: command 0x1009 tx timeout [ 2814.206678] net_ratelimit: 22 callbacks suppressed [ 2814.206685] protocol 88fb is buggy, dev hsr_slave_0 [ 2814.216781] protocol 88fb is buggy, dev hsr_slave_1 [ 2814.926688] protocol 88fb is buggy, dev hsr_slave_0 [ 2814.931884] protocol 88fb is buggy, dev hsr_slave_1 [ 2815.326656] protocol 88fb is buggy, dev hsr_slave_0 [ 2815.331804] protocol 88fb is buggy, dev hsr_slave_1 [ 2815.486701] protocol 88fb is buggy, dev hsr_slave_0 [ 2815.491862] protocol 88fb is buggy, dev hsr_slave_1 [ 2815.966725] protocol 88fb is buggy, dev hsr_slave_0 [ 2815.972086] protocol 88fb is buggy, dev hsr_slave_1 20:50:57 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x0, 0x8, 0xbb, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:50:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:50:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xaf, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:50:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:50:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x15f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:50:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x20000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000100)=""/225) 20:50:57 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x0, 0x8, 0xbb, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:50:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) [ 2816.785949] Bluetooth: hci0: Frame reassembly failed (-84) 20:50:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x160, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:50:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xb0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2816.850042] Bluetooth: hci1: Frame reassembly failed (-84) 20:50:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 20:50:57 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x0, 0xbb, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:50:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:50:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x161, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:50:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xb1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2818.846640] Bluetooth: hci0: command 0x1003 tx timeout [ 2818.852185] Bluetooth: hci0: sending frame failed (-49) [ 2818.926600] Bluetooth: hci1: command 0x1003 tx timeout [ 2818.932029] Bluetooth: hci1: sending frame failed (-49) [ 2819.486635] net_ratelimit: 18 callbacks suppressed [ 2819.486645] protocol 88fb is buggy, dev hsr_slave_0 [ 2819.496739] protocol 88fb is buggy, dev hsr_slave_1 [ 2819.646660] protocol 88fb is buggy, dev hsr_slave_0 [ 2819.651832] protocol 88fb is buggy, dev hsr_slave_1 [ 2820.126723] protocol 88fb is buggy, dev hsr_slave_0 [ 2820.131839] protocol 88fb is buggy, dev hsr_slave_1 [ 2820.137032] protocol 88fb is buggy, dev hsr_slave_0 [ 2820.142081] protocol 88fb is buggy, dev hsr_slave_1 [ 2820.446630] protocol 88fb is buggy, dev hsr_slave_0 [ 2820.451774] protocol 88fb is buggy, dev hsr_slave_1 [ 2820.926737] Bluetooth: hci0: command 0x1001 tx timeout [ 2820.932401] Bluetooth: hci0: sending frame failed (-49) [ 2821.006691] Bluetooth: hci1: command 0x1001 tx timeout [ 2821.012114] Bluetooth: hci1: sending frame failed (-49) [ 2823.006750] Bluetooth: hci0: command 0x1009 tx timeout [ 2823.086712] Bluetooth: hci1: command 0x1009 tx timeout [ 2824.606732] net_ratelimit: 22 callbacks suppressed [ 2824.611752] protocol 88fb is buggy, dev hsr_slave_0 [ 2824.616812] protocol 88fb is buggy, dev hsr_slave_1 [ 2825.326740] protocol 88fb is buggy, dev hsr_slave_0 [ 2825.331899] protocol 88fb is buggy, dev hsr_slave_1 [ 2825.726659] protocol 88fb is buggy, dev hsr_slave_0 [ 2825.731757] protocol 88fb is buggy, dev hsr_slave_1 [ 2825.886664] protocol 88fb is buggy, dev hsr_slave_0 [ 2825.891778] protocol 88fb is buggy, dev hsr_slave_1 [ 2826.366729] protocol 88fb is buggy, dev hsr_slave_0 [ 2826.371960] protocol 88fb is buggy, dev hsr_slave_1 20:51:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:51:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x0, 0xbb, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:51:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 20:51:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x162, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xb2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 20:51:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x0, 0xbb, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xb3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2827.089348] Bluetooth: hci0: Frame reassembly failed (-84) 20:51:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x163, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:51:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xb86402, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 2829.166659] Bluetooth: hci0: command 0x1003 tx timeout [ 2829.172124] Bluetooth: hci0: sending frame failed (-49) [ 2829.886654] net_ratelimit: 18 callbacks suppressed [ 2829.886663] protocol 88fb is buggy, dev hsr_slave_0 [ 2829.896793] protocol 88fb is buggy, dev hsr_slave_1 [ 2830.046624] protocol 88fb is buggy, dev hsr_slave_0 [ 2830.051792] protocol 88fb is buggy, dev hsr_slave_1 [ 2830.526727] protocol 88fb is buggy, dev hsr_slave_0 [ 2830.531906] protocol 88fb is buggy, dev hsr_slave_1 [ 2830.537217] protocol 88fb is buggy, dev hsr_slave_0 [ 2830.542394] protocol 88fb is buggy, dev hsr_slave_1 [ 2830.846691] protocol 88fb is buggy, dev hsr_slave_0 [ 2830.851871] protocol 88fb is buggy, dev hsr_slave_1 [ 2831.246702] Bluetooth: hci0: command 0x1001 tx timeout [ 2831.252170] Bluetooth: hci0: sending frame failed (-49) [ 2833.326703] Bluetooth: hci0: command 0x1009 tx timeout [ 2835.016657] net_ratelimit: 22 callbacks suppressed [ 2835.016666] protocol 88fb is buggy, dev hsr_slave_0 [ 2835.026805] protocol 88fb is buggy, dev hsr_slave_1 [ 2835.726724] protocol 88fb is buggy, dev hsr_slave_0 [ 2835.731911] protocol 88fb is buggy, dev hsr_slave_1 [ 2836.126649] protocol 88fb is buggy, dev hsr_slave_0 [ 2836.131734] protocol 88fb is buggy, dev hsr_slave_1 [ 2836.286664] protocol 88fb is buggy, dev hsr_slave_0 [ 2836.291796] protocol 88fb is buggy, dev hsr_slave_1 [ 2836.766737] protocol 88fb is buggy, dev hsr_slave_0 [ 2836.771845] protocol 88fb is buggy, dev hsr_slave_1 