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000100)={0x1, r1}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r2, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r3}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2642.720816][ T2947] FAULT_INJECTION: forcing a failure. [ 2642.720816][ T2947] name failslab, interval 1, probability 0, space 0, times 0 04:09:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2642.806731][ T2947] CPU: 0 PID: 2947 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2642.814603][ T2947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2642.824677][ T2947] Call Trace: [ 2642.828007][ T2947] dump_stack+0x172/0x1f0 [ 2642.832365][ T2947] should_fail.cold+0xa/0x15 [ 2642.836976][ T2947] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2642.842808][ T2947] ? ___might_sleep+0x163/0x280 [ 2642.847680][ T2947] __should_failslab+0x121/0x190 [ 2642.852638][ T2947] should_failslab+0x9/0x14 [ 2642.857161][ T2947] kmem_cache_alloc+0x2af/0x6f0 [ 2642.862022][ T2947] ? __lock_acquire+0x54f/0x5490 [ 2642.867047][ T2947] ? stack_trace_save+0xac/0xe0 [ 2642.872018][ T2947] __d_alloc+0x2e/0x8c0 [ 2642.876192][ T2947] d_alloc+0x4d/0x280 [ 2642.880189][ T2947] d_alloc_parallel+0xf4/0x1bb0 [ 2642.885076][ T2947] ? apply_workqueue_attrs_locked+0xeb/0x140 [ 2642.885102][ T2947] ? smk_access_entry+0x1c0/0x1c0 [ 2642.885125][ T2947] ? mark_held_locks+0xf0/0xf0 [ 2642.885144][ T2947] ? __d_lookup_rcu+0x6b0/0x6b0 [ 2642.885160][ T2947] ? __d_lookup+0x40c/0x760 [ 2642.885175][ T2947] ? lockdep_init_map+0x1be/0x6d0 [ 2642.885191][ T2947] ? lockdep_init_map+0x1be/0x6d0 [ 2642.885211][ T2947] __lookup_slow+0x1ab/0x500 [ 2642.885231][ T2947] ? vfs_unlink+0x560/0x560 [ 2642.905852][ T2947] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2642.905877][ T2947] ? d_lookup+0x19e/0x260 [ 2642.905903][ T2947] lookup_one_len+0x16d/0x1a0 [ 2642.905921][ T2947] ? lookup_one_len_unlocked+0x100/0x100 [ 2642.906036][ T2947] start_creating+0xbf/0x1e0 [ 2642.915482][ T2947] debugfs_create_dir+0x26/0x3a0 [ 2642.915502][ T2947] hci_register_dev+0x299/0x860 [ 2642.915527][ T2947] __vhci_create_device+0x2d0/0x5a0 [ 2642.915545][ T2947] vhci_write+0x2d0/0x470 [ 2642.915562][ T2947] new_sync_write+0x4d3/0x770 [ 2642.915578][ T2947] ? new_sync_read+0x800/0x800 [ 2642.915599][ T2947] ? __fget+0x381/0x550 [ 2642.915622][ T2947] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2642.915640][ T2947] ? security_file_permission+0x8f/0x380 [ 2642.915661][ T2947] __vfs_write+0xe1/0x110 [ 2643.003716][ T2947] vfs_write+0x20c/0x580 [ 2643.007971][ T2947] ksys_write+0x14f/0x290 [ 2643.012315][ T2947] ? __ia32_sys_read+0xb0/0xb0 [ 2643.017100][ T2947] ? do_syscall_64+0x26/0x680 [ 2643.021786][ T2947] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2643.027866][ T2947] ? do_syscall_64+0x26/0x680 [ 2643.032560][ T2947] __x64_sys_write+0x73/0xb0 [ 2643.037164][ T2947] do_syscall_64+0xfd/0x680 [ 2643.041681][ T2947] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2643.047579][ T2947] RIP: 0033:0x459279 [ 2643.051584][ T2947] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2643.071202][ T2947] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2643.079632][ T2947] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2643.087614][ T2947] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2643.095602][ T2947] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2643.103586][ T2947] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2643.111566][ T2947] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a27, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:46 executing program 0 (fault-call:3 fault-nth:21): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ff, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000080)) 04:09:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:46 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x3457f219238da6b1, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x1800000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a28, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:46 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000100)) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="0200"/16, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="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"], 0x48}}, 0x0) 04:09:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="d966e788350beec61e06eee9e68e7cafddaa8a0182e8f57a7ae2be103ddb999b215b35dfcc74e1b5cff044035dddc007654e5378f4ba6c237948b640b188dd8610e27df2"], 0x2) r2 = syz_open_dev$cec(&(0x7f0000000280)='/dev/cec#\x00', 0x3, 0x2) ioctl$BLKRRPART(r2, 0x125f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x6040, 0x0) get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0x9218, &(0x7f0000ff9000/0x4000)=nil, 0x1) getsockopt$inet6_opts(r3, 0x29, 0x3f, &(0x7f0000000080)=""/134, &(0x7f00000001c0)=0x86) close(r1) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f00000002c0)={0x0, 0x3}) 04:09:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x4000000000000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2643.416779][ T2976] FAULT_INJECTION: forcing a failure. [ 2643.416779][ T2976] name failslab, interval 1, probability 0, space 0, times 0 [ 2643.483661][ T2976] CPU: 1 PID: 2976 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2643.491521][ T2976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2643.501596][ T2976] Call Trace: [ 2643.504909][ T2976] dump_stack+0x172/0x1f0 [ 2643.509265][ T2976] should_fail.cold+0xa/0x15 [ 2643.513880][ T2976] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2643.519707][ T2976] ? ___might_sleep+0x163/0x280 [ 2643.524578][ T2976] __should_failslab+0x121/0x190 [ 2643.529546][ T2976] should_failslab+0x9/0x14 [ 2643.534068][ T2976] kmem_cache_alloc+0x2af/0x6f0 [ 2643.538942][ T2976] ? lookup_one_len+0x10e/0x1a0 [ 2643.543809][ T2976] alloc_inode+0x16f/0x1e0 [ 2643.548268][ T2976] new_inode_pseudo+0x19/0xf0 [ 2643.552956][ T2976] new_inode+0x1f/0x40 [ 2643.557040][ T2976] debugfs_get_inode+0x1a/0x130 [ 2643.561905][ T2976] debugfs_create_dir+0x7a/0x3a0 [ 2643.566864][ T2976] hci_register_dev+0x299/0x860 [ 2643.571732][ T2976] __vhci_create_device+0x2d0/0x5a0 [ 2643.576946][ T2976] vhci_write+0x2d0/0x470 [ 2643.581290][ T2976] new_sync_write+0x4d3/0x770 [ 2643.585983][ T2976] ? new_sync_read+0x800/0x800 [ 2643.590763][ T2976] ? __fget+0x381/0x550 [ 2643.594937][ T2976] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2643.601190][ T2976] ? security_file_permission+0x8f/0x380 [ 2643.606842][ T2976] __vfs_write+0xe1/0x110 [ 2643.611186][ T2976] vfs_write+0x20c/0x580 [ 2643.615445][ T2976] ksys_write+0x14f/0x290 [ 2643.619790][ T2976] ? __ia32_sys_read+0xb0/0xb0 [ 2643.624569][ T2976] ? do_syscall_64+0x26/0x680 04:09:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a29, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1008008916, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) [ 2643.629274][ T2976] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2643.635350][ T2976] ? do_syscall_64+0x26/0x680 [ 2643.640046][ T2976] __x64_sys_write+0x73/0xb0 [ 2643.644652][ T2976] do_syscall_64+0xfd/0x680 [ 2643.649173][ T2976] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2643.655065][ T2976] RIP: 0033:0x459279 [ 2643.655081][ T2976] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2643.655088][ T2976] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2643.655104][ T2976] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2643.655117][ T2976] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2643.655126][ T2976] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2643.655134][ T2976] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2643.655143][ T2976] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:47 executing program 0 (fault-call:3 fault-nth:22): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:47 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"], 0x80}}, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f00000000c0)=0x2) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a2a, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0xffffffff00000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="cf8b761ad5e27b594d9a877d39f5c1f7a743dfea70dfbdb8eb408a6fbaaac351fe34c47fbfd1ec1581ab13796e358d1c48beb4ea3db5c5d5522f5067e3d900c7991954a950363ad130169f6b205b886dd5558946c804e94f85a53ea8fa0f692f33a142cee70b7d5ab24c3f81f6b74c9d643929ef3ca4c21858e9fec3fe03711de65b30a74643e83ad8bdc6976204e494ab9c903380675dd3fe54df59d1b06054c9c521631c23b07917315f5f7b471bbd9442224082a44c91e4db"], 0x2) socket$bt_hidp(0x1f, 0x3, 0x6) close(r1) 04:09:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a2b, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2643.950330][ T3004] FAULT_INJECTION: forcing a failure. [ 2643.950330][ T3004] name failslab, interval 1, probability 0, space 0, times 0 04:09:47 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) fcntl$setflags(r0, 0x2, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) r2 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x2dd0, 0x10001) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000640)={0x0, 0x8000, 0x5, 0x8, 0x8, 0x541240cf}, &(0x7f0000000680)=0x14) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000006c0)={r3, 0x9}, &(0x7f0000000700)=0x8) r4 = syz_open_dev$midi(&(0x7f0000000540)='/dev/midi#\x00', 0x0, 0x40000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000480)={0x0, 0x21}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000500)=@assoc_value={r5, 0x6}, 0x8) r6 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x41) getrandom(&(0x7f0000000600)=""/33, 0x21, 0x3) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x8f, 0x30}, &(0x7f0000000100)=0xc) connect(r4, &(0x7f0000000580)=@ethernet={0x306, @local}, 0x80) setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r7, 0x8001}, 0x8) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="02000000000000000000130000cf3700", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES16=r6, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ddcca2880e6a85f27af031"], 0x6}, 0x1, 0x0, 0x0, 0x8000000}, 0x6885d832a4ca74b) 04:09:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) bind$bt_sco(r2, &(0x7f0000000080)={0x1f, {0x4a5, 0x9, 0x1000, 0x6, 0xcd5, 0x10000}}, 0x8) [ 2644.034336][ T3004] CPU: 0 PID: 3004 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2644.042201][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2644.042209][ T3004] Call Trace: [ 2644.042240][ T3004] dump_stack+0x172/0x1f0 [ 2644.042265][ T3004] should_fail.cold+0xa/0x15 [ 2644.042287][ T3004] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2644.042310][ T3004] ? ___might_sleep+0x163/0x280 [ 2644.042334][ T3004] __should_failslab+0x121/0x190 [ 2644.042363][ T3004] should_failslab+0x9/0x14 [ 2644.080279][ T3004] __kmalloc_track_caller+0x2d5/0x740 [ 2644.080304][ T3004] ? __d_instantiate+0x383/0x470 [ 2644.095129][ T3004] ? find_held_lock+0x35/0x130 [ 2644.099920][ T3004] ? kstrdup_const+0x66/0x80 [ 2644.104535][ T3004] kstrdup+0x3a/0x70 [ 2644.104554][ T3004] kstrdup_const+0x66/0x80 [ 2644.104579][ T3004] kvasprintf_const+0x10e/0x190 [ 2644.112901][ T3004] kobject_set_name_vargs+0x5b/0x150 [ 2644.112920][ T3004] dev_set_name+0xbb/0xf0 [ 2644.112935][ T3004] ? device_initialize+0x440/0x440 [ 2644.112953][ T3004] ? kasan_check_write+0x14/0x20 [ 2644.112975][ T3004] ? up_write+0xbe/0x1e0 [ 2644.141723][ T3004] hci_register_dev+0x2e0/0x860 [ 2644.146601][ T3004] __vhci_create_device+0x2d0/0x5a0 [ 2644.151824][ T3004] vhci_write+0x2d0/0x470 [ 2644.156175][ T3004] new_sync_write+0x4d3/0x770 [ 2644.160866][ T3004] ? new_sync_read+0x800/0x800 [ 2644.165656][ T3004] ? __fget+0x381/0x550 [ 2644.165681][ T3004] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2644.165699][ T3004] ? security_file_permission+0x8f/0x380 [ 2644.165715][ T3004] __vfs_write+0xe1/0x110 [ 2644.165732][ T3004] vfs_write+0x20c/0x580 [ 2644.165750][ T3004] ksys_write+0x14f/0x290 [ 2644.165769][ T3004] ? __ia32_sys_read+0xb0/0xb0 [ 2644.181794][ T3004] ? do_syscall_64+0x26/0x680 [ 2644.181812][ T3004] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2644.181825][ T3004] ? do_syscall_64+0x26/0x680 [ 2644.181844][ T3004] __x64_sys_write+0x73/0xb0 [ 2644.181861][ T3004] do_syscall_64+0xfd/0x680 [ 2644.181888][ T3004] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2644.194781][ T3004] RIP: 0033:0x459279 [ 2644.194800][ T3004] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2644.194808][ T3004] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2644.194831][ T3004] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2644.214970][ T3004] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 04:09:47 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="0200"/16, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="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"], 0x48}}, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xe) [ 2644.214980][ T3004] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2644.214988][ T3004] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2644.214996][ T3004] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 [ 2644.299177][ T3004] Bluetooth: Can't register HCI device 04:09:47 executing program 0 (fault-call:3 fault-nth:23): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a2c, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:47 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000feffffff0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c15591e499b52eecd65030195393e"], 0x80}}, 0x0) recvmmsg(r0, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/147, 0x93}, {&(0x7f00000000c0)=""/101, 0x65}], 0x2, &(0x7f0000000540)=""/170, 0xaa}, 0xffffffff00000000}, {{&(0x7f0000000600)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000000240)=""/58, 0x3a}], 0x2}, 0x3}, {{&(0x7f00000006c0)=@isdn, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/18, 0x12}, {&(0x7f0000001780)=""/87, 0x57}, {&(0x7f0000001800)=""/239, 0xef}, {&(0x7f0000001900)=""/94, 0x5e}, {&(0x7f0000001980)=""/179, 0xb3}, {&(0x7f0000001a40)=""/96, 0x60}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x8, &(0x7f0000002b40)=""/122, 0x7a}, 0x2}, {{&(0x7f0000002bc0)=@nfc, 0x80, &(0x7f0000003000)=[{&(0x7f0000002c40)=""/148, 0x94}, {&(0x7f0000002d00)=""/187, 0xbb}, {&(0x7f0000002dc0)=""/228, 0xe4}, {&(0x7f0000002ec0)=""/217, 0xd9}, {&(0x7f0000002fc0)=""/5, 0x5}], 0x5, &(0x7f0000003080)=""/117, 0x75}, 0x4}, {{&(0x7f0000003100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003180)=""/184, 0xb8}, {&(0x7f0000003240)=""/178, 0xb2}, {&(0x7f0000003300)=""/104, 0x68}, {&(0x7f0000003380)=""/20, 0x14}], 0x4}, 0x603}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000003400)=""/86, 0x56}, {&(0x7f0000003480)=""/142, 0x8e}], 0x2, &(0x7f0000003580)=""/168, 0xa8}, 0x8}, {{&(0x7f0000003640)=@tipc=@id, 0x80, &(0x7f0000004b00)=[{&(0x7f00000036c0)=""/29, 0x1d}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/180, 0xb4}, {&(0x7f00000047c0)=""/240, 0xf0}, {&(0x7f00000048c0)=""/119, 0x77}, {&(0x7f0000004940)=""/83, 0x53}, {&(0x7f00000049c0)=""/215, 0xd7}, {&(0x7f0000004ac0)=""/40, 0x28}], 0x8, &(0x7f0000004b80)}, 0x5}, {{0x0, 0x0, &(0x7f0000005e80)=[{&(0x7f0000004bc0)=""/170, 0xaa}, {&(0x7f0000004c80)=""/138, 0x8a}, {&(0x7f0000004d40)=""/46, 0x2e}, {&(0x7f0000004d80)=""/102, 0x66}, {&(0x7f0000004e00)=""/4096, 0x1000}, {&(0x7f0000005e00)=""/63, 0x3f}, {&(0x7f0000005e40)}], 0x7, &(0x7f0000005f00)=""/101, 0x65}, 0x6eb7}, {{&(0x7f0000005f80)=@hci, 0x80, &(0x7f0000006140)=[{&(0x7f0000006000)=""/115, 0x73}, {&(0x7f0000006080)=""/177, 0xb1}], 0x2, &(0x7f0000006180)=""/115, 0x73}, 0x3}], 0x9, 0x140, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000006440), 0x4) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000006480)=ANY=[@ANYBLOB="0200"/16, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ddc4a2880e6a4da85d7c8ecbaca48ba0f12a789b181ed495608f6b600a92d0a9169634904efe2cb2c0ed"], 0x48}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 04:09:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a2d, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2644.526003][ T3030] FAULT_INJECTION: forcing a failure. [ 2644.526003][ T3030] name failslab, interval 1, probability 0, space 0, times 0 [ 2644.597787][ T3030] CPU: 1 PID: 3030 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2644.605732][ T3030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2644.615812][ T3030] Call Trace: [ 2644.619133][ T3030] dump_stack+0x172/0x1f0 [ 2644.623661][ T3030] should_fail.cold+0xa/0x15 [ 2644.628274][ T3030] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2644.634137][ T3030] ? ___might_sleep+0x163/0x280 [ 2644.639000][ T3030] __should_failslab+0x121/0x190 [ 2644.643959][ T3030] should_failslab+0x9/0x14 [ 2644.648480][ T3030] kmem_cache_alloc+0x2af/0x6f0 [ 2644.653346][ T3030] ? kasan_check_write+0x14/0x20 [ 2644.658305][ T3030] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 2644.663878][ T3030] __kernfs_new_node+0xf0/0x6c0 [ 2644.668760][ T3030] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2644.674234][ T3030] ? __lock_acquire+0x54f/0x5490 [ 2644.679192][ T3030] ? mutex_unlock+0xd/0x10 [ 2644.683627][ T3030] ? kernfs_activate+0x192/0x1f0 [ 2644.688598][ T3030] kernfs_new_node+0x96/0x120 [ 2644.688621][ T3030] __kernfs_create_file+0x51/0x340 04:09:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:47 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x301081) write$P9_RFSYNC(r0, &(0x7f0000000080)={0x7, 0x33, 0x1}, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r2) [ 2644.688641][ T3030] sysfs_add_file_mode_ns+0x222/0x560 [ 2644.688664][ T3030] sysfs_create_file_ns+0x13d/0x1d0 [ 2644.698520][ T3030] ? acpi_unbind_one+0x4a0/0x4a0 [ 2644.698548][ T3030] ? sysfs_add_file_mode_ns+0x560/0x560 [ 2644.709107][ T3030] ? up_read+0xc4/0x200 [ 2644.709131][ T3030] ? dev_fwnode+0xd/0x40 [ 2644.709152][ T3030] device_create_file+0xf6/0x1e0 [ 2644.709171][ T3030] device_add+0x5a3/0x17a0 [ 2644.709192][ T3030] ? get_device_parent.isra.0+0x560/0x560 [ 2644.709214][ T3030] ? start_creating+0x163/0x1e0 [ 2644.719702][ T3030] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2644.719722][ T3030] hci_register_dev+0x2e8/0x860 [ 2644.719747][ T3030] __vhci_create_device+0x2d0/0x5a0 [ 2644.719767][ T3030] vhci_write+0x2d0/0x470 [ 2644.719786][ T3030] new_sync_write+0x4d3/0x770 [ 2644.719802][ T3030] ? new_sync_read+0x800/0x800 [ 2644.719822][ T3030] ? __fget+0x381/0x550 [ 2644.728207][ T3030] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2644.728227][ T3030] ? security_file_permission+0x8f/0x380 [ 2644.728247][ T3030] __vfs_write+0xe1/0x110 [ 2644.728265][ T3030] vfs_write+0x20c/0x580 [ 2644.728284][ T3030] ksys_write+0x14f/0x290 [ 2644.728307][ T3030] ? __ia32_sys_read+0xb0/0xb0 [ 2644.737654][ T3030] ? do_syscall_64+0x26/0x680 [ 2644.737673][ T3030] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2644.737687][ T3030] ? do_syscall_64+0x26/0x680 [ 2644.737708][ T3030] __x64_sys_write+0x73/0xb0 [ 2644.737725][ T3030] do_syscall_64+0xfd/0x680 [ 2644.737744][ T3030] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2644.737756][ T3030] RIP: 0033:0x459279 04:09:48 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x2, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0xffffffffffffff4a}}, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x101000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000480), r3}}, 0x18) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2644.737776][ T3030] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2644.748330][ T3030] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2644.748346][ T3030] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2644.748355][ T3030] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 04:09:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2644.748364][ T3030] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2644.748373][ T3030] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2644.748383][ T3030] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a2e, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:48 executing program 0 (fault-call:3 fault-nth:24): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) [ 2644.953595][ T3030] Bluetooth: Can't register HCI device 04:09:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:48 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1d, r1}, 0x15, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {r2, r3/1000+10000}, {}, {0x0, 0x5}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x40041) [ 2645.090582][ T3056] FAULT_INJECTION: forcing a failure. [ 2645.090582][ T3056] name failslab, interval 1, probability 0, space 0, times 0 [ 2645.124704][ T3056] CPU: 0 PID: 3056 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2645.132558][ T3056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2645.142621][ T3056] Call Trace: [ 2645.142653][ T3056] dump_stack+0x172/0x1f0 [ 2645.142677][ T3056] should_fail.cold+0xa/0x15 [ 2645.142700][ T3056] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2645.142727][ T3056] ? ___might_sleep+0x163/0x280 [ 2645.154912][ T3056] __should_failslab+0x121/0x190 [ 2645.154933][ T3056] should_failslab+0x9/0x14 [ 2645.154953][ T3056] kmem_cache_alloc+0x2af/0x6f0 [ 2645.179965][ T3056] ? memcpy+0x46/0x50 [ 2645.183971][ T3056] ? kstrdup+0x5a/0x70 [ 2645.188059][ T3056] __kernfs_new_node+0xf0/0x6c0 [ 2645.192952][ T3056] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2645.198435][ T3056] ? debug_smp_processor_id+0x3c/0x280 [ 2645.203927][ T3056] ? tick_nohz_tick_stopped+0x1a/0x90 [ 2645.209317][ T3056] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2645.215623][ T3056] ? __irq_work_queue_local+0xaf/0x170 [ 2645.221112][ T3056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2645.227370][ T3056] ? irq_work_queue+0x30/0x90 [ 2645.232066][ T3056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2645.238338][ T3056] ? wake_up_klogd+0x99/0xd0 [ 2645.242963][ T3056] kernfs_new_node+0x96/0x120 [ 2645.247675][ T3056] kernfs_create_dir_ns+0x52/0x160 [ 2645.252810][ T3056] sysfs_create_dir_ns+0x131/0x2a0 [ 2645.257950][ T3056] ? sysfs_create_mount_point+0xa0/0xa0 [ 2645.263524][ T3056] ? class_dir_child_ns_type+0xd/0x60 [ 2645.268929][ T3056] kobject_add_internal.cold+0x116/0x662 [ 2645.274574][ T3056] kobject_add+0x150/0x1c0 [ 2645.278991][ T3056] ? kset_create_and_add+0x1a0/0x1a0 [ 2645.279013][ T3056] ? kasan_check_read+0x11/0x20 [ 2645.279033][ T3056] ? mutex_unlock+0xd/0x10 [ 2645.279055][ T3056] device_add+0x3b7/0x17a0 [ 2645.289186][ T3056] ? get_device_parent.isra.0+0x560/0x560 [ 2645.289204][ T3056] ? start_creating+0x163/0x1e0 [ 2645.289228][ T3056] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2645.314833][ T3056] hci_register_dev+0x2e8/0x860 [ 2645.319720][ T3056] __vhci_create_device+0x2d0/0x5a0 [ 2645.324954][ T3056] vhci_write+0x2d0/0x470 [ 2645.329312][ T3056] new_sync_write+0x4d3/0x770 [ 2645.334010][ T3056] ? new_sync_read+0x800/0x800 [ 2645.338798][ T3056] ? __fget+0x381/0x550 [ 2645.342974][ T3056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2645.349241][ T3056] ? security_file_permission+0x8f/0x380 [ 2645.354897][ T3056] __vfs_write+0xe1/0x110 [ 2645.359246][ T3056] vfs_write+0x20c/0x580 [ 2645.363508][ T3056] ksys_write+0x14f/0x290 [ 2645.367855][ T3056] ? __ia32_sys_read+0xb0/0xb0 [ 2645.372636][ T3056] ? do_syscall_64+0x26/0x680 [ 2645.377325][ T3056] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2645.383407][ T3056] ? do_syscall_64+0x26/0x680 [ 2645.388117][ T3056] __x64_sys_write+0x73/0xb0 [ 2645.392736][ T3056] do_syscall_64+0xfd/0x680 [ 2645.397265][ T3056] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2645.403173][ T3056] RIP: 0033:0x459279 [ 2645.407087][ T3056] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2645.426714][ T3056] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 04:09:48 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x200000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x400400, 0x0) write$P9_RREMOVE(r2, &(0x7f0000000040)={0xfffffffffffffe24, 0x7b, 0x800000000002}, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@random={'system.', 'posix_acl_access\x00'}) 04:09:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a2f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2645.435144][ T3056] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2645.443137][ T3056] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2645.451300][ T3056] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2645.459284][ T3056] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2645.467282][ T3056] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="ff81d2906161e7a1e3ec3461f6399043c2e25422c41934fbae559d9c2d79327229fab2e3a0ff01e02edadbf176e54ec061dd66ed6a940cedd372c3486689e3331579d1f32ac4316c3c117cd337e96e"], 0x2) close(r1) 04:09:48 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000001c0)=0xc) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000240)=[0xffffffffffffffff]) fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000580)=[0x0, 0xee00]) getresgid(&(0x7f00000005c0)=0x0, &(0x7f0000000600), &(0x7f0000000640)) getresgid(&(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700)) r9 = getegid() stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000800)={{}, {0x1, 0x1}, [{0x2, 0x4, r2}], {0x4, 0x7}, [{0x8, 0x1, r3}, {0x8, 0x4, r4}, {0x8, 0x4, r5}, {0x8, 0x0, r6}, {0x8, 0x1, r7}, {0x8, 0x0, r8}, {0x8, 0x5, r9}, {0x8, 0x3, r10}], {0x10, 0x4}, {0x20, 0x6}}, 0x6c, 0x1) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2645.552044][ T3056] kobject_add_internal failed for hci1 (error: -12 parent: bluetooth) 04:09:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a30, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:49 executing program 0 (fault-call:3 fault-nth:25): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:49 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1000, 0x101000) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000000c0)=0x401, 0x4) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000100)=0x1) 04:09:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a31, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0101"], 0x2) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="74c1d42532e201914e54afd9d81f5e84", 0x10) close(r1) [ 2645.824356][ T3056] Bluetooth: Can't register HCI device 04:09:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="dc85"], 0x2) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x100, 0x0) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000080)=0xffffffffffff9839) close(r0) 04:09:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a32, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:49 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000240)=@caif=@dgm={0x25, 0x6f9d, 0x6}, 0xfffffffffffffe14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="01000000feffffff0000000000000000487a22c7f56fb90d668ce69e5549f73bcd9488db151196c26a177d0294cab47d57f0a283f4f98fb8ca7f05c12d4ce5265b8babfa9a7376a9fd016cb672384f78ebc0d916337f59fc5a13639ba2df0bbb1fd9a9c46475de1b44", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22808c591e499b52eecd6503ec94393e5255adf4a1d87ac4f9f1d5a715242df1fd29f8d21d3aec026992ec1fc2835e73f3284d4bcbedcf72f7f65542dd2540f38a6345d2fda39a58a3283b2fe11a27186f277b3e233484154daf90a50b10983a582421cd5c9013ed129e54c8041c65fee47f6e1fed2050be4e7520d2aba2acb167bc3348448705bb1d82d30f3837ff0ff78708f8c05382436b96e6f0cf2ccdf34ff133d22c0221320b66c23bbc425bcef70bfc874b16"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02000000f4ffffffffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ddc4a2880e6a85f287e1bb"], 0x48}}, 0x0) [ 2646.029204][ T3106] FAULT_INJECTION: forcing a failure. [ 2646.029204][ T3106] name failslab, interval 1, probability 0, space 0, times 0 [ 2646.125414][ T3106] CPU: 1 PID: 3106 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2646.133279][ T3106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2646.143371][ T3106] Call Trace: [ 2646.146686][ T3106] dump_stack+0x172/0x1f0 [ 2646.151046][ T3106] should_fail.cold+0xa/0x15 [ 2646.155657][ T3106] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2646.161478][ T3106] ? ___might_sleep+0x163/0x280 [ 2646.166345][ T3106] __should_failslab+0x121/0x190 [ 2646.171384][ T3106] should_failslab+0x9/0x14 04:09:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2646.175900][ T3106] __kmalloc_track_caller+0x2d5/0x740 [ 2646.181282][ T3106] ? console_unlock+0x689/0xec0 [ 2646.186143][ T3106] ? find_held_lock+0x35/0x130 [ 2646.190920][ T3106] ? kstrdup_const+0x66/0x80 [ 2646.195527][ T3106] kstrdup+0x3a/0x70 [ 2646.199436][ T3106] kstrdup_const+0x66/0x80 [ 2646.203866][ T3106] __kernfs_new_node+0xb1/0x6c0 [ 2646.208733][ T3106] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2646.214212][ T3106] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2646.220463][ T3106] ? irq_work_claim+0x98/0xc0 [ 2646.225151][ T3106] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2646.225168][ T3106] ? irq_work_queue+0x30/0x90 [ 2646.225184][ T3106] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2646.225207][ T3106] ? wake_up_klogd+0x99/0xd0 [ 2646.236145][ T3106] kernfs_new_node+0x96/0x120 [ 2646.236164][ T3106] kernfs_create_dir_ns+0x52/0x160 [ 2646.236182][ T3106] sysfs_create_dir_ns+0x131/0x2a0 [ 2646.236198][ T3106] ? sysfs_create_mount_point+0xa0/0xa0 [ 2646.236222][ T3106] ? class_dir_child_ns_type+0xd/0x60 [ 2646.236241][ T3106] kobject_add_internal.cold+0x116/0x662 [ 2646.236258][ T3106] kobject_add+0x150/0x1c0 [ 2646.236272][ T3106] ? kset_create_and_add+0x1a0/0x1a0 [ 2646.236297][ T3106] ? mutex_unlock+0xd/0x10 [ 2646.236322][ T3106] device_add+0x3b7/0x17a0 [ 2646.247159][ T3106] ? get_device_parent.isra.0+0x560/0x560 [ 2646.256924][ T3106] ? start_creating+0x163/0x1e0 [ 2646.256945][ T3106] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2646.256971][ T3106] hci_register_dev+0x2e8/0x860 [ 2646.318789][ T3106] __vhci_create_device+0x2d0/0x5a0 [ 2646.324011][ T3106] vhci_write+0x2d0/0x470 [ 2646.328395][ T3106] new_sync_write+0x4d3/0x770 [ 2646.333093][ T3106] ? new_sync_read+0x800/0x800 [ 2646.337878][ T3106] ? __fget+0x381/0x550 [ 2646.342054][ T3106] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2646.348309][ T3106] ? security_file_permission+0x8f/0x380 [ 2646.353970][ T3106] __vfs_write+0xe1/0x110 [ 2646.358318][ T3106] vfs_write+0x20c/0x580 [ 2646.362579][ T3106] ksys_write+0x14f/0x290 [ 2646.366923][ T3106] ? __ia32_sys_read+0xb0/0xb0 [ 2646.371788][ T3106] ? do_syscall_64+0x26/0x680 [ 2646.376486][ T3106] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2646.382577][ T3106] ? do_syscall_64+0x26/0x680 [ 2646.387319][ T3106] __x64_sys_write+0x73/0xb0 [ 2646.392005][ T3106] do_syscall_64+0xfd/0x680 [ 2646.396713][ T3106] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2646.402666][ T3106] RIP: 0033:0x459279 [ 2646.406632][ T3106] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2646.427505][ T3106] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2646.436141][ T3106] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2646.444150][ T3106] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2646.452183][ T3106] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2646.460172][ T3106] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2646.468160][ T3106] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 [ 2646.498618][ T3106] kobject_add_internal failed for hci1 (error: -12 parent: bluetooth) [ 2646.517034][ T3106] Bluetooth: Can't register HCI device 04:09:49 executing program 0 (fault-call:3 fault-nth:26): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:49 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000240)=0xc) ptrace$getenv(0x4201, r2, 0xffffffff, &(0x7f0000000640)) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) r3 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x800, 0x0, 0x7fff000000, 0x6, 0x81}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000540)={r4, 0xdc, "04081defad7160388fd0b96a1290fda4d7768e1089c904b6209c3a418b250c03b55471a720fbc48fc27842440246c45aefb6ebc6e7571c8194a566342aadbb3989b3b96da01a2a6ea367f86fd74e6fbfef6860be45baf8af62720f8aa76c1b6a2550c79cc409bb9d46c76cbbd4d86bfdbd45a9f77a4838f789a90a12d25459e7ff7f516a1466c1b58b7d8830e93a7038f2233c658f91de60bb8609811e34f42b7577ff962132d92e2f17b89c25ea2f0ae0c8e1f271e9c3fc0cac070d337bb498ecfba7ae43245754b64750529854e914cd18898e2844e4eaa3a93172"}, &(0x7f0000000100)=0xe4) 04:09:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a33, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="ff8197a1b3246bb04e6e93ebd1081057acf0398b2229f9a8c107a26b8a4dd15deb151be582a2e70e79844fee9aa674aaacbd8186d8a738af12db22a25e92d7dffee0d6d1e022"], 0x2) close(r1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)={0x2, 0x0, [{0x41aa1cd4, 0x4, 0x0, 0x0, @msi={0x8, 0xdd, 0x9c}}, {0x5, 0x4, 0x0, 0x0, @sint={0x6a0, 0x8}}]}) signalfd(r2, &(0x7f0000000140)={0x6}, 0x8) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000100)) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x6d, 0x7, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2}) 04:09:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a34, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2646.721434][ T3143] FAULT_INJECTION: forcing a failure. [ 2646.721434][ T3143] name failslab, interval 1, probability 0, space 0, times 0 04:09:49 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0200"/16, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000e7ff00000000000000ba056c0d64e5c03ed7a28885f2"], 0x48}}, 0x0) 04:09:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2646.801935][ T3143] CPU: 1 PID: 3143 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2646.809795][ T3143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2646.819867][ T3143] Call Trace: [ 2646.823360][ T3143] dump_stack+0x172/0x1f0 [ 2646.827718][ T3143] should_fail.cold+0xa/0x15 [ 2646.832338][ T3143] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2646.838165][ T3143] ? ___might_sleep+0x163/0x280 [ 2646.843037][ T3143] __should_failslab+0x121/0x190 04:09:50 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) timer_create(0x5, &(0x7f0000000040)={0x0, 0x20, 0x0, @thr={&(0x7f0000000480)="700c57721f0f2cdf213db2283a4362e5bb49813ac165606dacb10efede60a77b3cb23f5a939171bd19e16ed9d2c563ae77391c5bc324101fd00d81cb1acc1379fb6f284d7940f56affecf96317795e3bf83c48768d38a9ee9dcb9d144a9b01b773ccbdd8babd80346154b415c14b9d39b659c15d26f2acddd3c8a28d61992657e67d18175add32c2da308b05036846df4f3acc0762cd1cce1bb82b256c97f2a00b6708ea2b41d28e3f4d936d8ba66d6eecc531fd7da71f7cd93937e2c9219b51cb6fc5f6e4fcc5296dcba355289ac30024ae4e8c3c63c4dbbb62924a505e71800ea4d5a7d2a59db055", &(0x7f0000000580)="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"}}, &(0x7f00000000c0)=0x0) timer_delete(r2) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) [ 2646.847990][ T3143] should_failslab+0x9/0x14 [ 2646.852506][ T3143] __kmalloc_track_caller+0x2d5/0x740 [ 2646.857891][ T3143] ? console_unlock+0x689/0xec0 [ 2646.862764][ T3143] ? find_held_lock+0x35/0x130 [ 2646.867546][ T3143] ? kstrdup_const+0x66/0x80 [ 2646.872166][ T3143] kstrdup+0x3a/0x70 [ 2646.876073][ T3143] kstrdup_const+0x66/0x80 [ 2646.880499][ T3143] __kernfs_new_node+0xb1/0x6c0 [ 2646.885375][ T3143] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2646.890859][ T3143] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2646.897128][ T3143] ? irq_work_claim+0x98/0xc0 [ 2646.901834][ T3143] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2646.908104][ T3143] ? irq_work_queue+0x30/0x90 [ 2646.912810][ T3143] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2646.919073][ T3143] ? wake_up_klogd+0x99/0xd0 [ 2646.923697][ T3143] kernfs_new_node+0x96/0x120 [ 2646.928414][ T3143] kernfs_create_dir_ns+0x52/0x160 [ 2646.933606][ T3143] sysfs_create_dir_ns+0x131/0x2a0 [ 2646.938743][ T3143] ? sysfs_create_mount_point+0xa0/0xa0 [ 2646.944325][ T3143] ? class_dir_child_ns_type+0xd/0x60 [ 2646.944346][ T3143] kobject_add_internal.cold+0x116/0x662 [ 2646.944364][ T3143] kobject_add+0x150/0x1c0 [ 2646.944377][ T3143] ? kset_create_and_add+0x1a0/0x1a0 [ 2646.944401][ T3143] ? mutex_unlock+0xd/0x10 [ 2646.944420][ T3143] device_add+0x3b7/0x17a0 [ 2646.944441][ T3143] ? get_device_parent.isra.0+0x560/0x560 [ 2646.944458][ T3143] ? start_creating+0x163/0x1e0 [ 2646.944482][ T3143] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2646.979945][ T3143] hci_register_dev+0x2e8/0x860 [ 2646.979973][ T3143] __vhci_create_device+0x2d0/0x5a0 [ 2646.979994][ T3143] vhci_write+0x2d0/0x470 [ 2647.005499][ T3143] new_sync_write+0x4d3/0x770 [ 2647.010195][ T3143] ? new_sync_read+0x800/0x800 [ 2647.014975][ T3143] ? __fget+0x381/0x550 [ 2647.014998][ T3143] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2647.015016][ T3143] ? security_file_permission+0x8f/0x380 [ 2647.015033][ T3143] __vfs_write+0xe1/0x110 [ 2647.015049][ T3143] vfs_write+0x20c/0x580 [ 2647.015066][ T3143] ksys_write+0x14f/0x290 [ 2647.015082][ T3143] ? __ia32_sys_read+0xb0/0xb0 [ 2647.015099][ T3143] ? do_syscall_64+0x26/0x680 [ 2647.015122][ T3143] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2647.035455][ T3143] ? do_syscall_64+0x26/0x680 [ 2647.035486][ T3143] __x64_sys_write+0x73/0xb0 [ 2647.044060][ T3143] do_syscall_64+0xfd/0x680 [ 2647.044080][ T3143] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2647.044091][ T3143] RIP: 0033:0x459279 [ 2647.044106][ T3143] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2647.044114][ T3143] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2647.044127][ T3143] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2647.044135][ T3143] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2647.044143][ T3143] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2647.044151][ T3143] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2647.044160][ T3143] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 [ 2647.064274][ T3143] kobject_add_internal failed for hci1 (error: -12 parent: bluetooth) [ 2647.095712][ T3143] Bluetooth: Can't register HCI device 04:09:50 executing program 0 (fault-call:3 fault-nth:27): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:50 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@random="35c333bcd37a"]}) 04:09:50 executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x90002, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="f681"], 0x2) close(r1) 04:09:50 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xc], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a35, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xd], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:50 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f00000000c0)=@can, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x400880, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000001c0)) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) syncfs(r0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a36, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:50 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) flock(r1, 0x8) [ 2647.361120][ T3178] FAULT_INJECTION: forcing a failure. [ 2647.361120][ T3178] name failslab, interval 1, probability 0, space 0, times 0 [ 2647.398370][ T3178] CPU: 1 PID: 3178 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2647.406239][ T3178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2647.406247][ T3178] Call Trace: [ 2647.406275][ T3178] dump_stack+0x172/0x1f0 [ 2647.406300][ T3178] should_fail.cold+0xa/0x15 [ 2647.406322][ T3178] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2647.406346][ T3178] ? ___might_sleep+0x163/0x280 [ 2647.406380][ T3178] __should_failslab+0x121/0x190 [ 2647.444192][ T3178] should_failslab+0x9/0x14 [ 2647.448710][ T3178] kmem_cache_alloc+0x2af/0x6f0 [ 2647.453595][ T3178] __kernfs_new_node+0xf0/0x6c0 04:09:50 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2647.458458][ T3178] ? kernfs_activate+0x192/0x1f0 [ 2647.463413][ T3178] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2647.468887][ T3178] ? kernfs_activate+0x192/0x1f0 [ 2647.473851][ T3178] ? lock_downgrade+0x880/0x880 [ 2647.478731][ T3178] ? mutex_trylock+0x1e0/0x1e0 [ 2647.483514][ T3178] ? lock_downgrade+0x880/0x880 [ 2647.488386][ T3178] kernfs_new_node+0x96/0x120 [ 2647.493090][ T3178] kernfs_create_dir_ns+0x52/0x160 [ 2647.498222][ T3178] internal_create_group+0x7f4/0xc40 [ 2647.498243][ T3178] ? mutex_unlock+0xd/0x10 [ 2647.498257][ T3178] ? kernfs_activate+0x192/0x1f0 [ 2647.498282][ T3178] ? remove_files.isra.0+0x190/0x190 [ 2647.518183][ T3178] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2647.518203][ T3178] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2647.518219][ T3178] ? kernfs_create_link+0x1cc/0x250 [ 2647.518241][ T3178] sysfs_create_group+0x20/0x30 [ 2647.540761][ T3178] dpm_sysfs_add+0x87/0x270 [ 2647.545288][ T3178] device_add+0x9df/0x17a0 [ 2647.549730][ T3178] ? get_device_parent.isra.0+0x560/0x560 [ 2647.555470][ T3178] ? start_creating+0x163/0x1e0 [ 2647.560335][ T3178] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2647.566603][ T3178] hci_register_dev+0x2e8/0x860 [ 2647.571490][ T3178] __vhci_create_device+0x2d0/0x5a0 [ 2647.576717][ T3178] vhci_write+0x2d0/0x470 [ 2647.581084][ T3178] new_sync_write+0x4d3/0x770 [ 2647.585782][ T3178] ? new_sync_read+0x800/0x800 [ 2647.590574][ T3178] ? __fget+0x381/0x550 [ 2647.594766][ T3178] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2647.601024][ T3178] ? security_file_permission+0x8f/0x380 [ 2647.606689][ T3178] __vfs_write+0xe1/0x110 [ 2647.611039][ T3178] vfs_write+0x20c/0x580 [ 2647.615302][ T3178] ksys_write+0x14f/0x290 [ 2647.615318][ T3178] ? __ia32_sys_read+0xb0/0xb0 [ 2647.615335][ T3178] ? do_syscall_64+0x26/0x680 [ 2647.615352][ T3178] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2647.615367][ T3178] ? do_syscall_64+0x26/0x680 [ 2647.615386][ T3178] __x64_sys_write+0x73/0xb0 [ 2647.615404][ T3178] do_syscall_64+0xfd/0x680 [ 2647.615421][ T3178] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2647.615440][ T3178] RIP: 0033:0x459279 [ 2647.624524][ T3178] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2647.624532][ T3178] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2647.624546][ T3178] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2647.624555][ T3178] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2647.624564][ T3178] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2647.624573][ T3178] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2647.624589][ T3178] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 [ 2647.765627][ T3178] Bluetooth: Can't register HCI device 04:09:51 executing program 0 (fault-call:3 fault-nth:28): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:51 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a37, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\xbcSQ\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:51 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) recvmmsg(r0, &(0x7f0000004fc0)=[{{&(0x7f0000000900)=@nfc, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000980)=""/183, 0xb7}, {&(0x7f0000000a40)=""/105, 0x69}, {&(0x7f0000000ac0)=""/176, 0xb0}], 0x3, &(0x7f0000000bc0)=""/2, 0x2}, 0x1}, {{&(0x7f0000000c00)=@nl, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c80)=""/186, 0xba}], 0x1, &(0x7f0000000d80)=""/190, 0xbe}, 0x5}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/7, 0x7}, {&(0x7f0000000e80)=""/114, 0x72}], 0x2, &(0x7f0000000f40)=""/115, 0x73}, 0x10001}, {{&(0x7f0000000fc0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001040)=""/12, 0xc}, {&(0x7f0000001080)=""/139, 0x8b}, {&(0x7f0000001140)=""/187, 0xbb}, {&(0x7f0000001200)}], 0x4, &(0x7f0000001280)=""/4096, 0x1000}, 0x81}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002280)=""/116, 0x74}, {&(0x7f0000002300)=""/91, 0x5b}, {&(0x7f0000002380)=""/147, 0x93}], 0x3}, 0x2}, {{&(0x7f0000002480)=@can, 0x80, &(0x7f0000003940)=[{&(0x7f0000002500)=""/104, 0x68}, {&(0x7f0000002580)=""/45, 0x2d}, {&(0x7f00000025c0)=""/146, 0x92}, {&(0x7f0000002680)=""/217, 0xd9}, {&(0x7f0000002780)=""/164, 0xa4}, {&(0x7f0000002840)=""/205, 0xcd}, {&(0x7f0000002940)=""/4096, 0x1000}], 0x7, &(0x7f00000039c0)=""/66, 0x42}, 0xba0}, {{&(0x7f0000003a40)=@x25={0x9, @remote}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000003ac0)=""/233, 0xe9}, {&(0x7f0000003bc0)=""/77, 0x4d}, {&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000004c40)=""/160, 0xa0}, {&(0x7f0000004d00)=""/238, 0xee}, {&(0x7f0000004e00)=""/36, 0x24}, {&(0x7f0000004e40)=""/119, 0x77}, {&(0x7f0000004ec0)=""/60, 0x3c}], 0x8, &(0x7f0000004f80)=""/55, 0x37}, 0x100000000}], 0x7, 0x2000, &(0x7f0000005180)={0x0, 0x989680}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', r1}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000feffffff0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02d030195393e00"/80], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r2}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) r3 = semget(0x1, 0x3, 0x2) semctl$IPC_INFO(r3, 0x2, 0x3, &(0x7f0000000640)=""/110) r4 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f0000000480)) 04:09:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a38, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2647.994319][ T3215] FAULT_INJECTION: forcing a failure. [ 2647.994319][ T3215] name failslab, interval 1, probability 0, space 0, times 0 [ 2648.057627][ T3215] CPU: 0 PID: 3215 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2648.065489][ T3215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2648.065497][ T3215] Call Trace: [ 2648.065527][ T3215] dump_stack+0x172/0x1f0 [ 2648.065553][ T3215] should_fail.cold+0xa/0x15 [ 2648.065579][ T3215] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2648.093668][ T3215] ? ___might_sleep+0x163/0x280 [ 2648.098537][ T3215] __should_failslab+0x121/0x190 [ 2648.098558][ T3215] should_failslab+0x9/0x14 [ 2648.098572][ T3215] kmem_cache_alloc+0x2af/0x6f0 [ 2648.098597][ T3215] __kernfs_new_node+0xf0/0x6c0 [ 2648.098617][ T3215] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2648.123192][ T3215] ? debug_smp_processor_id+0x3c/0x280 [ 2648.128678][ T3215] ? tick_nohz_tick_stopped+0x1a/0x90 [ 2648.134093][ T3215] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2648.140356][ T3215] ? __irq_work_queue_local+0xaf/0x170 [ 2648.145830][ T3215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2648.152102][ T3215] ? irq_work_queue+0x30/0x90 [ 2648.156798][ T3215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2648.163061][ T3215] ? wake_up_klogd+0x99/0xd0 [ 2648.167683][ T3215] kernfs_new_node+0x96/0x120 [ 2648.172379][ T3215] kernfs_create_dir_ns+0x52/0x160 [ 2648.177518][ T3215] sysfs_create_dir_ns+0x131/0x2a0 [ 2648.182650][ T3215] ? sysfs_create_mount_point+0xa0/0xa0 [ 2648.188230][ T3215] kobject_add_internal.cold+0x116/0x662 [ 2648.193886][ T3215] kobject_add+0x150/0x1c0 [ 2648.198317][ T3215] ? kset_create_and_add+0x1a0/0x1a0 [ 2648.203624][ T3215] ? get_device_parent.isra.0+0x34c/0x560 [ 2648.209365][ T3215] ? rcu_read_lock_sched_held+0x110/0x130 [ 2648.215105][ T3215] ? kmem_cache_alloc_trace+0x351/0x750 [ 2648.220673][ T3215] get_device_parent.isra.0+0x413/0x560 [ 2648.226245][ T3215] device_add+0x2df/0x17a0 [ 2648.230693][ T3215] ? get_device_parent.isra.0+0x560/0x560 [ 2648.236427][ T3215] ? up_write+0xbe/0x1e0 [ 2648.240691][ T3215] hci_register_dev+0x2e8/0x860 [ 2648.245565][ T3215] __vhci_create_device+0x2d0/0x5a0 [ 2648.250778][ T3215] vhci_write+0x2d0/0x470 [ 2648.255133][ T3215] new_sync_write+0x4d3/0x770 [ 2648.259820][ T3215] ? new_sync_read+0x800/0x800 [ 2648.264605][ T3215] ? __fget+0x381/0x550 [ 2648.268780][ T3215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2648.275055][ T3215] ? security_file_permission+0x8f/0x380 [ 2648.280820][ T3215] __vfs_write+0xe1/0x110 [ 2648.285218][ T3215] vfs_write+0x20c/0x580 [ 2648.289626][ T3215] ksys_write+0x14f/0x290 [ 2648.294015][ T3215] ? __ia32_sys_read+0xb0/0xb0 [ 2648.298851][ T3215] ? do_syscall_64+0x26/0x680 [ 2648.303675][ T3215] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2648.309796][ T3215] ? do_syscall_64+0x26/0x680 [ 2648.314549][ T3215] __x64_sys_write+0x73/0xb0 [ 2648.319318][ T3215] do_syscall_64+0xfd/0x680 [ 2648.324068][ T3215] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2648.330225][ T3215] RIP: 0033:0x459279 [ 2648.334174][ T3215] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2648.353811][ T3215] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2648.362371][ T3215] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2648.370654][ T3215] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2648.378773][ T3215] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2648.386801][ T3215] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2648.397223][ T3215] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a39, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00QS\xbc\xc0\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2648.465558][ T3215] kobject_add_internal failed for bluetooth (error: -12 parent: virtual) [ 2648.519093][ T3215] Bluetooth: Can't register HCI device 04:09:51 executing program 0 (fault-call:3 fault-nth:29): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x10], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="ff816725e290aa6607b498074dd2366ed39a55748c23b0bb11e801ecf75092330cdd9ca10846f0c0b65686a4c31708c175a7cf0b089be574b61663e0e2b64a80cefb2cf4f7824d80e94dda3c4fefa3f883ded0f4fc8c0ee7731c66ecdcf9e3ccbc9f85fc26fb88439417f4cce1c0dc000000000000000000"], 0x2) close(r1) 04:09:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a3a, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a3b, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2648.756428][ T3245] FAULT_INJECTION: forcing a failure. [ 2648.756428][ T3245] name failslab, interval 1, probability 0, space 0, times 0 [ 2648.833177][ T3245] CPU: 1 PID: 3245 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2648.841036][ T3245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2648.851124][ T3245] Call Trace: [ 2648.854442][ T3245] dump_stack+0x172/0x1f0 [ 2648.858797][ T3245] should_fail.cold+0xa/0x15 [ 2648.863408][ T3245] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2648.869229][ T3245] ? ___might_sleep+0x163/0x280 [ 2648.869253][ T3245] __should_failslab+0x121/0x190 [ 2648.869273][ T3245] should_failslab+0x9/0x14 [ 2648.869287][ T3245] kmem_cache_alloc+0x2af/0x6f0 [ 2648.869310][ T3245] ? mutex_unlock+0xd/0x10 [ 2648.879085][ T3245] __kernfs_new_node+0xf0/0x6c0 [ 2648.879106][ T3245] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2648.879125][ T3245] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2648.879141][ T3245] ? __kernfs_create_file+0x2a3/0x340 [ 2648.879159][ T3245] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 2648.879179][ T3245] ? find_held_lock+0x35/0x130 [ 2648.925710][ T3245] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 2648.931891][ T3245] ? kasan_check_write+0x14/0x20 [ 2648.936854][ T3245] kernfs_new_node+0x96/0x120 [ 2648.941564][ T3245] kernfs_create_link+0xd7/0x250 [ 2648.946537][ T3245] sysfs_do_create_link_sd.isra.0+0x90/0x140 [ 2648.952541][ T3245] sysfs_create_link+0x65/0xc0 [ 2648.957339][ T3245] device_add+0x635/0x17a0 [ 2648.961776][ T3245] ? get_device_parent.isra.0+0x560/0x560 [ 2648.967511][ T3245] ? start_creating+0x163/0x1e0 [ 2648.972376][ T3245] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2648.978633][ T3245] hci_register_dev+0x2e8/0x860 [ 2648.983503][ T3245] __vhci_create_device+0x2d0/0x5a0 [ 2648.988715][ T3245] vhci_write+0x2d0/0x470 [ 2648.993056][ T3245] new_sync_write+0x4d3/0x770 [ 2648.997740][ T3245] ? new_sync_read+0x800/0x800 [ 2649.002529][ T3245] ? __fget+0x381/0x550 [ 2649.006713][ T3245] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2649.012973][ T3245] ? security_file_permission+0x8f/0x380 [ 2649.018628][ T3245] __vfs_write+0xe1/0x110 [ 2649.022975][ T3245] vfs_write+0x20c/0x580 [ 2649.027234][ T3245] ksys_write+0x14f/0x290 [ 2649.031575][ T3245] ? __ia32_sys_read+0xb0/0xb0 [ 2649.036361][ T3245] ? do_syscall_64+0x26/0x680 [ 2649.041055][ T3245] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2649.047154][ T3245] ? do_syscall_64+0x26/0x680 [ 2649.052289][ T3245] __x64_sys_write+0x73/0xb0 [ 2649.056898][ T3245] do_syscall_64+0xfd/0x680 [ 2649.061423][ T3245] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2649.067326][ T3245] RIP: 0033:0x459279 [ 2649.071231][ T3245] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2649.090856][ T3245] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2649.099289][ T3245] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2649.107280][ T3245] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2649.115267][ T3245] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2649.123251][ T3245] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2649.131331][ T3245] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:52 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x40000000000, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) 04:09:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a3c, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:52 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2649.200690][ T3245] Bluetooth: Can't register HCI device 04:09:52 executing program 0 (fault-call:3 fault-nth:30): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x12], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a3d, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:52 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) dup2(r0, r0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="028b3bfc000000005cdd885e00000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ddc4a2880e6a85f2"], 0x48}}, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7, 0x40002) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) 04:09:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r2 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x0, 0x1) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, &(0x7f00000001c0)) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000100)={@empty}, &(0x7f0000000140)=0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x6, 0x7f, 0x1}) write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="18caa44ecde890a9ac52d90629b579fc82220fe143e6705da4a5fb89"], 0x2) 04:09:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a3e, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:52 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x13], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2649.418774][ T3284] FAULT_INJECTION: forcing a failure. [ 2649.418774][ T3284] name failslab, interval 1, probability 0, space 0, times 0 [ 2649.438016][ T3284] CPU: 0 PID: 3284 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2649.445886][ T3284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2649.456153][ T3284] Call Trace: [ 2649.459474][ T3284] dump_stack+0x172/0x1f0 [ 2649.463839][ T3284] should_fail.cold+0xa/0x15 [ 2649.463863][ T3284] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2649.463890][ T3284] ? ___might_sleep+0x163/0x280 [ 2649.479141][ T3284] __should_failslab+0x121/0x190 [ 2649.479163][ T3284] should_failslab+0x9/0x14 [ 2649.479176][ T3284] kmem_cache_alloc+0x2af/0x6f0 [ 2649.479196][ T3284] ? memcpy+0x46/0x50 [ 2649.497462][ T3284] ? kstrdup+0x5a/0x70 [ 2649.497484][ T3284] __kernfs_new_node+0xf0/0x6c0 [ 2649.497503][ T3284] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2649.497529][ T3284] ? wait_for_completion+0x440/0x440 [ 2649.506447][ T3284] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 2649.506466][ T3284] ? find_held_lock+0x35/0x130 [ 2649.506484][ T3284] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 2649.506502][ T3284] ? kasan_check_write+0x14/0x20 [ 2649.506523][ T3284] kernfs_new_node+0x96/0x120 [ 2649.523438][ T3284] kernfs_create_link+0xd7/0x250 [ 2649.523459][ T3284] sysfs_do_create_link_sd.isra.0+0x90/0x140 [ 2649.523477][ T3284] sysfs_create_link+0x65/0xc0 [ 2649.523495][ T3284] device_add+0x75c/0x17a0 [ 2649.523516][ T3284] ? get_device_parent.isra.0+0x560/0x560 [ 2649.523531][ T3284] ? start_creating+0x163/0x1e0 [ 2649.523549][ T3284] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2649.523569][ T3284] hci_register_dev+0x2e8/0x860 [ 2649.523594][ T3284] __vhci_create_device+0x2d0/0x5a0 [ 2649.534564][ T3284] vhci_write+0x2d0/0x470 [ 2649.534583][ T3284] new_sync_write+0x4d3/0x770 [ 2649.534598][ T3284] ? new_sync_read+0x800/0x800 [ 2649.534620][ T3284] ? __fget+0x381/0x550 [ 2649.534643][ T3284] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2649.534661][ T3284] ? security_file_permission+0x8f/0x380 [ 2649.534676][ T3284] __vfs_write+0xe1/0x110 [ 2649.534692][ T3284] vfs_write+0x20c/0x580 [ 2649.534712][ T3284] ksys_write+0x14f/0x290 [ 2649.634033][ T3284] ? __ia32_sys_read+0xb0/0xb0 [ 2649.638839][ T3284] ? do_syscall_64+0x26/0x680 [ 2649.654918][ T3284] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2649.661004][ T3284] ? do_syscall_64+0x26/0x680 [ 2649.665699][ T3284] __x64_sys_write+0x73/0xb0 [ 2649.670312][ T3284] do_syscall_64+0xfd/0x680 [ 2649.674838][ T3284] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2649.680737][ T3284] RIP: 0033:0x459279 [ 2649.684662][ T3284] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2649.705879][ T3284] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2649.714307][ T3284] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2649.722295][ T3284] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2649.730279][ T3284] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2649.738275][ T3284] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2649.746257][ T3284] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 [ 2649.773361][ T3284] Bluetooth: Can't register HCI device 04:09:53 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a3f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="05f43ed81623864f7d8352611394b39c70e1931a2301000000293389f9e3a5b1f282"], 0x2) close(r1) 04:09:53 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000780)=0xc) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000500)="ccbd2ebdff555e411df586b7c784153d02f1ae63abe62e6b901bb33f07a6e34d68d2ec24637d5999c8d15fd664dfa259ccd078f70ada72b8a2de495eaaa4d5a4530f571e22ff026e2ed9da07230d5c288da2aa88b92fb51a14a0d985a064dc5c875269034f4b95e550b4e485330e22f24375a6dfa183e032201a0b336beb6e79e52ff0065bfdc0481951a2b5ca1c6a153d9aba00cb0f2ba54000891ae11fb7bb421d6e78aee312cbdcad94556840b8fcb8c844d71925294e6729260c6f1c52552f344866fb2ba4968de4fb7c22f48f47b678c000e1f22d056dd0e866c4b20db099271ce25bff6046748ba3da9bad65af7b7b04e819", 0xf5, 0x5}, {&(0x7f0000000600)="3ba913f2289b35555a21d88bf9856c6d5ac2766f38a1c9c723afccd8f690f6a70493ba5fbfebb252b1fb15a7fca1bb137ff6054b72097464f8ceba64cb5209cc3d486db64a373a5eebf837d1e7aa91624aadf3ce4e632128c4a9d7b49303231fd097f071bb3ba7d0c2b2b2d22182846609d535b89c932c49ca1550e0e9cc4ca823a188314494991a2aa8c1ecc65a6e6846b93ba292a4d9859a06bffb0f711696051bd765d86a98f6a94ff1f4577fa6bcf30f5358f6ac2206e7f031a9d1123ec1a181892204a2fe266f80d494a12dc24c2e38ad0372a3653983793823c8ec1ec8b96cd98c497757678eb481d587a1ae", 0xef, 0x70000}, {&(0x7f00000001c0), 0x0, 0x100}], 0x358a0, &(0x7f00000007c0)={[{@noacl='noacl'}, {@statfs_percent={'statfs_percent', 0x3d, 0x2}}, {@quota_quantum={'quota_quantum', 0x3d, 0x9}}, {@quota_quantum={'quota_quantum', 0x3d, 0x9}}, {@noacl='noacl'}, {@statfs_percent={'statfs_percent', 0x3d, 0x4}}, {@loccookie='loccookie'}, {@commit={'commit', 0x3d, 0x5}}, {@quota_on='quota=on'}], [{@dont_measure='dont_measure'}, {@uid_eq={'uid', 0x3d, r1}}, {@audit='audit'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vcan0\x00'}}, {@measure='measure'}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x38, 0x7e, 0x0, 0x7f, 0x77, 0x33, 0x32], 0x2d, [0x77, 0x3b, 0x3a, 0x77], 0x2d, [0x64, 0x61, 0x38, 0x77], 0x2d, [0x3f, 0x37, 0x0, 0x34], 0x2d, [0x62, 0x66, 0x63, 0x36, 0x31, 0x33, 0x71, 0x65]}}}]}) connect(r0, &(0x7f0000000380)=@hci, 0x80) getsockname(r0, &(0x7f0000000480)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000100)=0x80) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB="ac3f87a67e8383e905521010ceb955c8708c92dabf84a57cee427afa44378089a0b866ca522eaf91087dee1b2f5a6a5b2175a0157d82de33db61564445d04afbe2859fc0bf7e5e4694bd15bc504fcb981ae5aae94182133996a6feedaf5e82887b6bb914e0faf57c468c3c1b779d2c6e480e5b7202c6ffeaacf3d21186a55c5008f1f90949d194d400a1af53b503d8328b8918970e185688086dd7a97987a35dc0"], &(0x7f0000000940)='keyring\x00', 0x8, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', r2}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000980)='/dev/cachefiles\x00', 0x10000, 0x0) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) utimensat(r4, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a40)={{}, {r5, r6/1000+30000}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r3}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x14], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:53 executing program 0 (fault-call:3 fault-nth:31): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:53 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:53 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a40, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x2, 0x20000) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000140)={0x7bb3, 0xfc, 0x8, 0x4}) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff6f"], 0x2) close(r0) getsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000), &(0x7f0000000080)=0x4) fcntl$setpipe(r1, 0x407, 0x8) 04:09:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x15], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2650.032328][ T3317] FAULT_INJECTION: forcing a failure. [ 2650.032328][ T3317] name failslab, interval 1, probability 0, space 0, times 0 [ 2650.069546][ T3317] CPU: 1 PID: 3317 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2650.077419][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2650.087493][ T3317] Call Trace: [ 2650.090815][ T3317] dump_stack+0x172/0x1f0 [ 2650.095267][ T3317] should_fail.cold+0xa/0x15 [ 2650.099886][ T3317] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2650.105735][ T3317] ? ___might_sleep+0x163/0x280 [ 2650.110685][ T3317] __should_failslab+0x121/0x190 [ 2650.115775][ T3317] should_failslab+0x9/0x14 [ 2650.120456][ T3317] kmem_cache_alloc+0x2af/0x6f0 [ 2650.125396][ T3317] __kernfs_new_node+0xf0/0x6c0 [ 2650.130367][ T3317] ? kernfs_activate+0x192/0x1f0 [ 2650.135464][ T3317] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2650.140972][ T3317] ? kernfs_activate+0x192/0x1f0 [ 2650.146155][ T3317] ? lock_downgrade+0x880/0x880 [ 2650.151070][ T3317] ? mutex_trylock+0x1e0/0x1e0 [ 2650.155890][ T3317] ? lock_downgrade+0x880/0x880 [ 2650.160799][ T3317] kernfs_new_node+0x96/0x120 [ 2650.165642][ T3317] kernfs_create_dir_ns+0x52/0x160 [ 2650.170803][ T3317] internal_create_group+0x7f4/0xc40 [ 2650.176133][ T3317] ? retint_kernel+0x2b/0x2b [ 2650.180766][ T3317] ? trace_hardirqs_on_caller+0x6a/0x220 [ 2650.186434][ T3317] ? mutex_unlock+0xd/0x10 [ 2650.190889][ T3317] ? remove_files.isra.0+0x190/0x190 [ 2650.196207][ T3317] ? retint_kernel+0x2b/0x2b [ 2650.200841][ T3317] sysfs_create_group+0x20/0x30 [ 2650.205723][ T3317] dpm_sysfs_add+0x87/0x270 [ 2650.210253][ T3317] device_add+0x9df/0x17a0 [ 2650.214706][ T3317] ? get_device_parent.isra.0+0x560/0x560 [ 2650.220448][ T3317] ? start_creating+0x163/0x1e0 [ 2650.225350][ T3317] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2650.231623][ T3317] hci_register_dev+0x2e8/0x860 [ 2650.236867][ T3317] __vhci_create_device+0x2d0/0x5a0 [ 2650.242091][ T3317] vhci_write+0x2d0/0x470 [ 2650.246453][ T3317] new_sync_write+0x4d3/0x770 [ 2650.251253][ T3317] ? new_sync_read+0x800/0x800 [ 2650.256138][ T3317] ? __fget+0x381/0x550 [ 2650.260319][ T3317] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2650.266598][ T3317] ? security_file_permission+0x8f/0x380 [ 2650.272254][ T3317] __vfs_write+0xe1/0x110 [ 2650.276614][ T3317] vfs_write+0x20c/0x580 [ 2650.280917][ T3317] ksys_write+0x14f/0x290 [ 2650.285282][ T3317] ? __ia32_sys_read+0xb0/0xb0 [ 2650.290071][ T3317] ? do_syscall_64+0x26/0x680 [ 2650.294772][ T3317] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2650.300854][ T3317] ? do_syscall_64+0x26/0x680 [ 2650.305555][ T3317] __x64_sys_write+0x73/0xb0 [ 2650.310176][ T3317] do_syscall_64+0xfd/0x680 [ 2650.314701][ T3317] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2650.320608][ T3317] RIP: 0033:0x459279 [ 2650.324514][ T3317] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2650.344132][ T3317] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2650.352605][ T3317] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2650.360599][ T3317] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2650.368596][ T3317] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 04:09:53 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2650.376847][ T3317] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2650.384834][ T3317] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:53 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="0200007b1e814ca7d85ca70000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ddc4a2880e6a85f2"], 0x48}}, 0x0) 04:09:53 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a41, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2650.465065][ T3317] Bluetooth: Can't register HCI device 04:09:53 executing program 0 (fault-call:3 fault-nth:32): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={r2, @local, @dev={0xac, 0x14, 0x14, 0x1a}}, 0xc) 04:09:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x16], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:53 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:53 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a42, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2650.603781][ T3338] FAULT_INJECTION: forcing a failure. [ 2650.603781][ T3338] name failslab, interval 1, probability 0, space 0, times 0 [ 2650.639246][ T3338] CPU: 1 PID: 3338 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2650.647124][ T3338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2650.657197][ T3338] Call Trace: [ 2650.660516][ T3338] dump_stack+0x172/0x1f0 [ 2650.664884][ T3338] should_fail.cold+0xa/0x15 [ 2650.669501][ T3338] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2650.675334][ T3338] ? ___might_sleep+0x163/0x280 [ 2650.680212][ T3338] __should_failslab+0x121/0x190 [ 2650.685174][ T3338] should_failslab+0x9/0x14 [ 2650.689695][ T3338] kmem_cache_alloc+0x2af/0x6f0 [ 2650.694570][ T3338] __kernfs_new_node+0xf0/0x6c0 [ 2650.699444][ T3338] ? kernfs_activate+0x192/0x1f0 [ 2650.704403][ T3338] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2650.709913][ T3338] ? kernfs_activate+0x192/0x1f0 [ 2650.714874][ T3338] ? lock_downgrade+0x880/0x880 [ 2650.719743][ T3338] ? mutex_trylock+0x1e0/0x1e0 [ 2650.724534][ T3338] ? lock_downgrade+0x880/0x880 [ 2650.729412][ T3338] kernfs_new_node+0x96/0x120 [ 2650.734134][ T3338] kernfs_create_dir_ns+0x52/0x160 [ 2650.739277][ T3338] internal_create_group+0x7f4/0xc40 [ 2650.744598][ T3338] ? mutex_unlock+0xd/0x10 [ 2650.749036][ T3338] ? kernfs_activate+0x192/0x1f0 [ 2650.754003][ T3338] ? remove_files.isra.0+0x190/0x190 [ 2650.759311][ T3338] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2650.765595][ T3338] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2650.771864][ T3338] ? kernfs_create_link+0x1cc/0x250 [ 2650.777191][ T3338] sysfs_create_group+0x20/0x30 [ 2650.782247][ T3338] dpm_sysfs_add+0x87/0x270 [ 2650.786778][ T3338] device_add+0x9df/0x17a0 [ 2650.791226][ T3338] ? get_device_parent.isra.0+0x560/0x560 [ 2650.796970][ T3338] ? start_creating+0x163/0x1e0 04:09:54 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80000, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2650.801866][ T3338] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2650.808140][ T3338] hci_register_dev+0x2e8/0x860 [ 2650.813019][ T3338] __vhci_create_device+0x2d0/0x5a0 [ 2650.818244][ T3338] vhci_write+0x2d0/0x470 [ 2650.822601][ T3338] new_sync_write+0x4d3/0x770 [ 2650.827291][ T3338] ? new_sync_read+0x800/0x800 [ 2650.832075][ T3338] ? __fget+0x381/0x550 [ 2650.836287][ T3338] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2650.842539][ T3338] ? security_file_permission+0x8f/0x380 [ 2650.848201][ T3338] __vfs_write+0xe1/0x110 [ 2650.852557][ T3338] vfs_write+0x20c/0x580 [ 2650.856824][ T3338] ksys_write+0x14f/0x290 [ 2650.861171][ T3338] ? __ia32_sys_read+0xb0/0xb0 [ 2650.865945][ T3338] ? do_syscall_64+0x26/0x680 [ 2650.865963][ T3338] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2650.865978][ T3338] ? do_syscall_64+0x26/0x680 [ 2650.865998][ T3338] __x64_sys_write+0x73/0xb0 [ 2650.866016][ T3338] do_syscall_64+0xfd/0x680 [ 2650.866036][ T3338] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2650.876767][ T3338] RIP: 0033:0x459279 [ 2650.876786][ T3338] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2650.876794][ T3338] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2650.876810][ T3338] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2650.876818][ T3338] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2650.876827][ T3338] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2650.876843][ T3338] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2650.960250][ T3338] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 [ 2650.973161][ T3338] Bluetooth: Can't register HCI device 04:09:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x18], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:54 executing program 0 (fault-call:3 fault-nth:33): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:54 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) prctl$PR_GET_SECUREBITS(0x1b) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {0x0, 0x0, 0x3ff}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a43, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000080)={0x1, 0x5, 0x8}) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x2) close(r1) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x400, 0x0) [ 2651.157634][ T3359] FAULT_INJECTION: forcing a failure. [ 2651.157634][ T3359] name failslab, interval 1, probability 0, space 0, times 0 [ 2651.196274][ T3359] CPU: 1 PID: 3359 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2651.204131][ T3359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2651.214201][ T3359] Call Trace: [ 2651.217511][ T3359] dump_stack+0x172/0x1f0 [ 2651.221855][ T3359] should_fail.cold+0xa/0x15 [ 2651.221877][ T3359] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2651.221902][ T3359] ? ___might_sleep+0x163/0x280 [ 2651.221932][ T3359] __should_failslab+0x121/0x190 [ 2651.242128][ T3359] should_failslab+0x9/0x14 [ 2651.246635][ T3359] kmem_cache_alloc+0x2af/0x6f0 [ 2651.251499][ T3359] __kernfs_new_node+0xf0/0x6c0 04:09:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a44, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2651.256357][ T3359] ? kernfs_find_and_get_ns+0x26/0x70 [ 2651.256376][ T3359] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2651.256401][ T3359] ? lock_downgrade+0x880/0x880 [ 2651.272067][ T3359] ? mutex_trylock+0x1e0/0x1e0 [ 2651.276838][ T3359] ? kernfs_activate+0x192/0x1f0 [ 2651.281792][ T3359] kernfs_new_node+0x96/0x120 [ 2651.286484][ T3359] __kernfs_create_file+0x51/0x340 [ 2651.291609][ T3359] sysfs_add_file_mode_ns+0x222/0x560 [ 2651.291642][ T3359] sysfs_merge_group+0x1a0/0x340 [ 2651.301936][ T3359] ? sysfs_init_fs_context+0x370/0x370 [ 2651.307402][ T3359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2651.313652][ T3359] ? kernfs_create_link+0x1cc/0x250 [ 2651.318878][ T3359] dpm_sysfs_add+0x21e/0x270 [ 2651.323483][ T3359] device_add+0x9df/0x17a0 [ 2651.327909][ T3359] ? get_device_parent.isra.0+0x560/0x560 [ 2651.333647][ T3359] ? start_creating+0x163/0x1e0 [ 2651.333665][ T3359] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2651.333685][ T3359] hci_register_dev+0x2e8/0x860 [ 2651.333708][ T3359] __vhci_create_device+0x2d0/0x5a0 [ 2651.333726][ T3359] vhci_write+0x2d0/0x470 [ 2651.333743][ T3359] new_sync_write+0x4d3/0x770 [ 2651.333760][ T3359] ? new_sync_read+0x800/0x800 [ 2651.333780][ T3359] ? __fget+0x381/0x550 [ 2651.372847][ T3359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2651.372868][ T3359] ? security_file_permission+0x8f/0x380 [ 2651.372887][ T3359] __vfs_write+0xe1/0x110 [ 2651.372903][ T3359] vfs_write+0x20c/0x580 [ 2651.372920][ T3359] ksys_write+0x14f/0x290 [ 2651.372935][ T3359] ? __ia32_sys_read+0xb0/0xb0 [ 2651.372950][ T3359] ? do_syscall_64+0x26/0x680 [ 2651.372965][ T3359] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2651.372978][ T3359] ? do_syscall_64+0x26/0x680 [ 2651.372996][ T3359] __x64_sys_write+0x73/0xb0 [ 2651.373021][ T3359] do_syscall_64+0xfd/0x680 [ 2651.393458][ T3359] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2651.393471][ T3359] RIP: 0033:0x459279 [ 2651.393488][ T3359] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:09:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:54 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) rt_sigtimedwait(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000001c0), 0x8) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:54 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000feffffff0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001017c8bd8ee1cf560000000784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f009d11642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2651.393503][ T3359] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2651.413295][ T3359] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2651.413304][ T3359] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2651.413311][ T3359] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2651.413320][ T3359] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2651.413329][ T3359] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2651.547493][ T3359] Bluetooth: Can't register HCI device 04:09:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a45, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) r2 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x800) setsockopt$packet_int(r2, 0x107, 0x1a, &(0x7f0000000100)=0x80000001, 0x4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x404000, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={&(0x7f0000000240)=[0x7, 0x5b3], 0x2, 0x9, 0x6, 0x1, 0x3, 0xfff, {0x1, 0x7, 0x2, 0x7f, 0x4, 0x200, 0x1, 0x0, 0x1, 0x81, 0x7, 0x81, 0xbe, 0x0, "28d6e68ddf9677b95ac3ccac4279a5657e5b208c1c0202f7741636d6cfa91aa0"}}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000180)={0x2000, 0x7b, 0x8, 0x8, 0x80000000, 0xbc14, 0x1, 0xeed, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e23, 0x6, @mcast2, 0x5}}, 0x4, 0xe1c4, 0x3, 0x9, 0x3ff}, &(0x7f00000002c0)=0x98) 04:09:54 executing program 0 (fault-call:3 fault-nth:34): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:54 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x10401, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x77, "6e21db7703529ed586061441414c1e2958a4260fb99a223f7036f8ea8939c252d0b2d34bcc881a0980290df4d9afa7d2f56689915eba558240b07ed9d7350c6175ae47c51ca3f0311bdbc669bf762914f38fa99151fa21ade4ad2fa586376a40030aa6211c20614ba5a5fb40f312912567719d37bc0f09"}, &(0x7f00000001c0)=0x7f) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000240)={r1, 0x4, 0x30, 0x3ff, 0x5}, &(0x7f0000000480)=0x18) r2 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0xa6c, 0x2) connect(r2, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) lchown(&(0x7f00000004c0)='./file0\x00', 0x0, r4) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r3}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x3, 0x0, 0x0, {0x0, 0x7530}, {}, {0x0, 0x2}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0xffffffffffffff8e}, 0x1, 0x0, 0x0, 0x10}, 0x0) 04:09:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\xbcSQ\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2651.859379][ T3394] FAULT_INJECTION: forcing a failure. [ 2651.859379][ T3394] name failslab, interval 1, probability 0, space 0, times 0 [ 2651.877960][ T3394] CPU: 1 PID: 3394 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2651.885809][ T3394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2651.895925][ T3394] Call Trace: [ 2651.895956][ T3394] dump_stack+0x172/0x1f0 [ 2651.895983][ T3394] should_fail.cold+0xa/0x15 [ 2651.896010][ T3394] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2651.903885][ T3394] ? ___might_sleep+0x163/0x280 [ 2651.903908][ T3394] __should_failslab+0x121/0x190 [ 2651.903927][ T3394] should_failslab+0x9/0x14 [ 2651.903939][ T3394] kmem_cache_alloc+0x2af/0x6f0 [ 2651.903955][ T3394] ? lock_downgrade+0x880/0x880 [ 2651.903967][ T3394] ? kasan_check_read+0x11/0x20 [ 2651.903986][ T3394] __kernfs_new_node+0xf0/0x6c0 [ 2651.904003][ T3394] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2651.904022][ T3394] ? wait_for_completion+0x440/0x440 [ 2651.904045][ T3394] ? mutex_unlock+0xd/0x10 [ 2651.904065][ T3394] ? kernfs_activate+0x192/0x1f0 [ 2651.968602][ T3394] kernfs_new_node+0x96/0x120 [ 2651.973520][ T3394] __kernfs_create_file+0x51/0x340 [ 2651.978681][ T3394] sysfs_add_file_mode_ns+0x222/0x560 [ 2651.984141][ T3394] sysfs_merge_group+0x1a0/0x340 [ 2651.989128][ T3394] ? sysfs_init_fs_context+0x370/0x370 [ 2651.994636][ T3394] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2652.000924][ T3394] ? kernfs_create_link+0x1cc/0x250 [ 2652.006173][ T3394] dpm_sysfs_add+0x21e/0x270 [ 2652.010796][ T3394] device_add+0x9df/0x17a0 [ 2652.015249][ T3394] ? get_device_parent.isra.0+0x560/0x560 [ 2652.020995][ T3394] ? start_creating+0x163/0x1e0 [ 2652.025887][ T3394] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2652.032179][ T3394] hci_register_dev+0x2e8/0x860 [ 2652.037927][ T3394] __vhci_create_device+0x2d0/0x5a0 [ 2652.043232][ T3394] vhci_write+0x2d0/0x470 [ 2652.047578][ T3394] new_sync_write+0x4d3/0x770 [ 2652.052272][ T3394] ? new_sync_read+0x800/0x800 [ 2652.057054][ T3394] ? __fget+0x381/0x550 [ 2652.061236][ T3394] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2652.067526][ T3394] ? security_file_permission+0x8f/0x380 [ 2652.073167][ T3394] __vfs_write+0xe1/0x110 [ 2652.077506][ T3394] vfs_write+0x20c/0x580 [ 2652.081760][ T3394] ksys_write+0x14f/0x290 [ 2652.086100][ T3394] ? __ia32_sys_read+0xb0/0xb0 [ 2652.090878][ T3394] ? do_syscall_64+0x26/0x680 [ 2652.095561][ T3394] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2652.095577][ T3394] ? do_syscall_64+0x26/0x680 04:09:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2652.095606][ T3394] __x64_sys_write+0x73/0xb0 [ 2652.095627][ T3394] do_syscall_64+0xfd/0x680 [ 2652.106369][ T3394] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2652.106383][ T3394] RIP: 0033:0x459279 [ 2652.106399][ T3394] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2652.106415][ T3394] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 04:09:55 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:55 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a46, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:55 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff81e783f3281b1703e61261be"], 0x2) close(r0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x14800, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000140)=0x7, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x880, 0x100) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x10001, 0x7}) [ 2652.153263][ T3394] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2652.161530][ T3394] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2652.169527][ T3394] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2652.177520][ T3394] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2652.185510][ T3394] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x600], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:55 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a47, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2652.291936][ T3394] Bluetooth: Can't register HCI device 04:09:55 executing program 0 (fault-call:3 fault-nth:35): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x2) close(r1) 04:09:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:55 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {0x2}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x2, 0x842) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xb3df, 0x14000) setsockopt$inet6_tcp_buf(r2, 0x6, 0x0, &(0x7f00000000c0)="7128c47ad26d19cb1c2280", 0xb) 04:09:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x700], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:55 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a48, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x5) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) [ 2652.570535][ T3431] FAULT_INJECTION: forcing a failure. [ 2652.570535][ T3431] name failslab, interval 1, probability 0, space 0, times 0 [ 2652.612040][ T3431] CPU: 0 PID: 3431 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2652.619905][ T3431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2652.629968][ T3431] Call Trace: [ 2652.633279][ T3431] dump_stack+0x172/0x1f0 [ 2652.633306][ T3431] should_fail.cold+0xa/0x15 [ 2652.633329][ T3431] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2652.642241][ T3431] ? ___might_sleep+0x163/0x280 [ 2652.642263][ T3431] __should_failslab+0x121/0x190 [ 2652.642281][ T3431] should_failslab+0x9/0x14 [ 2652.642294][ T3431] kmem_cache_alloc+0x2af/0x6f0 [ 2652.642310][ T3431] ? lock_downgrade+0x880/0x880 [ 2652.642329][ T3431] ? kasan_check_read+0x11/0x20 [ 2652.652970][ T3431] __kernfs_new_node+0xf0/0x6c0 [ 2652.652988][ T3431] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2652.653009][ T3431] ? wait_for_completion+0x440/0x440 [ 2652.653033][ T3431] ? mutex_unlock+0xd/0x10 [ 2652.662448][ T3431] ? kernfs_activate+0x192/0x1f0 [ 2652.662467][ T3431] kernfs_new_node+0x96/0x120 [ 2652.662488][ T3431] __kernfs_create_file+0x51/0x340 [ 2652.662508][ T3431] sysfs_add_file_mode_ns+0x222/0x560 [ 2652.662530][ T3431] sysfs_merge_group+0x1a0/0x340 [ 2652.672216][ T3431] ? sysfs_init_fs_context+0x370/0x370 [ 2652.681895][ T3431] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2652.681912][ T3431] ? kernfs_create_link+0x1cc/0x250 [ 2652.681936][ T3431] dpm_sysfs_add+0x21e/0x270 [ 2652.681953][ T3431] device_add+0x9df/0x17a0 [ 2652.681976][ T3431] ? get_device_parent.isra.0+0x560/0x560 [ 2652.692720][ T3431] ? start_creating+0x163/0x1e0 04:09:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x900], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2652.692740][ T3431] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2652.692760][ T3431] hci_register_dev+0x2e8/0x860 [ 2652.692785][ T3431] __vhci_create_device+0x2d0/0x5a0 [ 2652.692805][ T3431] vhci_write+0x2d0/0x470 [ 2652.702157][ T3431] new_sync_write+0x4d3/0x770 [ 2652.702173][ T3431] ? new_sync_read+0x800/0x800 [ 2652.702194][ T3431] ? __fget+0x381/0x550 [ 2652.702218][ T3431] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2652.712018][ T3431] ? security_file_permission+0x8f/0x380 [ 2652.712038][ T3431] __vfs_write+0xe1/0x110 [ 2652.712056][ T3431] vfs_write+0x20c/0x580 [ 2652.712074][ T3431] ksys_write+0x14f/0x290 [ 2652.712099][ T3431] ? __ia32_sys_read+0xb0/0xb0 [ 2652.722484][ T3431] ? do_syscall_64+0x26/0x680 [ 2652.722501][ T3431] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2652.722514][ T3431] ? do_syscall_64+0x26/0x680 [ 2652.722534][ T3431] __x64_sys_write+0x73/0xb0 [ 2652.722552][ T3431] do_syscall_64+0xfd/0x680 [ 2652.722573][ T3431] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2652.734253][ T3431] RIP: 0033:0x459279 04:09:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:56 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="02a573d79ae18f564a04b8d7044228cc6c620000000000000000000000000000000000ca1dd156dcfe5539338f6472e5b8f1dc62fc0afc20adf2f6c24181adc93144d40ec3859638dd49c340312a14f9b366f85a7a53df4407139cf4c5d749c851e9050def2f4422bff9f24649addb0d7b346d82c2e82b59be78b28ef826907e2000face75e0895b62cc4df12687c620386979b44dba1fbe920cf210e824b86cb7ef4c", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000016a85f200"/24], 0x48}}, 0x0) [ 2652.734270][ T3431] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2652.734278][ T3431] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2652.734292][ T3431] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2652.734301][ T3431] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2652.734309][ T3431] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 04:09:56 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0)={0xffffffff}, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) geteuid() [ 2652.734323][ T3431] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2652.734339][ T3431] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 [ 2652.997883][ T3431] Bluetooth: Can't register HCI device 04:09:56 executing program 0 (fault-call:3 fault-nth:36): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a49, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xa00], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000080)={0x4, 0xd28, 0x9, 0x7}, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x84001, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r2) 04:09:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a4a, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb00], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2653.200103][ T3460] FAULT_INJECTION: forcing a failure. [ 2653.200103][ T3460] name failslab, interval 1, probability 0, space 0, times 0 [ 2653.223962][ T3460] CPU: 0 PID: 3460 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2653.231804][ T3460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2653.241868][ T3460] Call Trace: [ 2653.245176][ T3460] dump_stack+0x172/0x1f0 [ 2653.249530][ T3460] should_fail.cold+0xa/0x15 [ 2653.254141][ T3460] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2653.254167][ T3460] ? ___might_sleep+0x163/0x280 [ 2653.254197][ T3460] __should_failslab+0x121/0x190 [ 2653.269776][ T3460] should_failslab+0x9/0x14 [ 2653.274292][ T3460] kmem_cache_alloc+0x2af/0x6f0 [ 2653.279155][ T3460] ? lock_downgrade+0x880/0x880 [ 2653.284012][ T3460] ? kasan_check_read+0x11/0x20 [ 2653.284032][ T3460] __kernfs_new_node+0xf0/0x6c0 [ 2653.284049][ T3460] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2653.284069][ T3460] ? wait_for_completion+0x440/0x440 [ 2653.284099][ T3460] ? mutex_unlock+0xd/0x10 [ 2653.304489][ T3460] ? kernfs_activate+0x192/0x1f0 [ 2653.304510][ T3460] kernfs_new_node+0x96/0x120 [ 2653.304530][ T3460] __kernfs_create_file+0x51/0x340 [ 2653.304549][ T3460] sysfs_add_file_mode_ns+0x222/0x560 [ 2653.304573][ T3460] sysfs_merge_group+0x1a0/0x340 [ 2653.318583][ T3460] ? sysfs_init_fs_context+0x370/0x370 [ 2653.318603][ T3460] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2653.318618][ T3460] ? kernfs_create_link+0x1cc/0x250 [ 2653.318648][ T3460] dpm_sysfs_add+0x21e/0x270 [ 2653.329127][ T3460] device_add+0x9df/0x17a0 [ 2653.359915][ T3460] ? get_device_parent.isra.0+0x560/0x560 [ 2653.365643][ T3460] ? start_creating+0x163/0x1e0 [ 2653.370507][ T3460] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2653.376763][ T3460] hci_register_dev+0x2e8/0x860 [ 2653.381631][ T3460] __vhci_create_device+0x2d0/0x5a0 [ 2653.386846][ T3460] vhci_write+0x2d0/0x470 [ 2653.391192][ T3460] new_sync_write+0x4d3/0x770 [ 2653.395874][ T3460] ? new_sync_read+0x800/0x800 [ 2653.400656][ T3460] ? __fget+0x381/0x550 [ 2653.404831][ T3460] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2653.411081][ T3460] ? security_file_permission+0x8f/0x380 [ 2653.416736][ T3460] __vfs_write+0xe1/0x110 [ 2653.421076][ T3460] vfs_write+0x20c/0x580 [ 2653.425339][ T3460] ksys_write+0x14f/0x290 [ 2653.429690][ T3460] ? __ia32_sys_read+0xb0/0xb0 [ 2653.434480][ T3460] ? do_syscall_64+0x26/0x680 [ 2653.439176][ T3460] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2653.445262][ T3460] ? do_syscall_64+0x26/0x680 [ 2653.449959][ T3460] __x64_sys_write+0x73/0xb0 [ 2653.454567][ T3460] do_syscall_64+0xfd/0x680 [ 2653.459092][ T3460] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2653.464991][ T3460] RIP: 0033:0x459279 [ 2653.468896][ T3460] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2653.488511][ T3460] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 04:09:56 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f00000000c0)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x10000001, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xa003, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) [ 2653.496939][ T3460] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2653.504920][ T3460] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2653.512910][ T3460] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2653.520890][ T3460] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2653.528876][ T3460] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xc00], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2653.589041][ T3460] Bluetooth: Can't register HCI device 04:09:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x7, @rand_addr="74c5b9c294af1ac7e8f1417627c5ce66", 0x7}}, 0x7, 0xd8c, 0x1, 0xe3d, 0x5}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r2, 0x9}, 0x8) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a4b, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:56 executing program 0 (fault-call:3 fault-nth:37): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:56 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x151001, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000100)={r3, &(0x7f0000000480)=""/146}) 04:09:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a4c, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xd00], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:57 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000480)="3dac38015be20e7ed8d066e0241b0bb5d02a3e1b2c6581f370b53cbf15b304433bd03515d4c843001f4f203819a4c25c3674818461f2f66ad6b153d0b76ce01c03f784dc82be75b8e3aa715caea8ad966507cc6136bb36931ae9d37df3aac2024709a18f7a4cbe773c392aedae2850d20d18e1231a7fbf9867b3cf206ccf044b7a44fd4732645756b8608a23db2e4398554e0c34dd9bf2a09e25b7dec64407a51dbbebfbcdfd1668f4", 0xa9, 0xfffffffffffffff8) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate(0xc, r2, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', '', 0x20, 0x8, 0x20, [0x65]}, 0x2e, r3) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x100000001}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x2) close(r1) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x100) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000080)={{0x3, @addr=0x7911f13f}, 0x8, 0x1, 0x220}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) [ 2653.892222][ T3486] FAULT_INJECTION: forcing a failure. [ 2653.892222][ T3486] name failslab, interval 1, probability 0, space 0, times 0 [ 2653.926676][ T3486] CPU: 0 PID: 3486 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2653.934569][ T3486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2653.934578][ T3486] Call Trace: [ 2653.934612][ T3486] dump_stack+0x172/0x1f0 [ 2653.934640][ T3486] should_fail.cold+0xa/0x15 [ 2653.934661][ T3486] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2653.934686][ T3486] ? ___might_sleep+0x163/0x280 [ 2653.934710][ T3486] __should_failslab+0x121/0x190 [ 2653.934728][ T3486] should_failslab+0x9/0x14 [ 2653.934742][ T3486] kmem_cache_alloc+0x2af/0x6f0 [ 2653.934759][ T3486] ? lock_downgrade+0x880/0x880 [ 2653.934773][ T3486] ? kasan_check_read+0x11/0x20 [ 2653.934795][ T3486] __kernfs_new_node+0xf0/0x6c0 [ 2653.934821][ T3486] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2653.957136][ T3486] ? wait_for_completion+0x440/0x440 [ 2653.957163][ T3486] ? mutex_unlock+0xd/0x10 [ 2653.957185][ T3486] ? kernfs_activate+0x192/0x1f0 [ 2653.977370][ T3486] kernfs_new_node+0x96/0x120 [ 2653.977394][ T3486] __kernfs_create_file+0x51/0x340 [ 2653.977414][ T3486] sysfs_add_file_mode_ns+0x222/0x560 [ 2653.977438][ T3486] sysfs_merge_group+0x1a0/0x340 [ 2653.987130][ T3486] ? sysfs_init_fs_context+0x370/0x370 [ 2653.987149][ T3486] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2653.987165][ T3486] ? kernfs_create_link+0x1cc/0x250 [ 2653.987190][ T3486] dpm_sysfs_add+0x21e/0x270 [ 2653.987211][ T3486] device_add+0x9df/0x17a0 [ 2653.996898][ T3486] ? get_device_parent.isra.0+0x560/0x560 [ 2653.996916][ T3486] ? start_creating+0x163/0x1e0 [ 2653.996935][ T3486] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2653.996961][ T3486] hci_register_dev+0x2e8/0x860 [ 2654.007692][ T3486] __vhci_create_device+0x2d0/0x5a0 [ 2654.007713][ T3486] vhci_write+0x2d0/0x470 [ 2654.007732][ T3486] new_sync_write+0x4d3/0x770 [ 2654.007756][ T3486] ? new_sync_read+0x800/0x800 [ 2654.017099][ T3486] ? __fget+0x381/0x550 [ 2654.017124][ T3486] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2654.017143][ T3486] ? security_file_permission+0x8f/0x380 [ 2654.017170][ T3486] __vfs_write+0xe1/0x110 [ 2654.026946][ T3486] vfs_write+0x20c/0x580 [ 2654.026967][ T3486] ksys_write+0x14f/0x290 [ 2654.026984][ T3486] ? __ia32_sys_read+0xb0/0xb0 [ 2654.027002][ T3486] ? do_syscall_64+0x26/0x680 [ 2654.027019][ T3486] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2654.027039][ T3486] ? do_syscall_64+0x26/0x680 [ 2654.152844][ T3486] __x64_sys_write+0x73/0xb0 [ 2654.157449][ T3486] do_syscall_64+0xfd/0x680 [ 2654.161971][ T3486] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2654.167871][ T3486] RIP: 0033:0x459279 [ 2654.171774][ T3486] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2654.191416][ T3486] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2654.199846][ T3486] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2654.207825][ T3486] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2654.215805][ T3486] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2654.223782][ T3486] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2654.231762][ T3486] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:57 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe00], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a4d, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:57 executing program 0 (fault-call:3 fault-nth:38): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a4e, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xf00], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:57 executing program 4: connect(0xffffffffffffffff, &(0x7f0000000380)=@hci, 0x80) socketpair(0x4, 0x7, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000000c0)={@empty, @local}, &(0x7f0000000100)=0x2f) setsockopt$inet_tcp_buf(r0, 0x6, 0x3d, &(0x7f0000000240), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="01000000feffffff0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000004001000000784e8b4be98e9414118b6ad150f5070da6e965d4ce819c8df3f909d13642273a15fcd97910c8c0b3afa809ebfc458fe8afb0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195033e60110959892c7956cc8d052ab52f763ccaab01f1896678aad0b1f2c647ee567c2b762562db9596110f71179e13d028"], 0x80}}, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0x1, 0x4) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r2}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2654.516393][ T3486] Bluetooth: Can't register HCI device 04:09:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a4f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="9491"], 0x2) close(r1) 04:09:57 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x8000, 0x0) recvfrom$inet6(r1, &(0x7f0000000480)=""/161, 0xa1, 0x40, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @empty, 0x9}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r2}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) write$P9_RWRITE(r1, &(0x7f0000000100)={0xb, 0x77, 0x2, 0x800}, 0xb) [ 2654.683266][ T3522] FAULT_INJECTION: forcing a failure. [ 2654.683266][ T3522] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2654.696615][ T3522] CPU: 1 PID: 3522 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2654.704427][ T3522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2654.714494][ T3522] Call Trace: [ 2654.717814][ T3522] dump_stack+0x172/0x1f0 [ 2654.722173][ T3522] should_fail.cold+0xa/0x15 [ 2654.726777][ T3522] ? console_unlock+0x781/0xec0 [ 2654.731644][ T3522] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2654.737470][ T3522] ? mark_held_locks+0xf0/0xf0 [ 2654.742253][ T3522] should_fail_alloc_page+0x50/0x60 [ 2654.747464][ T3522] __alloc_pages_nodemask+0x1a1/0x8d0 [ 2654.752845][ T3522] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 2654.758489][ T3522] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 2654.764229][ T3522] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 2654.769877][ T3522] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2654.775702][ T3522] cache_grow_begin+0x9d/0x650 04:09:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000240)) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$search(0xa, r2, &(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x0}, r3) write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fdcf191dc01de9468bbbe7e4e995414b8486a4156d97c13001e02fa64753fc0bbe2c82d8ea2cad5f4401d7c4380e0f2934ae8622093394ec1ac017cb357ca89fed976db3f55bdfa988ab9dd1a8d51927e672e461a3833228"], 0x2) close(r1) [ 2654.780482][ T3522] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2654.786733][ T3522] kmem_cache_alloc_trace+0x67c/0x750 [ 2654.792109][ T3522] ? kasan_check_write+0x14/0x20 [ 2654.797061][ T3522] kobject_uevent_env+0x387/0x101d [ 2654.802216][ T3522] kobject_uevent+0x20/0x26 [ 2654.806739][ T3522] device_add+0xad8/0x17a0 [ 2654.811178][ T3522] ? get_device_parent.isra.0+0x560/0x560 [ 2654.816911][ T3522] ? start_creating+0x163/0x1e0 [ 2654.821774][ T3522] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2654.828031][ T3522] hci_register_dev+0x2e8/0x860 [ 2654.832901][ T3522] __vhci_create_device+0x2d0/0x5a0 [ 2654.838121][ T3522] vhci_write+0x2d0/0x470 [ 2654.842469][ T3522] new_sync_write+0x4d3/0x770 [ 2654.847164][ T3522] ? new_sync_read+0x800/0x800 [ 2654.851941][ T3522] ? __fget+0x381/0x550 [ 2654.856124][ T3522] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2654.862379][ T3522] ? security_file_permission+0x8f/0x380 [ 2654.868033][ T3522] __vfs_write+0xe1/0x110 [ 2654.872411][ T3522] vfs_write+0x20c/0x580 [ 2654.876668][ T3522] ksys_write+0x14f/0x290 04:09:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000080)=0x5, &(0x7f0000000100)=0x2) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:09:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1100], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2654.881001][ T3522] ? __ia32_sys_read+0xb0/0xb0 [ 2654.885777][ T3522] ? do_syscall_64+0x26/0x680 [ 2654.890462][ T3522] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2654.896535][ T3522] ? do_syscall_64+0x26/0x680 [ 2654.901225][ T3522] __x64_sys_write+0x73/0xb0 [ 2654.905824][ T3522] do_syscall_64+0xfd/0x680 [ 2654.910431][ T3522] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2654.916332][ T3522] RIP: 0033:0x459279 [ 2654.920235][ T3522] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2654.939850][ T3522] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2654.948277][ T3522] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2654.956350][ T3522] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2654.964328][ T3522] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2654.972307][ T3522] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2654.980281][ T3522] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:58 executing program 0 (fault-call:3 fault-nth:39): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:58 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0xfffffffffffffe1e) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200), 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1200], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a50, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x11b401, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0xedaf52e2ffd209c3, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r3}}, 0xc) 04:09:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a51, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1300], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2655.249895][ T3555] FAULT_INJECTION: forcing a failure. [ 2655.249895][ T3555] name failslab, interval 1, probability 0, space 0, times 0 [ 2655.272316][ T3555] CPU: 1 PID: 3555 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2655.280157][ T3555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2655.290248][ T3555] Call Trace: [ 2655.293613][ T3555] dump_stack+0x172/0x1f0 [ 2655.297965][ T3555] should_fail.cold+0xa/0x15 [ 2655.302574][ T3555] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2655.308398][ T3555] ? ___might_sleep+0x163/0x280 [ 2655.313270][ T3555] __should_failslab+0x121/0x190 [ 2655.318220][ T3555] should_failslab+0x9/0x14 [ 2655.322727][ T3555] kmem_cache_alloc_node_trace+0x26d/0x720 [ 2655.322846][ T3555] __kmalloc_node_track_caller+0x3d/0x70 [ 2655.322867][ T3555] __kmalloc_reserve.isra.0+0x40/0xf0 [ 2655.322885][ T3555] __alloc_skb+0x10b/0x5e0 [ 2655.322907][ T3555] ? skb_trim+0x190/0x190 [ 2655.339696][ T3555] ? kasan_check_read+0x11/0x20 [ 2655.339719][ T3555] alloc_uevent_skb+0x83/0x1e2 [ 2655.339744][ T3555] kobject_uevent_env+0xaa3/0x101d [ 2655.363200][ T3555] kobject_uevent+0x20/0x26 [ 2655.367715][ T3555] device_add+0xad8/0x17a0 [ 2655.372161][ T3555] ? get_device_parent.isra.0+0x560/0x560 [ 2655.377888][ T3555] ? start_creating+0x163/0x1e0 [ 2655.382745][ T3555] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2655.389005][ T3555] hci_register_dev+0x2e8/0x860 [ 2655.393872][ T3555] __vhci_create_device+0x2d0/0x5a0 04:09:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:58 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) recvmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000480)=""/152, 0x98}, 0x2) perf_event_open$cgroup(&(0x7f0000000540)={0x4, 0x70, 0x3, 0x100000000, 0x7, 0x40, 0x0, 0x20, 0x2, 0xb, 0x4, 0xffff, 0x40, 0x7, 0x4, 0x3, 0x5, 0x65f, 0xffffffff, 0xffffffffffffffff, 0x1000, 0x8, 0x2, 0x6, 0x2, 0x401, 0x8, 0x400, 0x10000, 0x80000001, 0x74bd, 0x8, 0xfffffffffffffff7, 0x9, 0x2b7, 0x7fff, 0x6, 0x8, 0x0, 0x7, 0x1, @perf_config_ext={0xffffffffffffff01, 0x7fff}, 0x10022, 0x3, 0x7, 0xa, 0x8001, 0x1ff, 0xfffffffffffffffe}, r2, 0x9, r2, 0x4) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000006c0)={0x0, 0x105001, 0x5, 0x2, 0x54f}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000feffffff0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000784a8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f922d13642273a15fcd979b000001f4fc161b02dd35fb36a2c225922499b52eecd65030195393e"], 0x80}}, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x679, 0x0, 0x5, 0x1, 0x8, "c29c3760cd43ecbe8c1d626a3afbf283693a87d2d0e53adafae2510af42f78167443eb33307f4503dc2ccbc4725f2ed18113fde61cd0aeae9d79ec88a9c00db7", "94aa08a95efa20f48fa847f27f42b967f4cd8a6e55e37fa39fae01d67235ac9df9fd339dec4d8f3419e0d682fa2286648b1ba1bbe03747ae81d646a57c8f819f", "20565e612b24dc95ec0f2729c24b298bf85979f9a4ba2a77e8ff6ce78cc4ea30", [0x9, 0x4]}) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) connect$caif(r2, &(0x7f00000001c0)=@rfm={0x25, 0x3f, "9c6a1f8b9a86e6a685d099f9d6c9930e"}, 0x18) [ 2655.399070][ T3555] vhci_write+0x2d0/0x470 [ 2655.403407][ T3555] new_sync_write+0x4d3/0x770 [ 2655.408084][ T3555] ? new_sync_read+0x800/0x800 [ 2655.412864][ T3555] ? __fget+0x381/0x550 [ 2655.417047][ T3555] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2655.423308][ T3555] ? security_file_permission+0x8f/0x380 [ 2655.428957][ T3555] __vfs_write+0xe1/0x110 [ 2655.433303][ T3555] vfs_write+0x20c/0x580 [ 2655.437566][ T3555] ksys_write+0x14f/0x290 [ 2655.441916][ T3555] ? __ia32_sys_read+0xb0/0xb0 [ 2655.446692][ T3555] ? do_syscall_64+0x26/0x680 [ 2655.451372][ T3555] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2655.457439][ T3555] ? do_syscall_64+0x26/0x680 [ 2655.462139][ T3555] __x64_sys_write+0x73/0xb0 [ 2655.466745][ T3555] do_syscall_64+0xfd/0x680 [ 2655.471264][ T3555] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2655.477166][ T3555] RIP: 0033:0x459279 [ 2655.481088][ T3555] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:09:58 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x82800, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000480)=0x3) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r1, &(0x7f0000000380)=@hci, 0x80) syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x4, 0x1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@multicast1, @local}, &(0x7f0000000240)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000840)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000940)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', r2}) sendmsg$can_bcm(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r3}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2655.500706][ T3555] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2655.509139][ T3555] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2655.517126][ T3555] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2655.525105][ T3555] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2655.533089][ T3555] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2655.541094][ T3555] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:58 executing program 0 (fault-call:3 fault-nth:40): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a52, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1400], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:58 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="01000000feffffff0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="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"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='IK'], 0x2) socket$can_bcm(0x1d, 0x2, 0x2) close(r1) 04:09:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a53, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1500], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2655.856646][ T3591] FAULT_INJECTION: forcing a failure. [ 2655.856646][ T3591] name failslab, interval 1, probability 0, space 0, times 0 [ 2655.890070][ T3591] CPU: 0 PID: 3591 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2655.898016][ T3591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2655.908095][ T3591] Call Trace: [ 2655.911420][ T3591] dump_stack+0x172/0x1f0 [ 2655.916177][ T3591] should_fail.cold+0xa/0x15 [ 2655.920794][ T3591] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2655.926623][ T3591] ? ___might_sleep+0x163/0x280 [ 2655.931597][ T3591] __should_failslab+0x121/0x190 [ 2655.936551][ T3591] should_failslab+0x9/0x14 [ 2655.941074][ T3591] __kmalloc+0x2d9/0x740 [ 2655.945339][ T3591] ? kobject_uevent_env+0x387/0x101d [ 2655.945357][ T3591] ? rcu_read_lock_sched_held+0x110/0x130 [ 2655.945371][ T3591] ? kobject_get_path+0xc4/0x1b0 [ 2655.945389][ T3591] kobject_get_path+0xc4/0x1b0 [ 2655.945412][ T3591] kobject_uevent_env+0x3ab/0x101d [ 2655.956426][ T3591] kobject_uevent+0x20/0x26 [ 2655.956444][ T3591] device_add+0xad8/0x17a0 [ 2655.956464][ T3591] ? get_device_parent.isra.0+0x560/0x560 [ 2655.956480][ T3591] ? start_creating+0x163/0x1e0 [ 2655.956499][ T3591] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2655.956519][ T3591] hci_register_dev+0x2e8/0x860 [ 2655.956543][ T3591] __vhci_create_device+0x2d0/0x5a0 [ 2655.956563][ T3591] vhci_write+0x2d0/0x470 [ 2655.971409][ T3591] new_sync_write+0x4d3/0x770 [ 2655.971427][ T3591] ? new_sync_read+0x800/0x800 [ 2655.971450][ T3591] ? __fget+0x381/0x550 [ 2655.971474][ T3591] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2655.980386][ T3591] ? security_file_permission+0x8f/0x380 [ 2655.980407][ T3591] __vfs_write+0xe1/0x110 [ 2655.980425][ T3591] vfs_write+0x20c/0x580 [ 2655.980444][ T3591] ksys_write+0x14f/0x290 [ 2655.980463][ T3591] ? __ia32_sys_read+0xb0/0xb0 [ 2656.054687][ T3591] ? do_syscall_64+0x26/0x680 [ 2656.059390][ T3591] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2656.065476][ T3591] ? do_syscall_64+0x26/0x680 [ 2656.070173][ T3591] __x64_sys_write+0x73/0xb0 [ 2656.074781][ T3591] do_syscall_64+0xfd/0x680 [ 2656.079311][ T3591] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2656.085236][ T3591] RIP: 0033:0x459279 04:09:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) setsockopt(r2, 0x0, 0x7, &(0x7f0000000180)="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", 0x1000) r4 = inotify_add_watch(r3, &(0x7f0000001180)='./file0\x00', 0x208) inotify_rm_watch(r3, r4) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) r5 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x80300) ioctl$TIOCLINUX3(r5, 0x541c, &(0x7f0000000080)) 04:09:59 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r0}) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2656.089143][ T3591] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2656.108851][ T3591] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2656.117781][ T3591] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2656.125763][ T3591] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2656.133746][ T3591] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2656.141726][ T3591] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2656.149708][ T3591] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:09:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:59 executing program 0 (fault-call:3 fault-nth:41): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:09:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a54, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYBLOB="fc1bc87480aed8c99e0dc1142351612a566896efbe4744ef65aae0ae67d95edda7", @ANYRES32=r1, @ANYRESOCT=r1, @ANYRESHEX=r1], @ANYRESDEC=r0, @ANYRES64=r1, @ANYRESHEX=r1, @ANYPTR, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRESDEC=r0]], 0x4c) close(r1) fsetxattr(r1, &(0x7f0000000080)=@known='user.syz\x00', &(0x7f00000000c0)='/dev/vhci\x00', 0xa, 0x1) 04:09:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1600], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:09:59 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x2000) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x20000, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x0, 0xffffffffffffc9f4, 0x80000001, 0x84000, r2}) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@remote, 0x34, r3}) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r3}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:09:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a55, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:09:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:09:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)={0x0, @aes128, 0x0, "dc258d8836174173"}) ioctl(r0, 0x3, &(0x7f00000000c0)="df") ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = dup(r0) ioctl$TCGETX(r1, 0x5432, &(0x7f0000000000)) r2 = getpgid(0xffffffffffffffff) getpgid(r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) write$P9_RLERRORu(r1, &(0x7f0000001280)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r0, @ANYRESHEX, @ANYRESHEX=r0, @ANYRES16=r0], @ANYPTR, @ANYRES64=r1, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYRES32=r1, @ANYRES16=r1, @ANYRESHEX=r3], @ANYRES32=r0, @ANYRES64, @ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYBLOB="533b45e9d4ea6081fb8844e7d3c3a7c3267189a2fcc18631853823b201bd85e899ea44995f4981cfa57c462548abb077ab6d5d5fa0696246783073cd20e4e36d07d430c16f2e318a2cb6ef9dc460f53f99fd9b98b4aeaa41b6abed6721f0f2ac217140d4d7ee0f0dd514b1b2d3a7437c1403283dff4025effd4af5b4d191edfb93d2848e0a03d6c5c03f92c0290b88b98318d6b21db26a7200a3abf6fffbdede2f57f4c6883f5c3017410bd9b4dfe85a45ebff575c59d4055ab67cc9460d4bbeaeda408bd05475c296a2bf5f26283ab3958cea6764d7fb44572603698861c7e8db98a3b8a76ad5e55fdef30b152d07f985bb9558ca800ab11bd90956cb5165e66453d9310be205076bcae3401a58f81182100a36ba9aa7069f267b131f0680c5d1e26537047a6eb47cd3846f88aeba891573400428c531da623d7ae14e5e89c611c8322293a1b0aa68754b3b42a192bc36a5e1f2d6927f93b4831f858d83a8392fffa77b471c88091e5d0f6e1ab83eb561e6694d7b0b22e7f6a2f7c9feda9e0be2570b4bce72f57b83a0d7388e508899dbb3ffbcf1e8abf99cfa02c3835c67742d259878d97dce700717e7a1be72389ed175740eb008d1aebc97ab1f98dbbc2c1488845a4fc69e083e5d3ccf1da517acf2eccbd5a920d57f3473c84ce85c3f7b265645ec6ff2e578b6c71d74871327644ec50908a7458c94adfb0bf5ea5c32ed686442c230d3364bd58538df7192057c38b8e830a6e1f2a70093719a3a0785dab9bcfdd6725acb1db6d3e4f1d87624f32f5e1e787ac13551c059a8718eab1f9a217fb7e520464a7914ee2325574270fd5aaa4da1acb0226388b88874a6cc7ee6f77c8fb6dc36147b1cf96af2493446ceabb8a1a43dcd4e0d414210102c9fa0d89fa680c897fddac7633dc83f74ae524a7840b6abb431b86dabf66ef81d72be8f6d0b746fea2372d8b08b98c724799c0171c8be4d2783be841cf47e0892b01e591012494bfcbf15a7c36d497fc7dc58d02f3dc6839b74b59c5334120e610aa0ab7f777bd5d980e696bec633f1587116c393fd09639fd965e61c62bd1c6f65f156bc438c92470476a3d5b9d5c0d5d2b777d868bc9f1c04d99102514e7fedbd50b3567844b8841ca4894abff397c274ba1a66a32462ae6d9e2243ba3d6c529f5e008bd316c5e24fa6952fb464be9e96a4a556b6d781652bf865521e44ef77bd29d55034db5984b2b88d2e6cf9a2cd9fde00f702b24a51833db3a2970c8af9caf917b011efa51fab81cae1c6b198bfe628b64cdfaba88dc8d83d05de1e169efe756312ab624a4c65db21e3f732b099af2ff4354ffd4b016ab6275bcf11264accb3cb001944056aaf8ddde22b6299c0d06680407960c5571ea70c49ba37475a65e73a283b8894f590f0383c2b6da15fe9a47b5e7f336cbe84798290c18ab74dbfe543e82b75e2e06d4a6cfe03037c8ea804c3cc31513c9a19b2323a81d96e9b91ffcc005cc30b65ba0c17ee3e216b24046a43a0214dedd95a9cd8fc120cdbf402f0e170ac90935493e555ea612ec4807a04acc595dbbe0b6fe454913ba94f1bd1830d09997808559c76cdeb8bfeb6817c39618d3964823a7759b8219f0733aa527998bdf5d824a41ca0f4878788e5001ebd2975cf896a6755fc41248a374043de81493603c4ccefd742ed2b280376590efbcf0e604d0ffb6fc864d96b6bd97c17962671c506da8215e5d321c5c25a5b919a5e83a1bd82d2b8bdce20f23c8e3961a80626c042f8c332e50b4912faabf6acaf607adfe63dc5aefe9b2faa238a131d791287d3ee1d90315c2a0e2988ae31e9c0560ca7799d669ff266617d0c952dad0114d6167d4dfcb0c075a08400a04af4622f09c6df5e801b56604c004d8276c4b0eaba1bf7276dc0f05a9f3003644c0ac583de790f2f6db97a02b8a87e9e2a72d0c1ef512723c28113ba0d66fb7e22d2495b75c538940c2e2d791e390aeb73d23090d9d1f2e99fdf00a3781437c9a8646ce03ce2578691433fe4aec4f3db855e1e49fd8c946cb90dea2cf58849d5d6e883d7000e852af7e73d940b70187a3382e44c04eab9d1c1b3fdf6d1d20e39785b188d282310585ec0c9886a2d50bc2555a94b6f7347dd2d54839e94d18bfc756117f4e5d269d0c09b6feae9682898aa6b10c10cdc2933a2a1cfe193625bbd3a4311af62851fef884659b8fa1f50d37ae4b5c06f51ace34df37cd491c416cd66942d428e37dcd46ca4bc0a30d7cb5a05322e8a6a925bd5ee7054938bb9a2ac6c1a400f69ee88b6ace742811c29e75123314eaeaf545bf09db7267805bc250d462e369df2418ec23c75b44e3be7d4970f219e4ab838d19e4f19461cb740a52ef0de16d1b227bfcb433bb7fdb584f02bcc9845dc8dcc75ab1a77992945dd897455890be4dfd94ba0db9e617c689fd864a759f58d717816dac76eb4281f092699f76de47185696cf4491b6c1e96d806b88bf2f3d6820148b574ffb4510ff31350dae27e1f1af8ddae322a95a729cb11cfdaf6ab4df7aa9e58a702889b13ecde82a7a53b1e2159ec25a36b06a94dff3cd8d5d0698274685fa1056e1a7a7dbc7aab64144238622dd37f9b0ac29cc7ce524f2e0e9a5302d12f9f0752af051c2a83c207b593a86951cf2183ed0c843eaf43b5c9e62dc7e3570c18e7091150aba4d7183be4885a5528f1c18f8f1d87f5125252ba48430db36f8f8a72fdeb55d23c871f8b7150a810979751b9a679921d05c31bf3a0c8d1edaa4f2d8b3496572db9e93c36911c24569cfce364957951d2c37cb3e6264bfb3506fc0d21ee586fe2631dfa37f0b56b52a90d2209f5e7d3622af49a6c28fdbe4377520bd349bee433cda2af1df8d22fb8da88d9f9b3e3631603ce98aff82c7cabaf6497bc1d568b3072a1e7b75eceab5c7dd5963fe597930b2b6711048bf13f08db2badd8a061d77c5b38b433ee5e92a685c1bd62cff684a7ce789