20:51:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:51:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xb4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x164, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 20:51:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:51:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 20:51:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2837.242107] Bluetooth: hci0: Frame reassembly failed (-84) 20:51:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xb5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x165, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:51:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2839.246633] Bluetooth: hci0: command 0x1003 tx timeout [ 2839.252192] Bluetooth: hci0: sending frame failed (-49) [ 2839.326635] Bluetooth: hci1: command 0x1003 tx timeout [ 2839.332081] Bluetooth: hci1: sending frame failed (-49) [ 2840.286618] net_ratelimit: 18 callbacks suppressed [ 2840.286625] protocol 88fb is buggy, dev hsr_slave_0 [ 2840.296767] protocol 88fb is buggy, dev hsr_slave_1 [ 2840.446692] protocol 88fb is buggy, dev hsr_slave_0 [ 2840.451816] protocol 88fb is buggy, dev hsr_slave_1 [ 2840.926733] protocol 88fb is buggy, dev hsr_slave_0 [ 2840.931884] protocol 88fb is buggy, dev hsr_slave_1 [ 2840.937038] protocol 88fb is buggy, dev hsr_slave_0 [ 2840.942164] protocol 88fb is buggy, dev hsr_slave_1 [ 2841.246681] protocol 88fb is buggy, dev hsr_slave_0 [ 2841.251823] protocol 88fb is buggy, dev hsr_slave_1 [ 2841.326645] Bluetooth: hci0: command 0x1001 tx timeout [ 2841.332197] Bluetooth: hci0: sending frame failed (-49) [ 2841.406693] Bluetooth: hci1: command 0x1001 tx timeout [ 2841.412108] Bluetooth: hci1: sending frame failed (-49) [ 2843.406604] Bluetooth: hci0: command 0x1009 tx timeout [ 2843.486667] Bluetooth: hci1: command 0x1009 tx timeout [ 2845.406671] net_ratelimit: 22 callbacks suppressed [ 2845.411666] protocol 88fb is buggy, dev hsr_slave_0 [ 2845.416758] protocol 88fb is buggy, dev hsr_slave_1 [ 2846.126732] protocol 88fb is buggy, dev hsr_slave_0 [ 2846.132852] protocol 88fb is buggy, dev hsr_slave_1 [ 2846.526681] protocol 88fb is buggy, dev hsr_slave_0 [ 2846.531808] protocol 88fb is buggy, dev hsr_slave_1 [ 2846.686669] protocol 88fb is buggy, dev hsr_slave_0 [ 2846.691781] protocol 88fb is buggy, dev hsr_slave_1 [ 2847.166760] protocol 88fb is buggy, dev hsr_slave_0 [ 2847.171914] protocol 88fb is buggy, dev hsr_slave_1 20:51:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xbb}, 0x3c) 20:51:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:51:28 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 20:51:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xb6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x166, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x18020, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:51:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xbb}, 0x3c) 20:51:28 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 20:51:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x167, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xb7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2847.564536] Bluetooth: hci0: Frame reassembly failed (-84) 20:51:28 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:51:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xbb}, 0x3c) 20:51:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xb8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2849.566654] Bluetooth: hci0: command 0x1003 tx timeout [ 2849.572104] Bluetooth: hci0: sending frame failed (-49) [ 2849.646635] Bluetooth: hci1: command 0x1003 tx timeout [ 2849.652184] Bluetooth: hci1: sending frame failed (-49) [ 2850.686685] net_ratelimit: 18 callbacks suppressed [ 2850.686694] protocol 88fb is buggy, dev hsr_slave_0 [ 2850.696814] protocol 88fb is buggy, dev hsr_slave_1 [ 2850.846664] protocol 88fb is buggy, dev hsr_slave_0 [ 2850.852652] protocol 88fb is buggy, dev hsr_slave_1 [ 2851.326755] protocol 88fb is buggy, dev hsr_slave_0 [ 2851.331917] protocol 88fb is buggy, dev hsr_slave_1 [ 2851.337108] protocol 88fb is buggy, dev hsr_slave_0 [ 2851.342160] protocol 88fb is buggy, dev hsr_slave_1 [ 2851.646701] protocol 88fb is buggy, dev hsr_slave_0 [ 2851.646735] Bluetooth: hci0: command 0x1001 tx timeout [ 2851.652006] protocol 88fb is buggy, dev hsr_slave_1 [ 2851.657849] Bluetooth: hci0: sending frame failed (-49) [ 2851.726648] Bluetooth: hci1: command 0x1001 tx timeout [ 2851.732261] Bluetooth: hci1: sending frame failed (-49) [ 2853.726690] Bluetooth: hci0: command 0x1009 tx timeout [ 2853.806672] Bluetooth: hci1: command 0x1009 tx timeout [ 2855.806691] net_ratelimit: 22 callbacks suppressed [ 2855.811704] protocol 88fb is buggy, dev hsr_slave_0 [ 2855.816822] protocol 88fb is buggy, dev hsr_slave_1 [ 2856.526726] protocol 88fb is buggy, dev hsr_slave_0 [ 2856.531893] protocol 88fb is buggy, dev hsr_slave_1 [ 2856.926625] protocol 88fb is buggy, dev hsr_slave_0 [ 2856.931774] protocol 88fb is buggy, dev hsr_slave_1 [ 2857.086675] protocol 88fb is buggy, dev hsr_slave_0 [ 2857.091798] protocol 88fb is buggy, dev hsr_slave_1 [ 2857.566735] protocol 88fb is buggy, dev hsr_slave_0 [ 2857.571846] protocol 88fb is buggy, dev hsr_slave_1 20:51:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:51:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x168, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0x0, 0x84}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x14, &(0x7f0000000200)={r1}, &(0x7f00000000c0)=0x8) 20:51:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 20:51:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xb9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)}], 0x500, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:51:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 20:51:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020114000100000000000e599fba948bcc03cdf82ce730d6d842a25cfb7eefcfdb76927b12eb7104426cd70415a8d106abd13771062eb8470287af4c0667677e0d65e7ee2078b72822c0e3fe689d7448d8d32e1a808c1ac99e9b1f22a433a4d8d5ce07803fd7c1dc28ca42e924bf31", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) 20:51:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x169, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xba, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2857.805861] Bluetooth: hci0: Frame reassembly failed (-84) 20:51:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:51:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 2858.127219] Bluetooth: hci1: Frame reassembly failed (-84) [ 2859.806607] Bluetooth: hci0: command 0x1003 tx timeout [ 2859.812050] Bluetooth: hci0: sending frame failed (-49) [ 2860.206636] Bluetooth: hci1: command 0x1003 tx timeout [ 2860.212109] Bluetooth: hci1: sending frame failed (-49) [ 2861.086593] net_ratelimit: 18 callbacks suppressed [ 2861.086599] protocol 88fb is buggy, dev hsr_slave_0 [ 2861.096749] protocol 88fb is buggy, dev hsr_slave_1 [ 2861.246679] protocol 88fb is buggy, dev hsr_slave_0 [ 2861.251786] protocol 88fb is buggy, dev hsr_slave_1 [ 2861.726732] protocol 88fb is buggy, dev hsr_slave_0 [ 2861.731935] protocol 88fb is buggy, dev hsr_slave_1 [ 2861.737184] protocol 88fb is buggy, dev hsr_slave_0 [ 2861.743796] protocol 88fb is buggy, dev hsr_slave_1 [ 2861.886656] Bluetooth: hci0: command 0x1001 tx timeout [ 2861.892089] Bluetooth: hci0: sending frame failed (-49) [ 2862.046683] protocol 88fb is buggy, dev hsr_slave_0 [ 2862.051849] protocol 88fb is buggy, dev hsr_slave_1 [ 2862.286684] Bluetooth: hci1: command 0x1001 tx timeout [ 2862.292150] Bluetooth: hci1: sending frame failed (-49) [ 2863.966743] Bluetooth: hci0: command 0x1009 tx timeout [ 2864.366714] Bluetooth: hci1: command 0x1009 tx timeout [ 2866.206696] net_ratelimit: 22 callbacks suppressed [ 2866.211706] protocol 88fb is buggy, dev hsr_slave_0 [ 2866.216788] protocol 88fb is buggy, dev hsr_slave_1 [ 2866.926693] protocol 88fb is buggy, dev hsr_slave_0 [ 2866.931860] protocol 88fb is buggy, dev hsr_slave_1 [ 2867.326638] protocol 88fb is buggy, dev hsr_slave_0 [ 2867.331742] protocol 88fb is buggy, dev hsr_slave_1 [ 2867.486652] protocol 88fb is buggy, dev hsr_slave_0 [ 2867.491767] protocol 88fb is buggy, dev hsr_slave_1 20:51:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:51:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x16a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xbb, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 20:51:48 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) pipe2$9p(&(0x7f0000000100), 0x4800) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000140)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"/388], 0x18) 20:51:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) [ 2867.966647] protocol 88fb is buggy, dev hsr_slave_0 [ 2867.971779] protocol 88fb is buggy, dev hsr_slave_1 [ 2868.000501] Bluetooth: hci0: Frame reassembly failed (-84) 20:51:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'}) 20:51:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x16b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xbc, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:51:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 20:51:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000200)={0xfffffffd, 0x4, 0x3, 0x20, &(0x7f0000000100)=[{}, {}, {}, {}]}) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 2868.612083] Bluetooth: hci1: Frame reassembly failed (-84) [ 2870.057100] Bluetooth: hci0: command 0x1003 tx timeout [ 2870.063922] Bluetooth: hci0: sending frame failed (-49) [ 2870.686581] Bluetooth: hci1: command 0x1003 tx timeout [ 2870.692013] Bluetooth: hci1: sending frame failed (-49) [ 2871.486641] net_ratelimit: 16 callbacks suppressed [ 2871.486650] protocol 88fb is buggy, dev hsr_slave_0 [ 2871.496975] protocol 88fb is buggy, dev hsr_slave_1 [ 2871.646625] protocol 88fb is buggy, dev hsr_slave_0 [ 2871.651775] protocol 88fb is buggy, dev hsr_slave_1 [ 2872.126767] protocol 88fb is buggy, dev hsr_slave_0 [ 2872.131918] protocol 88fb is buggy, dev hsr_slave_1 [ 2872.137260] protocol 88fb is buggy, dev hsr_slave_0 [ 2872.142620] protocol 88fb is buggy, dev hsr_slave_1 [ 2872.147929] Bluetooth: hci0: command 0x1001 tx timeout [ 2872.153440] Bluetooth: hci0: sending frame failed (-49) [ 2872.766663] Bluetooth: hci1: command 0x1001 tx timeout [ 2872.772168] Bluetooth: hci1: sending frame failed (-49) [ 2873.166753] protocol 88fb is buggy, dev hsr_slave_0 [ 2873.171869] protocol 88fb is buggy, dev hsr_slave_1 [ 2874.207010] Bluetooth: hci0: command 0x1009 tx timeout [ 2874.846684] Bluetooth: hci1: command 0x1009 tx timeout [ 2877.326696] net_ratelimit: 18 callbacks suppressed [ 2877.326705] protocol 88fb is buggy, dev hsr_slave_0 [ 2877.336803] protocol 88fb is buggy, dev hsr_slave_1 [ 2877.726651] protocol 88fb is buggy, dev hsr_slave_0 [ 2877.731749] protocol 88fb is buggy, dev hsr_slave_1 [ 2877.886680] protocol 88fb is buggy, dev hsr_slave_0 [ 2877.891886] protocol 88fb is buggy, dev hsr_slave_1 20:51:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:51:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x16c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xbd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 20:51:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0x0, 0x84}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x1a, &(0x7f0000000200)={r1}, &(0x7f00000000c0)=0x8) 20:51:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:51:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="000000000000000000000000008fc300"}, 0x1c) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x5a002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x20) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2878.224531] Bluetooth: hci0: Frame reassembly failed (-84) 20:51:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x16d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:51:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xbe, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2878.312045] audit: type=1400 audit(1574196718.892:546): avc: denied { sys_admin } for pid=12276 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 2878.320430] IPVS: ftp: loaded support on port[0] = 21 20:51:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) [ 2878.366642] protocol 88fb is buggy, dev hsr_slave_0 [ 2878.371931] protocol 88fb is buggy, dev hsr_slave_1 [ 2878.377227] protocol 88fb is buggy, dev hsr_slave_0 [ 2878.382417] protocol 88fb is buggy, dev hsr_slave_1 20:51:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 20:51:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xbf, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2880.286623] Bluetooth: hci0: command 0x1003 tx timeout [ 2880.292106] Bluetooth: hci0: sending frame failed (-49) [ 2882.366652] Bluetooth: hci0: command 0x1001 tx timeout [ 2882.372122] Bluetooth: hci0: sending frame failed (-49) [ 