f000d5fb2aca90a00d31fa9566e52cac8b146027f266ca1f03a763d996e45c32e2d18779f85938572c252cf9fe6996c7df9db958f4c0247945f40c10b6ffb7752fdf0a5f8ab020b3eb50c64af4b0cdfb8e6e78ad2448f44fb2e2f071c2c9e978d51bafcbb3b6c6c85c20e3a054cbfb12f3633af31bf7560fb14ceb5b280140a0c6e8440cb78b28c999b8a0d7f0df7d0c2e11dc33d3cc3c93983d63c9356b7fb2d1bd63a6da424485d3b4f129f130759e47883f9afe5034396478b46746923f96e4862d55ffc2e85a35192dd29419f772421bbdc0b55f64f40351e99bf2a08d64941adeb3f2472589d04f40eb79c31c55e7ee8fd77a875d074c944bff8af8313c4a727c4e193ee3a35bc17210677bb1f53827f2d7aab8a583c2b69c7d3227f22a5be5d94fa2ac4c448f3c21251864cc76ad3693799f871b828ddc8fb1c9e2272424e625e0af8aca44d0379ba3fc8eaa6dc663f2907257e81a74977a92b7e9e5c0dc6813b8da3742e4b4edd352346b0609f42e562660c0b8df073ce9278b48f757b1663fb9389cb8e4704261e6056582d46f1f7df96f369731c29b81203915f4a8b0b252a77adcc4e3b366f2b0ed0ded6879f6c7e4b053b750103b5e22fa4d6224d854054e7593430cfcadde2742e5260300064862bfcf811ea38cbe4b0ecbd525e4a6cb712125204712e8e8e7c2248030d39f7183ee932956192ecc770e191cb32867ca641eefb81a4be8729f2c6513231bc7a567cbb1cc833e9a07a37094653ce4caefbd9291021145a81f4f745c467d9048c09f078005b042e8a561d7ced5dcbf6c5a94074241f91c83fa07878d7d7a530adf5048fb969061df9fe620d4189a6eac6f2d6b02f7f54c6f3ce177e48660d54c90061f9446469c28b77a3680ade8eb7ba84e8fa927d5042426e7912210d6e56abf24795d160ee88c5328e5cceaa2a3696ef8a98fea829288d685d0f7017317295f76f06f1c77c6b3e8b58ad676b28419c27bab872c038103eba2fef560659813572135dba30459d808f6388385fcfb5402fffdd8992ac75464af1a7bd7f347b0eaaf3d6db8b88486b21e4331e761fe47464bc633190d1b1a58bdb773b7644b5802b8c443192c82f04fc9216c0bf7b9392da53ab40bf19c6c7c9bcd6816b748a29ba50d079505732f3401f001c0da987f0cb2e62d09d60f93c41f34f424bdcb4f43c52b54598e8d587384ffb8c9b7eccf48e88f3caef261d3e00761d2c940b2617409d60086caabd8dc6f197a0ee246be8c42b26be8d582cd4dcfdef2f75b2f7ee537d59b2ba5b193e5f0d9b84635cd1b5b5ebf43a1e63674304fa7802aa116a609d14091aa5f2a1d1b9e6fb6b7edeb2ad229ae4353c165aa061d1090d06ae0da40234c545623406a2b76fbf64d11cbc7cc8fbdfeb02346cbce1e6bcb67f50c694d7236951a5bb658749dc51f2488a59a68557bf2417c2f77379f2c209a5168b62c06af7d933938694d530b29a88fb84096785c175005ca512792ae476f0bfe01abdd64cbc2bf7e4aa77b67929dfb5e1413bcca3d4eb7ee5c06f6368032a47a19f2fb560f731304cc1ad23841b74d2585b352b4d37e95670ff7afea02ebd58f823714aa5bbfed8c7987509bd70fbe0b921f06aad821dc72cb2850bb5ff7af2b074d83c2b81c3bbe282f259ea4dfb6b78a12ec7a17944829bb9b6d7e4732a9309c6ba45a45e403c5d65a6123b02a994d75c364e44896e6ce56fe9372f6179d2a8b30f1cde489ffea2d143cadce89cbd68918cfcc64296a477751bc990ccd328c8afc45ecc3fd98afa9e4b3db467e1b5e6b51f6f21117bce49cde5594c6924bb2051168b4887a1820182cc27592e31e7b2b31d78dcb81143d241c3c487b9f30930f61dc43ff1ba9edd357601634345a500101a9b60de69a03e2f9c1f73f95e5bc48c3512a82f5d33e907a5a382de220ebb055c92e6f0c8e3d5d89d255efb5f295284e7795ddfff195b6d9190be60a951ead3771c8b64d5c4a090544c8a28e585097472c0e3fdd950ba6dd18627c2a901e27ca23b0dc9e1bcf82475419b362aaf5fb5f3e40d3a621a0ad309b16380f2f788974fad0f93845e7a5ddcc43ed00dcfac18fa9657b1342cf9ab6081d81d86e4ba6cdf35da6ca1cbd37ece33fa519a93acbb0fe6af819eb0e3d682b74ef428a4de7d9ab898eba341cefe99c43f5f784b1684ca298ac7041ca002b3e0c5cb48d66943ebfac1859efc226354d53460dc3e8bb4e8e2be3eed18e689b0822959d6b085f9f2fcaf4225265bbe1b32b8e2930c3ad73383ed059ace28870bed12bc83b80249e3f537bff154a763f968ac27f4ae717c70536b19844f77aa094fbfe7f7e433b90aa9ef5d3ca52bd4977507af1f896ca8a9c3d9b65cba6e1746cd766adec7c645401595ce7cbf102ad13a8a520a4aa1123103333ffa2e7da548fa5d1009830b95e0411bf690d21985d2a9e020d9eb1bf9e2f4690d6c4bf6f067993539b0c7f09c82a718747860de7fb715815310375993a90bb79e27834dc5d8b981f5bd1335da83b15ff3043a6a99ad672a7987326a98c33e16d82700a77410d5c6e8f350a84cd20eb2f833e98b893ae2423e9ef08a785fca43608440ce662d30bdd01e45d017b1af2555e3648d0153414ffc829e5f4a57be3c89cc1fc5a6fccf9a99987ac15947559568d3e39c0de158573678a40918d42c7cd842f3d7738a5396dd0fa7628ef44c0c7c5d57903b6f9008b3f028db517e4a9aaafc1adaa2d6fbb94d55209a864409a242579ae90b37bac6d5c6a254fb57e844f20266c7b6ce5319ad60c650fda418", @ANYBLOB="cf061acba7f6bd395b07f30f3d201a16910a8972c3be92156d583ed20cdc"]], 0x20) close(r3) 04:09:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1800], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2656.465111][ T3618] FAULT_INJECTION: forcing a failure. [ 2656.465111][ T3618] name failslab, interval 1, probability 0, space 0, times 0 [ 2656.535492][ T3618] CPU: 0 PID: 3618 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2656.543342][ T3618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2656.553415][ T3618] Call Trace: [ 2656.556759][ T3618] dump_stack+0x172/0x1f0 [ 2656.561128][ T3618] should_fail.cold+0xa/0x15 [ 2656.566452][ T3618] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2656.572286][ T3618] ? ___might_sleep+0x163/0x280 [ 2656.577169][ T3618] __should_failslab+0x121/0x190 [ 2656.582127][ T3618] should_failslab+0x9/0x14 [ 2656.586635][ T3618] kmem_cache_alloc+0x2af/0x6f0 [ 2656.591498][ T3618] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 2656.597316][ T3618] ? lock_downgrade+0x880/0x880 [ 2656.602193][ T3618] skb_clone+0x154/0x3d0 [ 2656.606456][ T3618] netlink_broadcast_filtered+0x86e/0xb20 [ 2656.612198][ T3618] netlink_broadcast+0x3a/0x50 [ 2656.616991][ T3618] kobject_uevent_env+0xad4/0x101d [ 2656.622123][ T3618] kobject_uevent+0x20/0x26 [ 2656.626640][ T3618] device_add+0xad8/0x17a0 04:09:59 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) write(r0, &(0x7f0000000080)="1ea8ad6e4a7877058e8329e5b3adae27adbc4498972908dab117a1e27129cc40c9e1585b4aa2a8cad2eddb9f5f7239200b6080f711febe38df84d7958b808af209e438f17824ff1c3341a8ae062cb439042fef28d8f193edaa4c65f6257682f851e0831509d02b66d11d78c29e1c60797c9bb50e835e044817166c7d9af8293d03bf7dfba2c59e74388e2076670fae7ff4255e9187c9cbac82346867e5d86d9d76d1177a447ead2b4e86f5bcf49f163dbfc08e9a7c668e2bc60e97f873f357fba4", 0xc1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x1d, r1}, 0xfffffffffffffdfd, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000840200000000000000000020", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ddc4a2880e6a85f2"], 0xfffffffffffffd5b}}, 0x4000) 04:09:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2656.631070][ T3618] ? get_device_parent.isra.0+0x560/0x560 [ 2656.636805][ T3618] ? start_creating+0x163/0x1e0 [ 2656.641673][ T3618] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2656.647932][ T3618] hci_register_dev+0x2e8/0x860 [ 2656.652803][ T3618] __vhci_create_device+0x2d0/0x5a0 [ 2656.658025][ T3618] vhci_write+0x2d0/0x470 [ 2656.662367][ T3618] new_sync_write+0x4d3/0x770 [ 2656.667056][ T3618] ? new_sync_read+0x800/0x800 [ 2656.671845][ T3618] ? __fget+0x381/0x550 [ 2656.676021][ T3618] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2656.682289][ T3618] ? security_file_permission+0x8f/0x380 [ 2656.688401][ T3618] __vfs_write+0xe1/0x110 [ 2656.692747][ T3618] vfs_write+0x20c/0x580 [ 2656.697006][ T3618] ksys_write+0x14f/0x290 [ 2656.701348][ T3618] ? __ia32_sys_read+0xb0/0xb0 [ 2656.706162][ T3618] ? do_syscall_64+0x26/0x680 [ 2656.710933][ T3618] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2656.717004][ T3618] ? do_syscall_64+0x26/0x680 [ 2656.721697][ T3618] __x64_sys_write+0x73/0xb0 [ 2656.726312][ T3618] do_syscall_64+0xfd/0x680 [ 2656.730831][ T3618] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2656.736740][ T3618] RIP: 0033:0x459279 [ 2656.740644][ T3618] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2656.760258][ T3618] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2656.768676][ T3618] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2656.776640][ T3618] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2656.785527][ T3618] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2656.793487][ T3618] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2656.801444][ T3618] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:10:00 executing program 0 (fault-call:3 fault-nth:42): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:10:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000080)={{0x4, @name="a1601cfa02efaadfca9b1e5e6a3c2e12e5affe8b82d11c998474e550eea6249f"}, 0x8, 0x4, 0x49b0}) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000100)={0x7, 0xfffffffffffeffff, 0x3, 0x256}) close(r0) 04:10:00 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x7fffe, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="010000000200ef1d00006b456ea500310513913aebbbdd0f3c32b88e7461417913e52c557f8d1d31e65f04c20105248c1484008569de57f5773bfee796f044058723b8ecfb11181499bbac", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"], 0x80}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x1, r3}) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x1, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r2}, 0x4, &(0x7f0000000300)={&(0x7f0000000400)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @canfd={{0x2, 0x7, 0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, "ee8968c73d66261183a555b2fa8990653ecd5877b459914bdde75a5ae4310eb74a90754e1e584333518974ab5721f17d43e62c306f52e427d9b881e92b53b65a"}}, 0x80}}, 0x0) 04:10:00 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:10:00 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a56, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:10:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2657.010733][ T3646] FAULT_INJECTION: forcing a failure. [ 2657.010733][ T3646] name failslab, interval 1, probability 0, space 0, times 0 [ 2657.042347][ T3646] CPU: 0 PID: 3646 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2657.050182][ T3646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2657.050190][ T3646] Call Trace: [ 2657.050217][ T3646] dump_stack+0x172/0x1f0 [ 2657.050244][ T3646] should_fail.cold+0xa/0x15 [ 2657.072469][ T3646] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2657.078306][ T3646] ? ___might_sleep+0x163/0x280 [ 2657.083190][ T3646] __should_failslab+0x121/0x190 [ 2657.088139][ T3646] should_failslab+0x9/0x14 [ 2657.092651][ T3646] kmem_cache_alloc+0x2af/0x6f0 [ 2657.097508][ T3646] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 2657.103326][ T3646] ? lock_downgrade+0x880/0x880 [ 2657.108191][ T3646] skb_clone+0x154/0x3d0 [ 2657.108214][ T3646] netlink_broadcast_filtered+0x86e/0xb20 [ 2657.108240][ T3646] netlink_broadcast+0x3a/0x50 [ 2657.118191][ T3646] kobject_uevent_env+0xad4/0x101d [ 2657.118218][ T3646] kobject_uevent+0x20/0x26 [ 2657.128084][ T3646] device_add+0xad8/0x17a0 [ 2657.128112][ T3646] ? get_device_parent.isra.0+0x560/0x560 [ 2657.137006][ T3646] ? start_creating+0x163/0x1e0 [ 2657.137027][ T3646] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2657.137048][ T3646] hci_register_dev+0x2e8/0x860 04:10:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x11000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2657.154353][ T3646] __vhci_create_device+0x2d0/0x5a0 [ 2657.154372][ T3646] vhci_write+0x2d0/0x470 [ 2657.154389][ T3646] new_sync_write+0x4d3/0x770 [ 2657.154410][ T3646] ? new_sync_read+0x800/0x800 [ 2657.164465][ T3646] ? __fget+0x381/0x550 [ 2657.164488][ T3646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2657.164506][ T3646] ? security_file_permission+0x8f/0x380 [ 2657.164532][ T3646] __vfs_write+0xe1/0x110 [ 2657.198603][ T3646] vfs_write+0x20c/0x580 [ 2657.202848][ T3646] ksys_write+0x14f/0x290 [ 2657.207160][ T3646] ? __ia32_sys_read+0xb0/0xb0 [ 2657.211909][ T3646] ? do_syscall_64+0x26/0x680 [ 2657.216587][ T3646] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2657.222666][ T3646] ? do_syscall_64+0x26/0x680 [ 2657.227350][ T3646] __x64_sys_write+0x73/0xb0 [ 2657.231928][ T3646] do_syscall_64+0xfd/0x680 [ 2657.236421][ T3646] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2657.242308][ T3646] RIP: 0033:0x459279 [ 2657.246192][ T3646] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2657.265786][ T3646] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2657.274210][ T3646] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2657.282170][ T3646] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2657.290125][ T3646] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2657.298078][ T3646] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 04:10:00 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:10:00 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="0200"/16, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00fc00000100000407d89171b2ef0000000051d1154ea8ed"], 0x48}}, 0x0) 04:10:00 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a57, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2657.306070][ T3646] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:10:00 executing program 0 (fault-call:3 fault-nth:43): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:10:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000140)={0x7, 0xdef952739d28b3dc, @raw_data=[0x5, 0x9, 0x7, 0x9, 0x6, 0xfffffffffffffff9, 0x100, 0x0, 0xfffffffffffffffd, 0x18, 0x2, 0x9, 0x6, 0x4, 0xffffffff, 0xfffffffffffffffa]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="ff8123b5f941242319b45c9fe285fe7c78f23521b1d55e9f6a9031e275f605e60002f5cec7d8c6f0be6484f92eb0b1a969da877c942694e01d2b32c1088b09acadb0e03ee72e93c51c6e88569ca83cec4bfc9d384704ad4c018c6610007dec067465d95e67791d97561b1e3e6b99a585915e5334fe7060e808e31bbdaa0cf9df3819c8d2df71102f33312522638efbd09a35c94f820ffd1f3330e5c28f975947bf55f7365ba3cb845c0690d1b9edb20df996086e5d224533830c956b7dc4c0788c8ab759e096fdd5c56f2776c81ae83e229e99e31fad8d03"], 0x2) close(r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80080, 0x0) epoll_pwait(r2, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x14, &(0x7f0000000100)={0x6a80000000000000}, 0x8) 04:10:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x100100], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:10:00 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a58, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:10:00 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2657.489943][ T3662] FAULT_INJECTION: forcing a failure. [ 2657.489943][ T3662] name failslab, interval 1, probability 0, space 0, times 0 [ 2657.553617][ T3662] CPU: 1 PID: 3662 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2657.561462][ T3662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2657.571535][ T3662] Call Trace: [ 2657.574849][ T3662] dump_stack+0x172/0x1f0 [ 2657.579210][ T3662] should_fail.cold+0xa/0x15 [ 2657.583829][ T3662] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2657.589659][ T3662] ? ___might_sleep+0x163/0x280 [ 2657.594538][ T3662] __should_failslab+0x121/0x190 [ 2657.599496][ T3662] should_failslab+0x9/0x14 [ 2657.604025][ T3662] kmem_cache_alloc_node_trace+0x26d/0x720 [ 2657.609853][ T3662] ? refcount_dec_and_test_checked+0x1b/0x20 [ 2657.615851][ T3662] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2657.622104][ T3662] ? kobject_put+0x84/0xe0 [ 2657.626548][ T3662] __kmalloc_node_track_caller+0x3d/0x70 [ 2657.632212][ T3662] devm_kmalloc+0x92/0x1a0 [ 2657.643378][ T3662] hci_leds_init+0x32/0x1c0 [ 2657.647900][ T3662] hci_register_dev+0x30c/0x860 04:10:00 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) getsockname$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000580)={@dev, @multicast2, 0x0}, &(0x7f00000005c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vcan0\x00', r1}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r2}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000000), 0x2) [ 2657.647926][ T3662] __vhci_create_device+0x2d0/0x5a0 [ 2657.647946][ T3662] vhci_write+0x2d0/0x470 [ 2657.647966][ T3662] new_sync_write+0x4d3/0x770 [ 2657.647985][ T3662] ? new_sync_read+0x800/0x800 [ 2657.662360][ T3662] ? __fget+0x381/0x550 [ 2657.662385][ T3662] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2657.662405][ T3662] ? security_file_permission+0x8f/0x380 [ 2657.662422][ T3662] __vfs_write+0xe1/0x110 [ 2657.662438][ T3662] vfs_write+0x20c/0x580 [ 2657.662456][ T3662] ksys_write+0x14f/0x290 04:10:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) close(r1) [ 2657.662472][ T3662] ? __ia32_sys_read+0xb0/0xb0 [ 2657.662495][ T3662] ? do_syscall_64+0x26/0x680 [ 2657.711127][ T3662] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2657.717210][ T3662] ? do_syscall_64+0x26/0x680 [ 2657.721903][ T3662] __x64_sys_write+0x73/0xb0 [ 2657.726508][ T3662] do_syscall_64+0xfd/0x680 [ 2657.731028][ T3662] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2657.736929][ T3662] RIP: 0033:0x459279 [ 2657.740834][ T3662] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2657.760535][ T3662] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2657.760550][ T3662] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2657.760558][ T3662] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2657.760567][ T3662] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2657.760575][ T3662] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2657.760584][ T3662] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:10:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:10:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:10:01 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = dup(r0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x4, 0x4, {0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0x1f}, 0x400}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)="f93dd6fa28135f4b520bbd78d78b1d6ed8ac3b4e7cfa8f11960327b3bc5c9a20a7e5fad14bcf72feb8572aec83bf957c8e074e338d49", 0x36}, {&(0x7f0000000480)="391a058d6a3960bc8a4ddc1f8badf84051401e51ffaac8c4ba4f212499d457e6eb013f4e70787db706a38c89578c047acadac2536237d711f40fb34079745f0c0e0d835f3d8dbebf91151378425bdf6308915d2b271830a1d513d5c0c3d52ba3dbcc5e233260ff84fa6fff80e6b6a12575cca3018f991bf3b0b971530d34d78d498296d736c02d42c38fa3f285fac4688ca37d6e3f2206e66ee897e4507d284f5b5a3984a1609639d794edeb4aa85d9931bf0526c3", 0xb5}], 0x2, &(0x7f0000000540)=[{0x50, 0x111, 0x9, "45e8ec8cd1b6cd07dd6956b5f0d29120b651de9a2c29f45a968f8e32ce860202fbc188e3a5ffcd00271309ffa19245920ed3f61684a6450e3f8219d985dd"}, {0x58, 0x84, 0x1f, "0b1d3f459e8af9b719c8ceeb3b38d01c71f7695795fdcb2dba22ac3f9b58faf4a1999e8d845fbfffefc51ad94f9537ba63eb0f0a083da52ace3fceec73b2d24761c0"}, {0xb8, 0x112, 0x1, "2b1e80aa6fb0898498b219a6cb91df460ef279ec2884ccfdad4c9fce98f40be9eaa9f3b0bd4ceed00db513ecd797aae1172d50bfcbb37925d3f6da59180b9703fa9c7fd0c56852e50b357bba1fdc0c3619b9b3961d29c7ba415e6b1c194ecc2bafa6aca70b9cbc32153af82e7b040ecc68682b3ec44bb1048077fe1c9838c2ec9e25f38cd28aab993351225834b95209e96616db16207af9a928e148f6cd9cc93ce20752"}, {0xd0, 0x107, 0x3f, "6c283a26cb3e16e3a2e24e2edbaf103a1cc0bf64d3b57ece2b7d5a3300c1a0f6e205e4780ecb448457b5aaa1ba440545401a18489448719b29af24878673bc4c5f3a81348f0805325e0dc35f6891ad8ed44b7a7a0105d5ab4e7bca4e48019787a005e7a9cd878f3c377cd80359c51d90890fd3adc90d4c1ea0559337a00de7648367a1b0963d46a47bd5877feeae2af9e2b828225f730b2dee85e005e7dc774824c1b92e95e33daaadc56f3e0c184a042467ba8fc76cddec9ce6e5"}, {0xb0, 0x101, 0x8, "1ba68c8373d43bb0c4d27c94a7e75b18e4af1758e5db0ec080b36f6e8319e0e88230c410a65e9bdec5d6a3f8740fcfd4fe72fb71f721f8833b817b6ffd6076b99c3f1e1d993835b2403a91ec913738e0b6d2dfb4673f598d73c49b9c0bd38dc6413d0b33bffd0e7aea51a03b230bf93f0f9e597753deb8ac9c7ccce8eb3fe8186fa752703cbcf5b6955969d2d0067f8f741221dfb83b644cd3538837daa271ba"}, {0x10, 0x11b}, {0xb8, 0x10c, 0x800, "3014e8c9cf2567cea16aa7eaab24b4533690d3023dd3fcd86afa2955af84122ca9bceef9e5556bfb6ac133704103b3dc0f04431b744341649e456dc2425fde16099df8901217e0a7b74c38db99e986b3d22c85266bd51fe35d68955c9028e727885b7d5dabd4381be498293d2bdbb668d98b4a72682099b0adea82aa1bdcd955fda2e3da122ec366f1273ab6b3558d159c894da61ea40c1ec539fc5133d331632d44485e"}], 0x3a8}, 0x0) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r2}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) ppoll(&(0x7f0000000900)=[{r0, 0x4000}, {r1, 0xa000}, {r0, 0x82}, {r1, 0x240}], 0x4, &(0x7f0000000940)={0x0, 0x1c9c380}, &(0x7f0000000980)={0xeb}, 0x8) 04:10:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a59, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:10:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000dab7bb03b47abbbc49fe337e103d250b46c6c35b34c264167d2061430ce3acf960008bcd74c63fb10bb4ff743df4497ed906ddc3cd31dffa5a1bef7d17fb093233fa091bec010782f539238e1a4065acdd5ff49cbacdb06d2a590d359833fed5b88437cc99bec268376a82f4fff46811f4820d25c6a66b0f3f371d5705fe7baa73ee8dd1d78cf25616883c4f80496514c72975251108d1ea985821d3b11e92838a52a2f5364a0cc2e8f779ef5090b324b127c424417b6ee1813342fa72d945a5552a18eb2d6f72e40df4"], 0x2) close(r1) 04:10:01 executing program 0 (fault-call:3 fault-nth:44): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:10:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:10:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a5a, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:10:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:10:01 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x3, 0x101000) perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x8001, 0x5, 0x5, 0x0, 0x0, 0x1, 0x8010, 0x4, 0x5, 0x868a, 0x3, 0x2, 0x6, 0x4, 0xffff, 0x7, 0xffffffff00000000, 0x2, 0xc4f3a68, 0xfff, 0x400, 0x3, 0x1, 0x5e67, 0x6, 0x200, 0x4, 0x2cd, 0x5c4d, 0x8, 0x3, 0xffff, 0x9, 0x7, 0x10001, 0x4, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x200, 0x6, 0x7fff, 0x7, 0x7, 0x7ff, 0x7}, 0x0, 0xc, r2, 0x8) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000feffffff0000009f07000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d1364a273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e78856048827b6f994ca0c60b5825e17cb8659763ebdc8116b566eb0ab0b51f4468cd00dda26983438d8f85419430c5ad39bc4e7c9f034fe5c3c7beb7cf468e2665b61b8d7824535d6ff2cf575ea80cffbe5f14b14d6b271571b8be934cc3f1fda707b466145cee15fce68058"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2658.108938][ T3697] FAULT_INJECTION: forcing a failure. [ 2658.108938][ T3697] name failslab, interval 1, probability 0, space 0, times 0 04:10:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\xbcSQ\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:10:01 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLERRORu(r0, &(0x7f0000000080)={0xd, 0x7, 0x1, {{}, 0x6}}, 0xd) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r2) 04:10:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a5b, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2658.167163][ T3697] CPU: 1 PID: 3697 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2658.175016][ T3697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2658.185086][ T3697] Call Trace: [ 2658.188403][ T3697] dump_stack+0x172/0x1f0 [ 2658.192753][ T3697] should_fail.cold+0xa/0x15 [ 2658.197366][ T3697] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2658.203210][ T3697] ? ___might_sleep+0x163/0x280 [ 2658.208076][ T3697] __should_failslab+0x121/0x190 [ 2658.213036][ T3697] should_failslab+0x9/0x14 [ 2658.217552][ T3697] kmem_cache_alloc_node_trace+0x26d/0x720 [ 2658.223388][ T3697] __kmalloc_node_track_caller+0x3d/0x70 [ 2658.229100][ T3697] ? led_trigger_unregister+0x2f0/0x2f0 [ 2658.234929][ T3697] __devres_alloc_node+0x69/0x160 [ 2658.239976][ T3697] devm_led_trigger_register+0x36/0xd0 [ 2658.245456][ T3697] hci_leds_init+0xee/0x1c0 [ 2658.249984][ T3697] hci_register_dev+0x30c/0x860 [ 2658.254856][ T3697] __vhci_create_device+0x2d0/0x5a0 [ 2658.260075][ T3697] vhci_write+0x2d0/0x470 04:10:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00QS\xbc\xc0\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2658.264425][ T3697] new_sync_write+0x4d3/0x770 [ 2658.269125][ T3697] ? new_sync_read+0x800/0x800 [ 2658.273911][ T3697] ? __fget+0x381/0x550 [ 2658.278126][ T3697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2658.284387][ T3697] ? security_file_permission+0x8f/0x380 [ 2658.290037][ T3697] __vfs_write+0xe1/0x110 [ 2658.294383][ T3697] vfs_write+0x20c/0x580 [ 2658.298645][ T3697] ksys_write+0x14f/0x290 [ 2658.302990][ T3697] ? __ia32_sys_read+0xb0/0xb0 [ 2658.307768][ T3697] ? do_syscall_64+0x26/0x680 [ 2658.307786][ T3697] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2658.307801][ T3697] ? do_syscall_64+0x26/0x680 [ 2658.307820][ T3697] __x64_sys_write+0x73/0xb0 [ 2658.307842][ T3697] do_syscall_64+0xfd/0x680 [ 2658.327843][ T3697] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2658.327856][ T3697] RIP: 0033:0x459279 [ 2658.327874][ T3697] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:10:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:10:01 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xffffffff, 0x200) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f00000000c0)={0x3}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r2}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2658.327883][ T3697] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2658.327898][ T3697] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2658.327906][ T3697] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2658.327923][ T3697] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2658.361806][ T3697] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2658.361815][ T3697] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:10:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:10:01 executing program 0 (fault-call:3 fault-nth:45): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:10:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a5c, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:10:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) r2 = socket(0x1, 0x0, 0x6) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x13, 0x6, 0xffffffff, 0x3a, 0x1000, 0x2, 0x1, 0x80, 0x1, 0x8, 0x1f}, 0xb) 04:10:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:10:01 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f00000000c0)={0x7, 0x9, 0x3, 0x5, 0x3, 0x3ff}) 04:10:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:10:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:10:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a5d, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:10:02 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x800, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {r3, r4/1000+30000}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:10:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:10:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x61a, &(0x7f0000000100)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40000, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x8e, 0x4) close(r1) [ 2658.856676][ T3745] FAULT_INJECTION: forcing a failure. [ 2658.856676][ T3745] name failslab, interval 1, probability 0, space 0, times 0 04:10:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a5e, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2658.983408][ T3745] CPU: 1 PID: 3745 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2658.991256][ T3745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2659.001322][ T3745] Call Trace: [ 2659.004635][ T3745] dump_stack+0x172/0x1f0 [ 2659.004663][ T3745] should_fail.cold+0xa/0x15 [ 2659.004686][ T3745] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2659.019389][ T3745] ? ___might_sleep+0x163/0x280 [ 2659.019412][ T3745] __should_failslab+0x121/0x190 [ 2659.019438][ T3745] should_failslab+0x9/0x14 [ 2659.033703][ T3745] kmem_cache_alloc_node_trace+0x26d/0x720 [ 2659.039519][ T3745] ? refcount_dec_and_test_checked+0x1b/0x20 [ 2659.039537][ T3745] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2659.039552][ T3745] ? kobject_put+0x84/0xe0 [ 2659.039573][ T3745] __kmalloc_node_track_caller+0x3d/0x70 [ 2659.056175][ T3745] devm_kmalloc+0x92/0x1a0 [ 2659.056197][ T3745] hci_leds_init+0x32/0x1c0 [ 2659.056216][ T3745] hci_register_dev+0x30c/0x860 [ 2659.056239][ T3745] __vhci_create_device+0x2d0/0x5a0 [ 2659.080807][ T3745] vhci_write+0x2d0/0x470 [ 2659.080828][ T3745] new_sync_write+0x4d3/0x770 [ 2659.080846][ T3745] ? new_sync_read+0x800/0x800 [ 2659.094609][ T3745] ? __fget+0x381/0x550 [ 2659.098779][ T3745] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2659.105025][ T3745] ? security_file_permission+0x8f/0x380 [ 2659.105044][ T3745] __vfs_write+0xe1/0x110 [ 2659.105062][ T3745] vfs_write+0x20c/0x580 [ 2659.105082][ T3745] ksys_write+0x14f/0x290 [ 2659.105097][ T3745] ? __ia32_sys_read+0xb0/0xb0 [ 2659.105116][ T3745] ? do_syscall_64+0x26/0x680 [ 2659.105132][ T3745] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2659.105145][ T3745] ? do_syscall_64+0x26/0x680 [ 2659.105165][ T3745] __x64_sys_write+0x73/0xb0 [ 2659.105182][ T3745] do_syscall_64+0xfd/0x680 [ 2659.105198][ T3745] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2659.105209][ T3745] RIP: 0033:0x459279 [ 2659.105230][ T3745] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2659.128451][ T3745] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2659.128467][ T3745] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2659.128476][ T3745] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2659.128485][ T3745] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2659.128494][ T3745] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2659.128502][ T3745] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:10:02 executing program 0 (fault-call:3 fault-nth:46): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:10:02 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:10:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:10:02 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x4000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r1, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r2}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:10:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a5f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:10:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000000)='/!^\x00') 04:10:02 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:10:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a60, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:10:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:10:02 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000feffffffea00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2659.449452][ T3775] FAULT_INJECTION: forcing a failure. [ 2659.449452][ T3775] name failslab, interval 1, probability 0, space 0, times 0 [ 2659.568886][ T3775] CPU: 0 PID: 3775 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2659.576741][ T3775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2659.586804][ T3775] Call Trace: [ 2659.590131][ T3775] dump_stack+0x172/0x1f0 [ 2659.594496][ T3775] should_fail.cold+0xa/0x15 [ 2659.599120][ T3775] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2659.604949][ T3775] ? ___might_sleep+0x163/0x280 [ 2659.609816][ T3775] __should_failslab+0x121/0x190 [ 2659.614781][ T3775] should_failslab+0x9/0x14 [ 2659.619296][ T3775] kmem_cache_alloc_node_trace+0x26d/0x720 [ 2659.625130][ T3775] __kmalloc_node_track_caller+0x3d/0x70 [ 2659.630770][ T3775] ? led_trigger_unregister+0x2f0/0x2f0 [ 2659.636326][ T3775] __devres_alloc_node+0x69/0x160 [ 2659.641355][ T3775] devm_led_trigger_register+0x36/0xd0 [ 2659.656303][ T3775] hci_leds_init+0xee/0x1c0 [ 2659.660824][ T3775] hci_register_dev+0x30c/0x860 [ 2659.665698][ T3775] __vhci_create_device+0x2d0/0x5a0 [ 2659.670912][ T3775] vhci_write+0x2d0/0x470 [ 2659.675264][ T3775] new_sync_write+0x4d3/0x770 [ 2659.679951][ T3775] ? new_sync_read+0x800/0x800 [ 2659.679976][ T3775] ? __fget+0x381/0x550 [ 2659.680000][ T3775] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2659.680024][ T3775] ? security_file_permission+0x8f/0x380 [ 2659.696762][ T3775] __vfs_write+0xe1/0x110 [ 2659.696780][ T3775] vfs_write+0x20c/0x580 [ 2659.696804][ T3775] ksys_write+0x14f/0x290 [ 2659.715316][ T3775] ? __ia32_sys_read+0xb0/0xb0 [ 2659.720105][ T3775] ? do_syscall_64+0x26/0x680 [ 2659.724799][ T3775] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2659.730881][ T3775] ? do_syscall_64+0x26/0x680 [ 2659.735575][ T3775] __x64_sys_write+0x73/0xb0 [ 2659.740185][ T3775] do_syscall_64+0xfd/0x680 [ 2659.744708][ T3775] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2659.750608][ T3775] RIP: 0033:0x459279 04:10:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a61, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:10:02 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) accept4$bt_l2cap(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x80800) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r2, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x113, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r4}}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r3}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2659.754597][ T3775] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2659.774213][ T3775] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2659.782669][ T3775] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2659.782679][ T3775] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2659.782686][ T3775] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2659.782695][ T3775] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2659.782703][ T3775] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:10:03 executing program 0 (fault-call:3 fault-nth:47): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:10:03 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet6_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000400)=""/249, &(0x7f0000000500)=0xf9) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000a6ed65d4ce819c8df3f909d13642673a15fcd979b0630f1f4fc3972347c352c865554a2c5661b02dd35fb36a2c22591eacbdb75fe967013286da68f6fa5c0654b44404458a7aa6ea2bf4b973489a459ce5b1f972116f94751109cd69a8f1859e352ec95cba2f0dbc39939672d9c2a3ab1ac7ea270f982d8de4494d49e53ae717db0a"], 0x80}}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x40000, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000100)=0x4, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000540)) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000680)=0x1, &(0x7f00000006c0)=0x4) getpeername$tipc(r3, &(0x7f00000001c0), &(0x7f0000000240)=0x10) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r2}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000000000ccb3053f00", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00020000010000000000000000000000ddc4a2880e6a85f2"], 0x48}}, 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8, 0x2000) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) 04:10:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="af81d7977942d80fed2655224c28efde0d7f9d0d7b6453f08775279425441aafcceed3df4bf81e4afea64d5ffff9c758c42194a546c03f2687047fd15ba5b640eafea477671b5f50b1be7ecc32479b76e7a29f6a3fb80bcb41cbc4720f37aba34e65b94270c09919c2f5a8a381ef65f2a7b2996fbccab79400d799afab4e942c18cec5b5333561885a825e288dd0a7cf35f63a7adf46945ea7d8b9ee414f3f7b92980d6cc9f9fd78a8dd90d74c5547af00c4afbf6a8fd3b1d9d0bddd478e78ff50a556db2f23a26461437a0ce27d43"], 0x2) close(r1) 04:10:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:10:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:10:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a62, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:10:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="07001f0000000000000000878c2cc1003d4d7716ba59244fc2692578170e01"], 0x2) close(r1) 04:10:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x9000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:10:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:10:03 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0x815, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x37b}}, 0x0) accept(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x80) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2659.989322][ T3804] FAULT_INJECTION: forcing a failure. [ 2659.989322][ T3804] name failslab, interval 1, probability 0, space 0, times 0 04:10:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a63, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2660.087541][ T3804] CPU: 0 PID: 3804 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2660.095391][ T3804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2660.105460][ T3804] Call Trace: [ 2660.108773][ T3804] dump_stack+0x172/0x1f0 [ 2660.113135][ T3804] should_fail.cold+0xa/0x15 [ 2660.117743][ T3804] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2660.123567][ T3804] ? ___might_sleep+0x163/0x280 [ 2660.128440][ T3804] __should_failslab+0x121/0x190 [ 2660.133398][ T3804] should_failslab+0x9/0x14 [ 2660.137916][ T3804] kmem_cache_alloc_node_trace+0x26d/0x720 [ 2660.143747][ T3804] __kmalloc_node_track_caller+0x3d/0x70 [ 2660.149413][ T3804] ? led_trigger_unregister+0x2f0/0x2f0 [ 2660.154976][ T3804] __devres_alloc_node+0x69/0x160 [ 2660.160030][ T3804] devm_led_trigger_register+0x36/0xd0 [ 2660.165510][ T3804] hci_leds_init+0xee/0x1c0 [ 2660.170032][ T3804] hci_register_dev+0x30c/0x860 [ 2660.174905][ T3804] __vhci_create_device+0x2d0/0x5a0 [ 2660.180132][ T3804] vhci_write+0x2d0/0x470 [ 2660.184486][ T3804] new_sync_write+0x4d3/0x770 [ 2660.189179][ T3804] ? new_sync_read+0x800/0x800 [ 2660.193962][ T3804] ? __fget+0x381/0x550 [ 2660.198141][ T3804] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2660.204391][ T3804] ? security_file_permission+0x8f/0x380 [ 2660.210036][ T3804] __vfs_write+0xe1/0x110 [ 2660.214379][ T3804] vfs_write+0x20c/0x580 [ 2660.218639][ T3804] ksys_write+0x14f/0x290 [ 2660.222981][ T3804] ? __ia32_sys_read+0xb0/0xb0 [ 2660.227760][ T3804] ? do_syscall_64+0x26/0x680 [ 2660.232458][ T3804] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 04:10:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2660.238540][ T3804] ? do_syscall_64+0x26/0x680 [ 2660.243239][ T3804] __x64_sys_write+0x73/0xb0 [ 2660.247845][ T3804] do_syscall_64+0xfd/0x680 [ 2660.252367][ T3804] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2660.252381][ T3804] RIP: 0033:0x459279 [ 2660.252397][ T3804] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2660.252406][ T3804] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2660.252421][ T3804] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2660.252429][ T3804] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2660.252437][ T3804] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2660.252445][ T3804] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2660.252453][ T3804] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:10:03 executing program 0 (fault-call:3 fault-nth:48): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:10:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:10:03 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000feffffff0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000100784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52e1cd65030195393e"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="0200"/16, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000dd030000006a85f2"], 0x48}}, 0x0) 04:10:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) socket$nl_route(0x10, 0x3, 0x0) 04:10:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a64, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:10:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xa000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:10:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:10:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a65, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:10:03 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000000c0)) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="02000000000000000000000000002000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="09001a3d00000000000e6a85f200"/24], 0x48}}, 0x0) 04:10:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:10:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x2) close(r1) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x440) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000100)=[@enter_looper], 0x21, 0x0, &(0x7f0000000140)="9e81b27da48670199d2722ed12c049c7369ca2eb536c9c17b51c535078ee6bc9de"}) accept4$llc(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x800) [ 2660.609023][ T3836] FAULT_INJECTION: forcing a failure. [ 2660.609023][ T3836] name failslab, interval 1, probability 0, space 0, times 0 [ 2660.650387][ T3836] CPU: 1 PID: 3836 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2660.658240][ T3836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2660.668303][ T3836] Call Trace: [ 2660.668335][ T3836] dump_stack+0x172/0x1f0 [ 2660.668359][ T3836] should_fail.cold+0xa/0x15 [ 2660.668379][ T3836] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2660.668402][ T3836] ? ___might_sleep+0x163/0x280 [ 2660.668425][ T3836] __should_failslab+0x121/0x190 [ 2660.668447][ T3836] should_failslab+0x9/0x14 [ 2660.668462][ T3836] kmem_cache_alloc_node_trace+0x26d/0x720 [ 2660.668493][ T3836] __kmalloc_node_track_caller+0x3d/0x70 [ 2660.712157][ T3836] ? led_trigger_unregister+0x2f0/0x2f0 [ 2660.717722][ T3836] __devres_alloc_node+0x69/0x160 [ 2660.722769][ T3836] devm_led_trigger_register+0x36/0xd0 [ 2660.728239][ T3836] hci_leds_init+0xee/0x1c0 [ 2660.728259][ T3836] hci_register_dev+0x30c/0x860 [ 2660.728283][ T3836] __vhci_create_device+0x2d0/0x5a0 [ 2660.737639][ T3836] vhci_write+0x2d0/0x470 [ 2660.737665][ T3836] new_sync_write+0x4d3/0x770 [ 2660.751851][ T3836] ? new_sync_read+0x800/0x800 [ 2660.756642][ T3836] ? __fget+0x381/0x550 [ 2660.760819][ T3836] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2660.767077][ T3836] ? security_file_permission+0x8f/0x380 [ 2660.772724][ T3836] __vfs_write+0xe1/0x110 [ 2660.777079][ T3836] vfs_write+0x20c/0x580 [ 2660.781349][ T3836] ksys_write+0x14f/0x290 [ 2660.785783][ T3836] ? __ia32_sys_read+0xb0/0xb0 [ 2660.790563][ T3836] ? do_syscall_64+0x26/0x680 [ 2660.795273][ T3836] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2660.801353][ T3836] ? do_syscall_64+0x26/0x680 [ 2660.806054][ T3836] __x64_sys_write+0x73/0xb0 [ 2660.810663][ T3836] do_syscall_64+0xfd/0x680 [ 2660.815186][ T3836] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2660.821176][ T3836] RIP: 0033:0x459279 [ 2660.825089][ T3836] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:10:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2660.844783][ T3836] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2660.853209][ T3836] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2660.861196][ T3836] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2660.869179][ T3836] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2660.877159][ T3836] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2660.885142][ T3836] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:10:04 executing program 0 (fault-call:3 fault-nth:49): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:10:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a66, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:10:04 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="02000000ed7100"/16, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ddc4a2880e6a85f2"], 0x48}}, 0x0) 04:10:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc0\xbcSQ\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:10:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x2) close(r1) 04:10:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xc000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:10:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a67, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:10:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:10:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xd000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:10:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x20, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000000c0)=0x3, 0x4) sendmmsg(r2, &(0x7f0000007e00), 0x26e, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x7, 0xfffffffffffffffc, 0x8000}) write$P9_RLERRORu(r3, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x2) close(r3) 04:10:04 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) [ 2661.185914][ T3863] FAULT_INJECTION: forcing a failure. [ 2661.185914][ T3863] name failslab, interval 1, probability 0, space 0, times 0 [ 2661.251201][ T3863] CPU: 1 PID: 3863 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2661.259061][ T3863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2661.269130][ T3863] Call Trace: [ 2661.272443][ T3863] dump_stack+0x172/0x1f0 [ 2661.276804][ T3863] should_fail.cold+0xa/0x15 [ 2661.281416][ T3863] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2661.287248][ T3863] ? ___might_sleep+0x163/0x280 [ 2661.292128][ T3863] __should_failslab+0x121/0x190 [ 2661.297076][ T3863] should_failslab+0x9/0x14 [ 2661.301601][ T3863] kmem_cache_alloc_trace+0x2ce/0x750 [ 2661.307001][ T3863] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2661.313255][ T3863] ? refcount_inc_checked+0x2b/0x70 [ 2661.318470][ T3863] device_add+0xf4f/0x17a0 [ 2661.322891][ T3863] ? device_initialize+0x440/0x440 [ 2661.328007][ T3863] ? lockdep_init_map+0x1be/0x6d0 [ 2661.333049][ T3863] ? get_device_parent.isra.0+0x560/0x560 [ 2661.338885][ T3863] rfkill_register+0x1bf/0xb50 [ 2661.343666][ T3863] hci_register_dev+0x369/0x860 [ 2661.348534][ T3863] __vhci_create_device+0x2d0/0x5a0 [ 2661.353748][ T3863] vhci_write+0x2d0/0x470 [ 2661.358093][ T3863] new_sync_write+0x4d3/0x770 [ 2661.362779][ T3863] ? new_sync_read+0x800/0x800 [ 2661.367562][ T3863] ? __fget+0x381/0x550 [ 2661.371734][ T3863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2661.377985][ T3863] ? security_file_permission+0x8f/0x380 [ 2661.383637][ T3863] __vfs_write+0xe1/0x110 [ 2661.387978][ T3863] vfs_write+0x20c/0x580 [ 2661.392234][ T3863] ksys_write+0x14f/0x290 [ 2661.396579][ T3863] ? __ia32_sys_read+0xb0/0xb0 [ 2661.401372][ T3863] ? do_syscall_64+0x26/0x680 [ 2661.406064][ T3863] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2661.412149][ T3863] ? do_syscall_64+0x26/0x680 [ 2661.416839][ T3863] __x64_sys_write+0x73/0xb0 [ 2661.421442][ T3863] do_syscall_64+0xfd/0x680 [ 2661.425957][ T3863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2661.431852][ T3863] RIP: 0033:0x459279 [ 2661.435761][ T3863] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2661.455384][ T3863] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2661.463816][ T3863] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2661.471796][ T3863] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2661.479785][ T3863] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2661.487774][ T3863] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 04:10:04 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) r1 = dup(r0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000000c0)=""/113) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r2}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2661.495762][ T3863] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:10:04 executing program 0 (fault-call:3 fault-nth:50): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:10:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a68, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:10:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:10:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:10:04 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0100000800000000005eec2ecc00000000000000000000003a", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"], 0x80}}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0xa0000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1d}}, 0x3}, @in6={0xa, 0x4e23, 0x7b74, @remote, 0x678}, @in={0x2, 0x4e24, @local}], 0x68) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000100)=0x0) fcntl$setown(r3, 0x8, r4) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f00000000c0)={0x8001005, 0xc36, 0x2}) 04:10:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:10:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0xf000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) [ 2661.824774][ T3888] FAULT_INJECTION: forcing a failure. [ 2661.824774][ T3888] name failslab, interval 1, probability 0, space 0, times 0 04:10:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a69, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2661.906332][ T3888] CPU: 0 PID: 3888 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2661.914188][ T3888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2661.924262][ T3888] Call Trace: [ 2661.927585][ T3888] dump_stack+0x172/0x1f0 [ 2661.931948][ T3888] should_fail.cold+0xa/0x15 [ 2661.936561][ T3888] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2661.942399][ T3888] ? ___might_sleep+0x163/0x280 [ 2661.947273][ T3888] __should_failslab+0x121/0x190 [ 2661.952231][ T3888] should_failslab+0x9/0x14 [ 2661.956745][ T3888] __kmalloc_track_caller+0x2d5/0x740 [ 2661.962132][ T3888] ? console_unlock+0x689/0xec0 [ 2661.966998][ T3888] ? find_held_lock+0x35/0x130 [ 2661.971785][ T3888] ? kstrdup_const+0x66/0x80 [ 2661.976403][ T3888] kstrdup+0x3a/0x70 [ 2661.980319][ T3888] kstrdup_const+0x66/0x80 [ 2661.984751][ T3888] __kernfs_new_node+0xb1/0x6c0 [ 2661.989620][ T3888] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2661.995106][ T3888] ? debug_smp_processor_id+0x3c/0x280 [ 2662.000592][ T3888] ? tick_nohz_tick_stopped+0x1a/0x90 [ 2662.005985][ T3888] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2662.012256][ T3888] ? __irq_work_queue_local+0xaf/0x170 [ 2662.017740][ T3888] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2662.024005][ T3888] ? irq_work_queue+0x30/0x90 [ 2662.028702][ T3888] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2662.034963][ T3888] ? wake_up_klogd+0x99/0xd0 [ 2662.039577][ T3888] kernfs_new_node+0x96/0x120 [ 2662.044279][ T3888] kernfs_create_dir_ns+0x52/0x160 [ 2662.049400][ T3888] sysfs_create_dir_ns+0x131/0x2a0 [ 2662.054518][ T3888] ? sysfs_create_mount_point+0xa0/0xa0 [ 2662.060081][ T3888] kobject_add_internal.cold+0x116/0x662 [ 2662.065733][ T3888] kobject_add+0x150/0x1c0 [ 2662.070241][ T3888] ? kset_create_and_add+0x1a0/0x1a0 [ 2662.075532][ T3888] ? lockdep_init_map+0x1be/0x6d0 [ 2662.080561][ T3888] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2662.086820][ T3888] device_add+0x3b7/0x17a0 [ 2662.091249][ T3888] ? get_device_parent.isra.0+0x560/0x560 [ 2662.097007][ T3888] rfkill_register+0x1bf/0xb50 [ 2662.101794][ T3888] hci_register_dev+0x369/0x860 [ 2662.106656][ T3888] __vhci_create_device+0x2d0/0x5a0 [ 2662.111951][ T3888] vhci_write+0x2d0/0x470 [ 2662.116464][ T3888] new_sync_write+0x4d3/0x770 [ 2662.121408][ T3888] ? new_sync_read+0x800/0x800 [ 2662.126181][ T3888] ? __fget+0x381/0x550 [ 2662.130341][ T3888] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2662.136587][ T3888] ? security_file_permission+0x8f/0x380 [ 2662.142246][ T3888] __vfs_write+0xe1/0x110 [ 2662.146580][ T3888] vfs_write+0x20c/0x580 [ 2662.150826][ T3888] ksys_write+0x14f/0x290 [ 2662.155159][ T3888] ? __ia32_sys_read+0xb0/0xb0 [ 2662.159928][ T3888] ? do_syscall_64+0x26/0x680 [ 2662.164635][ T3888] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2662.170705][ T3888] ? do_syscall_64+0x26/0x680 [ 2662.175390][ T3888] __x64_sys_write+0x73/0xb0 [ 2662.179982][ T3888] do_syscall_64+0xfd/0x680 [ 2662.186758][ T3888] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2662.192652][ T3888] RIP: 0033:0x459279 [ 2662.196545][ T3888] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2662.216151][ T3888] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2662.224569][ T3888] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2662.232539][ T3888] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2662.240516][ T3888] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2662.248494][ T3888] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 04:10:05 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2662.256576][ T3888] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 [ 2662.351930][ T3888] kobject_add_internal failed for rfkill209 (error: -12 parent: hci1) 04:10:06 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r0 = accept(0xffffffffffffffff, &(0x7f0000000100)=@rc, &(0x7f0000000000)=0x80) sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="47bf05ffca6eb87215782e9c3ee5cf3fbc1253f420bd8f439710341054f1c5ad35b491ba4f419a9ca06e333a288188bcb2bbb1860c9f74f401283ea91ca8cf4232ee5dc7bd2ebd1a83c96b0fd51b5ed08f", 0x51}, {&(0x7f00000003c0)="1e15aa0a4c098df2ecae071566c92ef7687cc99b12ae61ac1198fb3de5cf5e31205ce79415d01cd67c46cf46bc3d0f32834c3fa71bfb87db244125203e7ee1b57f16e8210954d8a75f55ca80edc238a122b5b99db5b30756846b95b4d3ac66c1e7274c3aa97c6e44c5cae556d7fdfd49b34e909be9f97685c6678350a55c3aef493c504ff5bf44a4381cb2031fd681026b17f44acc9210e3189996772cf5001f3449bcf0312037e871ab35292a3371dd247baff744d750cc3aeb08536ac4171bcd06a9558659a76f2ebbb4d9ec29177f458b70189c", 0xd5}, {&(0x7f00000004c0)="9347af9c99d8918b26fe447d87df99c2ffc471d440b85862ef28f318261852751622a57ecddb653382873fbe1258cc4c9adb7aa3b8d66dcd944b8825c0f22db88a51c2ce12a7101f47899bd6f7", 0x4d}], 0x3}, 0x4040000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x7fff, 0x401}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e20, 0x1ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}, 0x0, 0x53b7, 0x7fff, 0x40, 0x3}, &(0x7f0000000280)=0x98) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="a30c"], 0x2) close(r2) getpeername$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @initdev}, &(0x7f0000000300)=0x10) 04:10:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a6a, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:10:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x10000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:10:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:10:06 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) 04:10:06 executing program 0 (fault-call:3 fault-nth:51): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:10:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a6b, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:10:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2663.074439][ T3910] FAULT_INJECTION: forcing a failure. [ 2663.074439][ T3910] name failslab, interval 1, probability 0, space 0, times 0 04:10:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x994, 0x400) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000100)=""/255) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r2) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000080)=0x1) 04:10:06 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x1, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f00000000c0)={0xb, {0x7, 0xfffffffffffffffd, 0x6, 0x9}}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2663.161835][ T3910] CPU: 0 PID: 3910 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2663.169703][ T3910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2663.179955][ T3910] Call Trace: [ 2663.183274][ T3910] dump_stack+0x172/0x1f0 [ 2663.187633][ T3910] should_fail.cold+0xa/0x15 [ 2663.192258][ T3910] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2663.198101][ T3910] ? ___might_sleep+0x163/0x280 [ 2663.202970][ T3910] __should_failslab+0x121/0x190 04:10:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2663.207933][ T3910] should_failslab+0x9/0x14 [ 2663.212470][ T3910] kmem_cache_alloc+0x2af/0x6f0 [ 2663.217368][ T3910] ? mutex_unlock+0xd/0x10 [ 2663.217389][ T3910] __kernfs_new_node+0xf0/0x6c0 [ 2663.217416][ T3910] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2663.226676][ T3910] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2663.226694][ T3910] ? __kernfs_create_file+0x2a3/0x340 [ 2663.226712][ T3910] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 2663.226728][ T3910] ? find_held_lock+0x35/0x130 [ 2663.226751][ T3910] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 04:10:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x11000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:10:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2663.250152][ T3910] ? kasan_check_write+0x14/0x20 [ 2663.250175][ T3910] kernfs_new_node+0x96/0x120 [ 2663.250201][ T3910] kernfs_create_link+0xd7/0x250 [ 2663.275645][ T3910] sysfs_do_create_link_sd.isra.0+0x90/0x140 [ 2663.281643][ T3910] sysfs_create_link+0x65/0xc0 [ 2663.286428][ T3910] device_add+0x635/0x17a0 [ 2663.290869][ T3910] ? get_device_parent.isra.0+0x560/0x560 [ 2663.296609][ T3910] rfkill_register+0x1bf/0xb50 [ 2663.301393][ T3910] hci_register_dev+0x369/0x860 [ 2663.306279][ T3910] __vhci_create_device+0x2d0/0x5a0 [ 2663.311524][ T3910] vhci_write+0x2d0/0x470 [ 2663.315872][ T3910] new_sync_write+0x4d3/0x770 [ 2663.320564][ T3910] ? new_sync_read+0x800/0x800 [ 2663.325346][ T3910] ? __fget+0x381/0x550 [ 2663.329522][ T3910] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2663.329543][ T3910] ? security_file_permission+0x8f/0x380 [ 2663.329562][ T3910] __vfs_write+0xe1/0x110 [ 2663.329580][ T3910] vfs_write+0x20c/0x580 [ 2663.329606][ T3910] ksys_write+0x14f/0x290 [ 2663.354347][ T3910] ? __ia32_sys_read+0xb0/0xb0 [ 2663.359133][ T3910] ? do_syscall_64+0x26/0x680 [ 2663.359152][ T3910] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2663.359167][ T3910] ? do_syscall_64+0x26/0x680 [ 2663.359188][ T3910] __x64_sys_write+0x73/0xb0 [ 2663.359207][ T3910] do_syscall_64+0xfd/0x680 [ 2663.359225][ T3910] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2663.359243][ T3910] RIP: 0033:0x459279 [ 2663.383711][ T3910] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2663.383720][ T3910] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2663.383736][ T3910] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2663.383744][ T3910] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2663.383753][ T3910] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2663.383762][ T3910] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2663.383771][ T3910] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:10:06 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x115000, 0x0) ioctl$SIOCRSACCEPT(r2, 0x89e3) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 04:10:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x12000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:10:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a6c, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:10:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:10:06 executing program 0 (fault-call:3 fault-nth:52): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:10:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x40000) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x7f, 0xffffffffffff0004, 0xd7f9, 0x8001, 0x8, 0x6, 0xfffffffffffffffc}, 0x1c) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r1) 04:10:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a6d, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:10:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2663.717401][ T3941] FAULT_INJECTION: forcing a failure. [ 2663.717401][ T3941] name failslab, interval 1, probability 0, space 0, times 0 04:10:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a6e, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) [ 2663.790075][ T3941] CPU: 0 PID: 3941 Comm: syz-executor.0 Not tainted 5.2.0-rc4 #25 [ 2663.797950][ T3941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2663.808016][ T3941] Call Trace: [ 2663.811325][ T3941] dump_stack+0x172/0x1f0 [ 2663.815676][ T3941] should_fail.cold+0xa/0x15 [ 2663.821071][ T3941] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2663.826902][ T3941] ? ___might_sleep+0x163/0x280 [ 2663.831796][ T3941] __should_failslab+0x121/0x190 04:10:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2663.836743][ T3941] should_failslab+0x9/0x14 [ 2663.841247][ T3941] kmem_cache_alloc+0x2af/0x6f0 [ 2663.846124][ T3941] ? mutex_unlock+0xd/0x10 [ 2663.850555][ T3941] __kernfs_new_node+0xf0/0x6c0 [ 2663.855422][ T3941] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2663.860895][ T3941] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2663.867158][ T3941] ? __kernfs_create_file+0x2a3/0x340 [ 2663.872547][ T3941] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 2663.878719][ T3941] ? find_held_lock+0x35/0x130 [ 2663.883499][ T3941] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 2663.889662][ T3941] ? kasan_check_write+0x14/0x20 [ 2663.894611][ T3941] kernfs_new_node+0x96/0x120 [ 2663.894632][ T3941] kernfs_create_link+0xd7/0x250 [ 2663.894653][ T3941] sysfs_do_create_link_sd.isra.0+0x90/0x140 [ 2663.894670][ T3941] sysfs_create_link+0x65/0xc0 [ 2663.894688][ T3941] device_add+0x635/0x17a0 [ 2663.894709][ T3941] ? get_device_parent.isra.0+0x560/0x560 [ 2663.894733][ T3941] rfkill_register+0x1bf/0xb50 [ 2663.929950][ T3941] hci_register_dev+0x369/0x860 [ 2663.934832][ T3941] __vhci_create_device+0x2d0/0x5a0 [ 2663.940047][ T3941] vhci_write+0x2d0/0x470 [ 2663.944394][ T3941] new_sync_write+0x4d3/0x770 [ 2663.949096][ T3941] ? new_sync_read+0x800/0x800 [ 2663.953879][ T3941] ? __fget+0x381/0x550 [ 2663.958060][ T3941] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2663.964330][ T3941] ? security_file_permission+0x8f/0x380 [ 2663.969982][ T3941] __vfs_write+0xe1/0x110 [ 2663.974329][ T3941] vfs_write+0x20c/0x580 [ 2663.978588][ T3941] ksys_write+0x14f/0x290 [ 2663.982956][ T3941] ? __ia32_sys_read+0xb0/0xb0 [ 2663.987735][ T3941] ? do_syscall_64+0x26/0x680 [ 2663.992429][ T3941] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2663.998507][ T3941] ? do_syscall_64+0x26/0x680 [ 2664.003204][ T3941] __x64_sys_write+0x73/0xb0 [ 2664.007898][ T3941] do_syscall_64+0xfd/0x680 [ 2664.012427][ T3941] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2664.018332][ T3941] RIP: 0033:0x459279 [ 2664.022242][ T3941] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2664.041861][ T3941] RSP: 002b:00007f66ac5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2664.050295][ T3941] RAX: ffffffffffffffda RBX: 00007f66ac5b3c90 RCX: 0000000000459279 [ 2664.068787][ T3941] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2664.076779][ T3941] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 04:10:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x13000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:10:07 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x802, 0x0) write$ppp(r1, &(0x7f0000000480)="fa88f9b70f50bdcd6728c689fa6e3f975b67638462ada9071f49b9f7deb85cfa9b67d3d344b3aa368f98a6c8ef1c775f2b321dfcad7840ab5189225c0adc7d04706b9d4a45148cee9fdd4113879b54a20e47404a87fb3938544cb6854de5b9a8541e70cf4d235fbce9c83cc236e3889be920e9bc9795fa8f576cab07e10c3e7eb215dbd27c94261c680fbac0f33591083c4b78065180ce11d4449273c3fb3a687016130fc4ea24883cfd3e1913ace18782193aed82a6df1222ce86a3552f80c0b272272b9b53b27202a9103c12167363cd08051fe7b4", 0xd6) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000400)={0x1, 0xfffffffffffffffe, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "784e8b4be98e9414118b6ad150f5070da6ed65d4ce819c8df3f909d13642273a15fcd979b0630f1f4fc361b02dd35fb36a2c22591e499b52eecd65030195393e"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r2}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000002, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) [ 2664.084773][ T3941] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66ac5b46d4 [ 2664.092766][ T3941] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 0000000000000005 04:10:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) 04:10:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x14000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:10:07 executing program 0 (fault-call:3 fault-nth:53): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) 04:10:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4000000004, 0x8000000000a6f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x3c) 04:10:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0xc8, "91267e8070d15ed66e9e83acbf79540a34367639da0f8c986913381f8a2f66bff4fc36bd3f98a9b66d6a2b5d60526aa7098b3c98c2d50a9cb22a5123412236be55e0162d6f13cd9cd505f6198335b774ec3ed3db30a13afa553640f40a316a1a36b60bca8d8a238f1f35f50381aa4ffff882a4625f61e2263b442b56634c09b5a22582b4e5163d8d7a443d855df3239f9106d35f2452e93a5e14320f49380dcd5a42aba521329e4cd3d20fcf71ff7f632c6a343a74d8d7bd3a1acaebc9b19d4834b9cfa0c5a7b282"}, &(0x7f0000000080)=0xd0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000200)={r2, 0xf8d1}, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r3) 04:10:07 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 04:10:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x12, 0xfe, 0x4, 0x400, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x15000000], 0x0, 0xffffffffffffffff, 0x4}, 0x1a6) 04:10:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x7fffffff, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "23718d46f3ed2efb", "3b1e230287d36188f79c7e0574ddc5203ec515af9c7aae47ab2c8c8f380d1368"}) [ 2664.475238][ T3972] ------------[ cut here ]------------ [ 2664.501910][ T3972] refcount_t: increment on 0; use-after-free. [ 2664.509375][ T3972] WARNING: CPU: 1 PID: 3972 at lib/refcount.c:156 refcount_inc_checked+0x61/0x70 [ 2664.518599][ T3972] Kernel panic - not syncing: panic_on_warn set ... [ 2664.525212][ T3972] CPU: 1 PID: 3972 Comm: syz-executor.2 Not tainted 5.2.0-rc4 #25 [ 2664.533023][ T3972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2664.543088][ T3972] Call Trace: [ 2664.546396][ T3972] dump_stack+0x172/0x1f0 [ 2664.550746][ T3972] ? refcount_inc_checked+0x50/0x70 [ 2664.555955][ T3972] panic+0x2cb/0x744 [ 2664.559856][ T3972] ? __warn_printk+0xf3/0xf3 [ 2664.564457][ T3972] ? refcount_inc_checked+0x61/0x70 [ 2664.569669][ T3972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2664.575925][ T3972] ? __warn.cold+0x5/0x4d [ 2664.580268][ T3972] ? refcount_inc_checked+0x61/0x70 [ 2664.585480][ T3972] __warn.cold+0x20/0x4d [ 2664.589734][ T3972] ? refcount_inc_checked+0x61/0x70 [ 2664.594951][ T3972] report_bug+0x263/0x2b0 [ 2664.599296][ T3972] do_error_trap+0x11b/0x200 [ 2664.603893][ T3972] do_invalid_op+0x37/0x50 [ 2664.608310][ T3972] ? refcount_inc_checked+0x61/0x70 [ 2664.613513][ T3972] invalid_op+0x14/0x20 [ 2664.617678][ T3972] RIP: 0010:refcount_inc_checked+0x61/0x70 [ 2664.623496][ T3972] Code: 1d dd ad 48 06 31 ff 89 de e8 0b 6f 3c fe 84 db 75 dd e8 c2 6d 3c fe 48 c7 c7 20 9d a4 87 c6 05 bd ad 48 06 01 e8 fd ac 0e fe <0f> 0b eb c1 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 [ 2664.639762][ T3880] kobject: 'loop5' (000000004e5630bc): kobject_uevent_env [ 2664.643144][ T3972] RSP: 0018:ffff88805828f8f8 EFLAGS: 00010286 [ 2664.643158][ T3972] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 2664.643167][ T3972] RDX: 0000000000012b59 RSI: ffffffff815ac976 RDI: ffffed100b051f11 [ 2664.643177][ T3972] RBP: ffff88805828f908 R08: ffff88809e59c380 R09: ffffed1015d240f1 [ 2664.643187][ T3972] R10: ffffed1015d240f0 R11: ffff8880ae920787 R12: ffff8880a75d0778 [ 2664.643197][ T3972] R13: ffff88809e85f620 R14: ffff88809e85f618 R15: ffff8880a75d06f8 [ 2664.643230][ T3972] ? vprintk_func+0x86/0x189 [ 2664.643249][ T3972] ? refcount_inc_checked+0x61/0x70 [ 2664.643264][ T3972] kobject_get+0x66/0xc0 [ 2664.643278][ T3972] kobject_add_internal+0x14f/0x380 [ 2664.643296][ T3972] ? kfree_const+0x5e/0x70 [ 2664.643317][ T3972] kobject_add+0x150/0x1c0 [ 2664.655230][ T3880] kobject: 'loop5' (000000004e5630bc): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2664.656498][ T3972] ? kset_create_and_add+0x1a0/0x1a0 [ 2664.656520][ T3972] ? get_device_parent.isra.0+0x34c/0x560 [ 2664.656537][ T3972] ? rcu_read_lock_sched_held+0x110/0x130 [ 2664.656554][ T3972] ? kmem_cache_alloc_trace+0x351/0x750 [ 2664.656582][ T3972] get_device_parent.isra.0+0x413/0x560 [ 2664.762403][ T3972] device_add+0x2df/0x17a0 [ 2664.766833][ T3972] ? get_device_parent.isra.0+0x560/0x560 [ 2664.772562][ T3972] ? start_creating+0x163/0x1e0 [ 2664.777435][ T3972] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2664.783693][ T3972] hci_register_dev+0x2e8/0x860 [ 2664.788560][ T3972] __vhci_create_device+0x2d0/0x5a0 [ 2664.793782][ T3972] vhci_write+0x2d0/0x470 [ 2664.798126][ T3972] new_sync_write+0x4d3/0x770 [ 2664.802819][ T3972] ? new_sync_read+0x800/0x800 [ 2664.807602][ T3972] ? __fget+0x381/0x550 [ 2664.811795][ T3972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2664.818048][ T3972] ? security_file_permission+0x8f/0x380 [ 2664.823704][ T3972] __vfs_write+0xe1/0x110 [ 2664.828047][ T3972] vfs_write+0x20c/0x580 [ 2664.832303][ T3972] ksys_write+0x14f/0x290 [ 2664.836640][ T3972] ? __ia32_sys_read+0xb0/0xb0 [ 2664.841420][ T3972] ? do_syscall_64+0x26/0x680 [ 2664.846108][ T3972] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2664.852187][ T3972] ? do_syscall_64+0x26/0x680 [ 2664.856874][ T3972] __x64_sys_write+0x73/0xb0 [ 2664.861478][ T3972] do_syscall_64+0xfd/0x680 [ 2664.865999][ T3972] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2664.871899][ T3972] RIP: 0033:0x459279 [ 2664.875796][ T3972] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2664.895413][ T3972] RSP: 002b:00007faf8d862c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2664.903849][ T3972] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459279 [ 2664.911838][ T3972] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000005 [ 2664.919823][ T3972] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2664.927805][ T3972] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faf8d8636d4 [ 2664.935788][ T3972] R13: 00000000004c8ca3 R14: 00000000004df948 R15: 00000000ffffffff [ 2664.945384][ T3972] Kernel Offset: disabled [ 2664.949909][ T3972] Rebooting in 86400 seconds..