2882.526740] net_ratelimit: 16 callbacks suppressed [ 2882.531909] protocol 88fb is buggy, dev hsr_slave_0 [ 2882.537042] protocol 88fb is buggy, dev hsr_slave_1 [ 2882.542246] protocol 88fb is buggy, dev hsr_slave_0 [ 2882.547525] protocol 88fb is buggy, dev hsr_slave_1 [ 2883.566725] protocol 88fb is buggy, dev hsr_slave_0 [ 2883.571881] protocol 88fb is buggy, dev hsr_slave_1 [ 2883.966669] protocol 88fb is buggy, dev hsr_slave_0 [ 2883.971792] protocol 88fb is buggy, dev hsr_slave_1 [ 2884.126651] protocol 88fb is buggy, dev hsr_slave_0 [ 2884.131903] protocol 88fb is buggy, dev hsr_slave_1 [ 2884.446743] Bluetooth: hci0: command 0x1009 tx timeout [ 2887.726743] net_ratelimit: 14 callbacks suppressed [ 2887.726759] protocol 88fb is buggy, dev hsr_slave_0 [ 2887.736997] protocol 88fb is buggy, dev hsr_slave_1 [ 2888.126806] protocol 88fb is buggy, dev hsr_slave_0 [ 2888.132043] protocol 88fb is buggy, dev hsr_slave_1 [ 2888.286673] protocol 88fb is buggy, dev hsr_slave_0 [ 2888.292135] protocol 88fb is buggy, dev hsr_slave_1 20:52:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:52:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x20000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000100)=""/225) 20:52:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x16e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:52:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x208100, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x4) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0xb2b46cbf4a9692dd, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x4, @bearer=@udp='udp:syz0\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x2000080}, 0x40000) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:52:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0x0, 0x5}, 0x0, 0x0, 0x3, {}, 0x80}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000060000000000000000000000000400000014000100fe80000000000053e8000000000000aa00"/52], 0x34}}, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000600)=ANY=[@ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32, @ANYRESHEX=r0, @ANYRES16=r2, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYBLOB="8fcaa3da3e8133e9f291044a904df735ff6694993f68e5fdf31f024fb003577205a54b5b8b13e0d82d2752d0d134b780b309241a82dc331807eb65010dda1469ba51a2f2a65723bbd07a56548d5e01040000000067c806ee23f4494b61339d376f44bb79726422bb921737817f02ce54143085b46a6aae3403bae3117ff367f8ab1e4f5d4d874df11d4f116d105aedbe63c21c3dde84cb96f2f715a369c5cb8adb609b2d68ea30bd3a144eccad67a2699b6d8b1512c106043c0a68c0c7fa73086063594658ce8d260df0de", @ANYPTR64, @ANYRESDEC=r4], @ANYRES64, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000680)=ANY=[@ANYRES32=r9, @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES16=r8]]]], 0x0) r10 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, r10) r11 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r11, r10) r12 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\\1keyring\x00', r10) r13 = add_key$keyring(&(0x7f0000000280)='keyring\x00', 0x0, 0x0, 0x0, r10) r14 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r14, r13) keyctl$reject(0x13, r12, 0x3, 0x4, r14) r15 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="5558685265e6ca31cc8e8ed858c430d86b5ab5ba78310f5d434920b5713ed25bb6761a7d8f94c873c751c53bc499d94de1e071ed92ecd88c8744ceaa47d8f0269fb280783782aed7c0cbb2a7ded34c11b4c58e507c3ac556da9b1468a41451ec374a951b1f6711ebb95cf1a7ee6ac3cb2738", 0x72, r14) keyctl$invalidate(0x15, r15) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) r17 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$BLKROSET(r17, 0x125d, &(0x7f0000000440)=0x10) fcntl$dupfd(r16, 0x0, r16) bind$inet6(r16, &(0x7f0000000380)={0xa, 0x4e21, 0x0, @rand_addr="b6d84dbe9383617b16ceb58b6e245025", 0x200}, 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r18, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000002c0)) timer_settime(r1, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000100)) 20:52:08 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xc0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2888.433179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12311 comm=syz-executor.5 [ 2888.453482] Bluetooth: hci1: Frame reassembly failed (-84) [ 2888.465740] Bluetooth: hci0: Frame reassembly failed (-84) 20:52:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x16f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2888.484181] Bluetooth: hci2: Frame reassembly failed (-84) 20:52:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xc1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:52:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x170, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:52:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xc2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:52:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x171, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2888.776741] protocol 88fb is buggy, dev hsr_slave_0 [ 2888.782056] protocol 88fb is buggy, dev hsr_slave_1 [ 2888.787290] protocol 88fb is buggy, dev hsr_slave_0 [ 2888.792833] protocol 88fb is buggy, dev hsr_slave_1 20:52:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xc3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2890.526683] Bluetooth: hci2: command 0x1003 tx timeout [ 2890.526689] Bluetooth: hci1: command 0x1003 tx timeout [ 2890.537208] Bluetooth: hci1: sending frame failed (-49) [ 2890.537848] Bluetooth: hci0: command 0x1003 tx timeout [ 2890.543177] Bluetooth: hci2: sending frame failed (-49) [ 2890.554218] Bluetooth: hci0: sending frame failed (-49) [ 2892.606772] Bluetooth: hci0: command 0x1001 tx timeout [ 2892.612363] Bluetooth: hci2: command 0x1001 tx timeout [ 2892.612473] Bluetooth: hci0: sending frame failed (-49) [ 2892.623483] Bluetooth: hci2: sending frame failed (-49) [ 2892.623780] Bluetooth: hci1: command 0x1001 tx timeout [ 2892.634549] Bluetooth: hci1: sending frame failed (-49) [ 2892.926775] net_ratelimit: 16 callbacks suppressed [ 2892.926784] protocol 88fb is buggy, dev hsr_slave_0 [ 2892.937178] protocol 88fb is buggy, dev hsr_slave_1 [ 2892.942496] protocol 88fb is buggy, dev hsr_slave_0 [ 2892.947620] protocol 88fb is buggy, dev hsr_slave_1 [ 2893.966811] protocol 88fb is buggy, dev hsr_slave_0 [ 2893.972189] protocol 88fb is buggy, dev hsr_slave_1 [ 2894.366716] protocol 88fb is buggy, dev hsr_slave_0 [ 2894.371841] protocol 88fb is buggy, dev hsr_slave_1 [ 2894.526763] protocol 88fb is buggy, dev hsr_slave_0 [ 2894.531913] protocol 88fb is buggy, dev hsr_slave_1 [ 2894.686772] Bluetooth: hci1: command 0x1009 tx timeout [ 2894.692150] Bluetooth: hci2: command 0x1009 tx timeout [ 2894.697576] Bluetooth: hci0: command 0x1009 tx timeout [ 2898.126735] net_ratelimit: 14 callbacks suppressed [ 2898.131740] protocol 88fb is buggy, dev hsr_slave_0 [ 2898.137013] protocol 88fb is buggy, dev hsr_slave_1 [ 2898.526685] protocol 88fb is buggy, dev hsr_slave_0 [ 2898.531783] protocol 88fb is buggy, dev hsr_slave_1 20:52:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:52:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000200)={0xfffffffd, 0x4, 0x3, 0x20, &(0x7f0000000100)=[{}, {}, {}, {}]}) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:52:19 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x172, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:52:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xc4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:52:19 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x4e, 0x7}, 0x0, 0x2, 0x0, {0x80}}) 20:52:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 2898.686652] protocol 88fb is buggy, dev hsr_slave_0 [ 2898.691807] protocol 88fb is buggy, dev hsr_slave_1 20:52:19 executing program 5: syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000000)={{0x4, 0x7}}) 20:52:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xc5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2898.791994] Bluetooth: hci0: Frame reassembly failed (-84) 20:52:19 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x173, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:52:19 executing program 5: ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x400000, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f00000000c0)=0x1f) 20:52:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:52:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x82001, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) accept4$ax25(r1, 0x0, &(0x7f0000000080), 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:52:19 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x174, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2899.166645] protocol 88fb is buggy, dev hsr_slave_0 [ 2899.171907] protocol 88fb is buggy, dev hsr_slave_1 [ 2899.177258] protocol 88fb is buggy, dev hsr_slave_0 [ 2899.182605] protocol 88fb is buggy, dev hsr_slave_1 [ 2900.846747] Bluetooth: hci0: command 0x1003 tx timeout [ 2900.852175] Bluetooth: hci0: sending frame failed (-49) [ 2901.166654] Bluetooth: hci1: command 0x1003 tx timeout [ 2901.172253] Bluetooth: hci1: sending frame failed (-49) [ 2902.926636] Bluetooth: hci0: command 0x1001 tx timeout [ 2902.932084] Bluetooth: hci0: sending frame failed (-49) [ 2903.246708] Bluetooth: hci1: command 0x1001 tx timeout [ 2903.252178] Bluetooth: hci1: sending frame failed (-49) [ 2903.326791] net_ratelimit: 16 callbacks suppressed [ 2903.331834] protocol 88fb is buggy, dev hsr_slave_0 [ 2903.337104] protocol 88fb is buggy, dev hsr_slave_1 [ 2903.342419] protocol 88fb is buggy, dev hsr_slave_0 [ 2903.347637] protocol 88fb is buggy, dev hsr_slave_1 [ 2904.366750] protocol 88fb is buggy, dev hsr_slave_0 [ 2904.371911] protocol 88fb is buggy, dev hsr_slave_1 [ 2904.766694] protocol 88fb is buggy, dev hsr_slave_0 [ 2904.771788] protocol 88fb is buggy, dev hsr_slave_1 [ 2904.926656] protocol 88fb is buggy, dev hsr_slave_0 [ 2904.931746] protocol 88fb is buggy, dev hsr_slave_1 [ 2905.006679] Bluetooth: hci0: command 0x1009 tx timeout [ 2905.326638] Bluetooth: hci1: command 0x1009 tx timeout [ 2908.526701] net_ratelimit: 14 callbacks suppressed [ 2908.526711] protocol 88fb is buggy, dev hsr_slave_0 [ 2908.536860] protocol 88fb is buggy, dev hsr_slave_1 20:52:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000200)={0xfffffffd, 0x4, 0x3, 0x20, &(0x7f0000000100)=[{}, {}, {}, {}]}) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:52:29 executing program 5: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x486000, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='\x81\x00\xef\xef\xff\xff\xff\x7f\xa2f\x91Z\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000140)="3770bde1a1dc794bcc6289b7710a3ec8535936bb1a30e6627f516884dccb4aea47e4b0ff67f5a7780ce1203a3d294b65b338ba5e2b2cc3c6ab2e4c586a38c5e5f93f653c095192455823ea6caedb851ff609c2e653d42631532630734a491c8927cdca99519264394b6c533d3501c7c4659bcf97d6d0eef93374ded4d21cbf217f900cf4a4d370bdf924e1f7f55dfe5f19ae6a408d79b395c4049bedfb7a067d9a689f1b6f9e22a3a35387a8dcf7a8570a8786fa5d1399fc23b6aca4a639b06038077f6d59a816dc2ee849", 0xcb}, {&(0x7f0000000240)="9c4d4a2d23cbbe88878421c696bcf9941868ceb61e53955a788cf822da24da7da38a249a610968a13ab07ea4b99f5b2baaeac996b7ee6bf29640d72163986067c69638c285d0a3a8e0b655342350b2e4139f2baca08e89a757f4525d1a510981399235ddc4af8b6f3c56df01a7a4900a1c6c3de87b893acd3b519fa1aa758009b09f05c3ba9b2ce1ce161f725b4889b1d3b752a2d00b42135d0cf4b4a980f616494567c51eadf36bf6d3c7fd25a82e75f1483660496e8b7c24fa6f2e9ffda836060347136bd90c3b1f934e96d25f70994b186629e3c6c4c08442e61d384bf1bb97bcf360b9bbce2f73c6e6fa8f40fdb4", 0xf0}, {&(0x7f0000000340)="6b4615b4a0c65ad1d36e468794a03981c6aa45030238806c83eb002df74f7a3d34660e1f2f72b73998f1ebc76f415d12a0db5b439bc65bcee5855f690fcd98f9e777f4a19670dd2c9d9689e60d2faeb054dee0", 0x53}], 0x3}, 0x100200d4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000480)={0x1, 0x0, {0xe, 0x13, 0x13, 0x1d, 0x7, 0x0, 0x0, 0x1b, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000440)={0x0, 0x0, 0x3}, 0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:52:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:52:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x175, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:52:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xc6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:52:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0x3ff) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:52:29 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) [ 2908.926677] protocol 88fb is buggy, dev hsr_slave_0 [ 2908.931806] protocol 88fb is buggy, dev hsr_slave_1 [ 2908.966738] Bluetooth: hci0: Frame reassembly failed (-84) 20:52:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x176, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:52:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xc7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:52:29 executing program 5: ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) timer_create(0x2, &(0x7f0000000300)={0x0, 0x8, 0x4, @tid=r1}, &(0x7f0000000240)) [ 2909.086590] protocol 88fb is buggy, dev hsr_slave_0 [ 2909.091773] protocol 88fb is buggy, dev hsr_slave_1 20:52:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 20:52:30 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 20:52:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xc8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2909.564627] Bluetooth: hci1: Frame reassembly failed (-84) [ 2909.570513] protocol 88fb is buggy, dev hsr_slave_0 [ 2909.570567] protocol 88fb is buggy, dev hsr_slave_1 [ 2909.570669] protocol 88fb is buggy, dev hsr_slave_0 [ 2909.570715] protocol 88fb is buggy, dev hsr_slave_1 [ 2911.006747] Bluetooth: hci0: command 0x1003 tx timeout [ 2911.012177] Bluetooth: hci0: sending frame failed (-49) [ 2911.566672] Bluetooth: hci1: command 0x1003 tx timeout [ 2911.572122] Bluetooth: hci1: sending frame failed (-49) [ 2913.086907] Bluetooth: hci0: command 0x1001 tx timeout [ 2913.092338] Bluetooth: hci0: sending frame failed (-49) [ 2913.646789] Bluetooth: hci1: command 0x1001 tx timeout [ 2913.652387] Bluetooth: hci1: sending frame failed (-49) [ 2913.726749] net_ratelimit: 16 callbacks suppressed [ 2913.726758] protocol 88fb is buggy, dev hsr_slave_0 [ 2913.736854] protocol 88fb is buggy, dev hsr_slave_1 [ 2913.742143] protocol 88fb is buggy, dev hsr_slave_0 [ 2913.747502] protocol 88fb is buggy, dev hsr_slave_1 [ 2914.766726] protocol 88fb is buggy, dev hsr_slave_0 [ 2914.771846] protocol 88fb is buggy, dev hsr_slave_1 [ 2915.166671] protocol 88fb is buggy, dev hsr_slave_0 [ 2915.172044] protocol 88fb is buggy, dev hsr_slave_1 [ 2915.177528] Bluetooth: hci0: command 0x1009 tx timeout [ 2915.326708] protocol 88fb is buggy, dev hsr_slave_0 [ 2915.331868] protocol 88fb is buggy, dev hsr_slave_1 [ 2915.726714] Bluetooth: hci1: command 0x1009 tx timeout [ 2918.926764] net_ratelimit: 14 callbacks suppressed [ 2918.931777] protocol 88fb is buggy, dev hsr_slave_0 [ 2918.936893] protocol 88fb is buggy, dev hsr_slave_1 20:52:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000200)={0xfffffffd, 0x4, 0x3, 0x20, &(0x7f0000000100)=[{}, {}, {}, {}]}) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:52:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x177, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:52:39 executing program 5: syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000008000000000000000000084cc009f8e55500"/95]) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_udp_int(r3, 0x11, 0x0, &(0x7f0000000300)=0x1ff, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r8, 0x10, &(0x7f0000000780)={0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB='\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYBLOB], 0x50}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0xffffffffffffff0c, &(0x7f0000001080)=[{&(0x7f0000001000)="1aafdb517ccb933795b89218e7709e", 0xf}], 0x1, &(0x7f00000010c0)}, {&(0x7f0000001100)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x0) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f00000004c0)=r9) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x66, 0x37, &(0x7f0000000080)="a55b340e62b345af216bae1840f6a5fdf90a2815b6bac6f0c3ccc3a3a840de867d4c7d7a7eeb674984bedab03c16750b275f31f125182693aa90e7cf63073454bfdcc172b6222e64c8b0cf89c0939ce18315cf5fb3b58161773aee4b362f862268a9a03a928b", &(0x7f0000000100)=""/55, 0x7fff, 0x0, 0xa3, 0x97, &(0x7f0000000140)="4059880f15d2439f15caed67213d56b53c4083883a00cc512f75977f93394f3a442dbf74fa7e0f99e556de48996fd47072e3dfe1e4f24040f77b2df1908d29b5162700d47d72dd334ef09e5000620bcca6914f149f3ebf954dde1456e87c522f0d6aff11331a6a228dedda248ba19c0fca29ccab751b1ff40ad96acfdd260508e41d07f056284a035994bf85f57901ef83fb034b717f8a8b88401338e7330d1969152e", &(0x7f0000000200)="5a3ba8e9b02c25c9374200db8a2e8dbddd92d41cccb7f6242521c92674c44e4e1881e3c8520285f2f9d37d2845896110b0972a736682355b9cb02c9ff2fb086b63562a5c7d8bdbfd178dd26207c445dfd7b6e7a9a7c278e456265a16263ef66c690d88265c01010b8efe133b83023186d31bce318530785b7a1b9a5fd5d0004a91134bbd4190475d08b34de11539cfcb0a7ed5e16863ac"}, 0x40) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)="a17a8614a81790dbf15ebe899bc87be276b383fd8dd67755474eda6e34a567b604d4e3cfba6edeacd93ce1ecc504d33dffb05c0f6b0b7041ec03bec5f543954941cb85bff916708d914bc3ea4baba92d7334e84d85765d4b7c7fb16601c9cfacb77beeb5ab68d596ce4a25c6787ce8ea767703028d475cbd8561bca0a681467fd4635269f1d99c44e7193fdb4c85ddf58e61595fc853c869c8786a80afb164289638b752e27e328d95297536b44109969ee56af073b0b76b092841b596f5465c72bc80259793634c4c0e0090e56251f7dfadf696f315b0af1b8d3d3a086e0a335a640be004bb", 0xe6, 0x0) keyctl$describe(0x6, r12, &(0x7f0000000680)=""/230, 0xe6) accept4$netrom(r11, &(0x7f0000000400)={{}, [@default, @remote, @bcast, @bcast, @null, @bcast, @bcast]}, &(0x7f0000000480)=0x48, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = fcntl$dupfd(r14, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x200000000000005b, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x4, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0xfb, &(0x7f0000000200)=""/251, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1000000cc}, 0x223) 20:52:39 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 20:52:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xc9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:52:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:52:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x178, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2919.182673] Bluetooth: hci0: Frame reassembly failed (-84) 20:52:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x10000, 0x0) ioctl$SIOCRSACCEPT(r1, 0x89e3) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x426202, 0x0) 20:52:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xca, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2919.326611] protocol 88fb is buggy, dev hsr_slave_0 [ 2919.332256] protocol 88fb is buggy, dev hsr_slave_1 [ 2919.486660] protocol 88fb is buggy, dev hsr_slave_0 [ 2919.491800] protocol 88fb is buggy, dev hsr_slave_1 20:52:40 executing program 5: syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x6, 0x17}, 0x3, 0x1, 0x0, {0x23, 0x6}}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000140)=[{{0x77359400}, 0x1, 0x4, 0x3ff}, {{r1, r2/1000+10000}, 0x16, 0x1}, {{r3, r4/1000+30000}, 0x1, 0x1, 0x55}, {{0x77359400}, 0x0, 0x6, 0x2}, {{0x0, 0x7530}, 0x12, 0x438a, 0x32}, {{0x0, 0x7530}, 0xe1681c2eb0796a15, 0x5, 0x2}, {{0x0, 0x2710}, 0x1f, 0x1, 0x2}, {{0x77359400}, 0x1f, 0x4, 0x5}], 0xc0) 20:52:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:52:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x179, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2919.976662] protocol 88fb is buggy, dev hsr_slave_0 [ 2919.981829] protocol 88fb is buggy, dev hsr_slave_1 [ 2919.987007] protocol 88fb is buggy, dev hsr_slave_0 [ 2919.992216] protocol 88fb is buggy, dev hsr_slave_1 [ 2921.246655] Bluetooth: hci0: command 0x1003 tx timeout [ 2921.252066] Bluetooth: hci0: sending frame failed (-49) [ 2923.326681] Bluetooth: hci0: command 0x1001 tx timeout [ 2923.332097] Bluetooth: hci0: sending frame failed (-49) [ 2924.126727] net_ratelimit: 16 callbacks suppressed [ 2924.131763] protocol 88fb is buggy, dev hsr_slave_0 [ 2924.137243] protocol 88fb is buggy, dev hsr_slave_1 [ 2924.142766] protocol 88fb is buggy, dev hsr_slave_0 [ 2924.148042] protocol 88fb is buggy, dev hsr_slave_1 [ 2925.166728] protocol 88fb is buggy, dev hsr_slave_0 [ 2925.171903] protocol 88fb is buggy, dev hsr_slave_1 [ 2925.406681] Bluetooth: hci0: command 0x1009 tx timeout [ 2925.566755] protocol 88fb is buggy, dev hsr_slave_0 [ 2925.571875] protocol 88fb is buggy, dev hsr_slave_1 [ 2925.726640] protocol 88fb is buggy, dev hsr_slave_0 [ 2925.731771] protocol 88fb is buggy, dev hsr_slave_1 20:52:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:52:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xcb, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:52:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000000)=0xfff) 20:52:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:52:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x17a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:52:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000080)=0x96, 0xffffffffffffff3f) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x2, 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000100)=""/44) [ 2929.326750] net_ratelimit: 14 callbacks suppressed [ 2929.331783] protocol 88fb is buggy, dev hsr_slave_0 [ 2929.336864] protocol 88fb is buggy, dev hsr_slave_1 20:52:50 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x802, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000100)={0x10000, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e24, @rand_addr=0x3}}}, 0x108) r1 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x2, 0x0, 0x3, {}, 0x2}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x5) 20:52:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:52:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xcc, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2929.451551] Bluetooth: hci1: Frame reassembly failed (-84) 20:52:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x17b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:52:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:52:50 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000780)={0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB='\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB], 0x50}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000001000)="1aafdb517ccb933795b89218e7709e", 0xf}], 0x1, &(0x7f00000010c0)}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x0) r3 = getpid() recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000100)=""/178, 0xb2}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/53, 0x35}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x4, &(0x7f0000001280)=""/118, 0x76}, 0x21) kcmp(r2, r3, 0x3, r0, r4) [ 2929.726635] protocol 88fb is buggy, dev hsr_slave_0 [ 2929.731818] protocol 88fb is buggy, dev hsr_slave_1 [ 2929.886665] protocol 88fb is buggy, dev hsr_slave_0 [ 2929.891903] protocol 88fb is buggy, dev hsr_slave_1 [ 2930.366709] protocol 88fb is buggy, dev hsr_slave_0 [ 2930.371973] protocol 88fb is buggy, dev hsr_slave_1 [ 2930.377211] protocol 88fb is buggy, dev hsr_slave_0 [ 2930.382298] protocol 88fb is buggy, dev hsr_slave_1 [ 2931.486622] Bluetooth: hci1: command 0x1003 tx timeout [ 2931.492139] Bluetooth: hci1: sending frame failed (-49) [ 2931.497616] Bluetooth: hci0: command 0x1003 tx timeout [ 2931.503097] Bluetooth: hci0: sending frame failed (-49) [ 2933.566731] Bluetooth: hci0: command 0x1001 tx timeout [ 2933.572165] Bluetooth: hci0: sending frame failed (-49) [ 2933.577682] Bluetooth: hci1: command 0x1001 tx timeout [ 2933.583186] Bluetooth: hci1: sending frame failed (-49) [ 2934.526744] net_ratelimit: 16 callbacks suppressed [ 2934.532742] protocol 88fb is buggy, dev hsr_slave_0 [ 2934.538073] protocol 88fb is buggy, dev hsr_slave_1 [ 2934.543341] protocol 88fb is buggy, dev hsr_slave_0 [ 2934.548563] protocol 88fb is buggy, dev hsr_slave_1 [ 2935.566717] protocol 88fb is buggy, dev hsr_slave_0 [ 2935.571994] protocol 88fb is buggy, dev hsr_slave_1 [ 2935.646674] Bluetooth: hci1: command 0x1009 tx timeout [ 2935.652052] Bluetooth: hci0: command 0x1009 tx timeout [ 2935.966666] protocol 88fb is buggy, dev hsr_slave_0 [ 2935.971773] protocol 88fb is buggy, dev hsr_slave_1 [ 2936.126689] protocol 88fb is buggy, dev hsr_slave_0 [ 2936.131782] protocol 88fb is buggy, dev hsr_slave_1 20:53:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x17c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xcd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:53:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000002000e5be00000000000000000a80000000000000000000000480000014000100fe8000000000000000000000000000aa"], 0x34}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)={0x10000, 0x8, 0x5, 0x2, 0xffff}) read$eventfd(r1, &(0x7f0000000080), 0x8) syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x1, 0x6, 0x3, {}, 0x0, 0x4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000100)=0x0) setreuid(0xffffffffffffffff, r7) 20:53:00 executing program 4: getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000100)=""/254) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x10000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) r2 = dup3(r1, r0, 0x40000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000200)={0x1, 'bridge0\x00', 0x3}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:53:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 2939.624651] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 20:53:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:53:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xce, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:00 executing program 5: openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/create\x00', 0x2, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) [ 2939.696485] Bluetooth: hci0: Frame reassembly failed (-84) [ 2939.726678] net_ratelimit: 14 callbacks suppressed [ 2939.726686] protocol 88fb is buggy, dev hsr_slave_0 [ 2939.737106] protocol 88fb is buggy, dev hsr_slave_1 20:53:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x17d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x11dd}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x49) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$TCXONC(r0, 0x540a, 0x9) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002840)=[{&(0x7f0000000200)={0x27, 0x0, 0x0, 0x2, 0x0, 0xf9, "14ee7352a1ca7e0e8ef0cf7c953a9565384f30195469b74b667cfb5bcfde0480ceb243feadfc3a25e63b6c48336606d8b517c82947158a4b651f7a45224591", 0x3c}, 0x60, &(0x7f0000000400)=[{&(0x7f0000000280)="9ff9f23b1d321cb1c7060d48beb3f43016bbd55bc601124945b40bfe9f71b64958b8797364cf8fc009113d4ab152940eb2debd238446024ed1f928899f1a1f71df74706a69eb53ceb146", 0x4a}, {&(0x7f0000000300)="8cfb", 0x2}, {&(0x7f0000000340)="d3dde96ada26c2bc35d2defc1405ba30eadbfafa192e56360b6ab88cd37d0eb5905ccf4411a563de8de4c013ac5265e76a574332442a9faa099c2be89accb902f88e5c38c0d40d7f1d641f2fac7ebdf3794986c5f6de7689b4d4c40c2ce6be3db703257d38e868cc38a9f15c571dd07cdc2695fb64a5a24b19c7173d915b53f94c06a13993828d906957efacdd5bfc4197abd1f50e882c115bed599005b95416b1e6c30bb864beb6eec353ccb670852201157d52064d08af5b7194", 0xbb}], 0x3, &(0x7f0000000440)={0xa8, 0x100, 0xc3, "e548ba1449bd53c96af843a1e88faf0418eec3777e40f2def84f0e28fc9226590676a45bce08a7e32682fceb4a670bc04b8c19b00009a621258f3cdab616ae400ad3412ada175ebfbb0137c3a2fde594d84a01aadb948510c283acb52360b4bf7ef139b8d831684ae09f6b1043ebe5a8f880a56a258f2e94d588b0b83b4c0c942073c38628a44a7323360ec8e48de395d4d591"}, 0xa8, 0x10}, {&(0x7f0000000500)={0x27, 0x0, 0x2, 0x0, 0x3, 0x7f, "d34b6182e515ceb812d455cda9dfa7ff34f9dc435afd457fa26c0b6d4ea66d02a67dcbe73e9e4845ccbb6f207ac440d95896fc58e00580266d11820b59b6dd", 0x38}, 0x60, &(0x7f0000000980)=[{&(0x7f0000000580)="91785f085ded962bb97965194b30af3710a48c32ceebc6f6e5e63dab3f3ed4fee4c67358e5d10525f126d93ce352dcc3d6142bec74b658844b8683a9e802f7644ff9fce23f58aceea1bd23f6febec7724095edb985bd1480085608e3334a004b02940ef97592126cbe359dfe70d085486ab6ef8bcf26a2b9e13d146f48129f164a990099fec0db7f6981371496ac6fe4aee477275c8e10358aa0c3b674d1e997a8a93f5026714c3fc2e3cd6a2003794a73c0946ee112a87b7ca62ebbd901091f11650b1b3206908b228f1f6ae4fa6e2186abd8365b6dbab151da1ba99ed2188a2b4220b789", 0xe5}, {&(0x7f0000002a40)="5dc7531c0ad8e856deb77b43ffd6cfe4c1ad3e2917ca689fdbd59204c5667937e3c5b9719118117e398bc466a9978119b949e3bd09f70d0a33523c3803c3fa4e22f7422b05cf438d52fa785a1bf08969e4a7149d8fb0094d48f915406ac6bda58cfae1f43eddc3f32e1dc183401ce10cff5251083eb8d3112f945f58b1c95efc10b75b21d2f7c17f8bf473074983ba0ffee58ea475142c53501199150ecc12ed21edfe5ffc61c2a01f", 0xa9}, {&(0x7f0000000740)="283b9a929517c242e7d7d649fc0ca433299451b23270349c00767bc52c2eb901d4d227709f77", 0x26}, {&(0x7f0000000780)="5abb517cdc0b750e4c22ec66614e273b7e6c2fae40fae1a3e3becbd72e233fdea78197c6d11efc6c6a359e3e346fef7e30bf92dea06f97ea9ad7216b5d2fcac3d83df45af0c849dad5ef968698c62c86e476e6409fc3664f26e85e", 0x5b}, {&(0x7f0000000800)="cb45e7e5ba5ee08af96085dbdb17fec8862914655cb1a054e2b6cfab38ed6a3d0ee674efbd5292d3d1f017496a6f65ce82ae11bb620326288054fc0738453674bc7461c2556b8e251f71d7489a86646b9c39eef0e3b6bcc62d4377c044e34d639a5fa6f5a545ff4d58d94ea9ac35d82171f652d802677bfd0ecc66505d73", 0x7e}, {&(0x7f0000000880)="61f3c5129a1bd3fb7ed4293c4fb90dc000af4a17dee9c52af13d1459093b5368e601c17e593b282e93e73fe5a63c76141ce0a325086b67db9cb00504297ad09639db95b7c9afd9f8a17f62284d0e42baeb4d8c2f7c3df97b8a7d9fc03e02ebe4c168c7683c1df0950937d9990539c750cd3c22b1b5ef5fa95b83516b3db4539f2d9003884c4cbbf66cdfb20bee6b1c62c6b3086c663617e6661a362db532a86758429e909fd257de4e2a780900418747e7cfcbce74ced6d2a7bffc0a18ad8fe64c17b19637962aeee6ce33ebfdfea706d486e0fbe030f4ceb7f2f101e46921749447f82335f2f5", 0xe7}], 0x6, &(0x7f0000000a00)={0xb0, 0x107, 0xce, "be59684963b88e544a75b121ff9f21fc7dbb67d48a0bdd585599d5c425e7f32f5c9f131760e1298ea1c24c79d4c079ab3d4176f4503a2411655c255fa7804d73cc4371b24ef63dcb35e0eb294834f337a28075a7ae9d27f228daccf7fc7bb4a884d502333c12f8400f512a92c297883b20712210dc30d230739eec5a3d2df396f51fc56830a87811a98523ab898e9e8dc1646df57e6fb7cc8bdb8f1e9abfb2"}, 0xb0, 0x4000}, {&(0x7f0000000ac0)={0x27, 0x1, 0x1, 0x5, 0x20, 0x9, "66300b4b2024c325be3c17b1a8965682a3dfd915cac2fef236fbfc7914cf2c809c7bcaecedba413edb6a29555493ce0800adf04b89f9a4aac48ad5ab999c76", 0x31}, 0x60, &(0x7f0000000c00)=[{&(0x7f0000000b40)="7f93ce27f322cc24c3dd61a24825fd1064dcc25113cd110e37867a5282547c11eb60fa678efa3efc3b69b87736726b85eeb4941e7274ffbccc554cc64cc0251cc05cfb2c15eda7d73d02", 0x4a}, {&(0x7f0000000bc0)}], 0x2, &(0x7f0000000c40)={0xd0, 0x10a, 0x4, "bd0e15d07b8054d75d7962b14ecf51dadcd97572004b63602435390d83dc84ed1bbc872fbe24b3aca7164eb587bda2034eae960af59c001efb8298329d22156ab3518861a23ed0de3c53f8997bcc96479577c60c3601bd01f05cf8774d09e38f5f80119a21a4737a51bf511e2e81d98742d579141ee67334f9029337f67e07a5cd4b4a3ff1f16959c7da1becb8dd919ff626a775f350906f8bc0843aa914488e2789437c1c6824d512a577f5d5c01b2fa828d555b246370a7c9ee6d58208183c"}, 0xd0, 0x4000008}, {&(0x7f0000000d40)={0x27, 0x0, 0x2, 0x7, 0x1f, 0xf7, "b497cf44ebdd6a5f019eec84a6286f7f79ea4f768b9ec8d7dd2347192b9c85d7e8d56566655fd361a7b13e72708f97b4b8860703749b48259b5685b3b3773f", 0x2e}, 0x60, &(0x7f0000001300)=[{&(0x7f0000000dc0)="02a2e5e2849673e7ea3842e5398a6b44afbc2274c00c691a12e668fa0d37a5720cf0349407eaa65e59de1eb2e77e59119a31c38c6c16396421bd531607bae60ca422cad1faa4512d6215e1633a798cdbf1a3b1ce1f12859ca2657f14916d50cb940452142d97b3e7d9eac5642da877a12c290022a95cd0ac6063a4ba52e75fe14a20f70ca70021e040f3cde7126d63eecd60fe41c6af98d3db3a67aa9435ec28b40b18643b1aa6c0a0d6555dc6adcc77c6d1e4628cc1fbf8cce7de51783fd6d6f83968e547794bbac4c088796013f1a8024da1de7242af", 0xd7}, {&(0x7f0000000ec0)="806c6c173c00629939e83278749659dcfa3393ee817bf8af1f14024170d6b2dd128cf81e3965f347b9bbbc9f2675927833b5ef798ef033fd", 0x38}, {&(0x7f0000000f00)="2b6db0e936d4b11aead7473cbbcdeefed0482ad720fc39768d8c7ccf8652e6e2d73c803a325490b332e2ba36cf6bd010489a267fdd4482d42b6d92b4bb717f58b846557b11aceb58d779abd6743ce46c4128f050f3eee1b7cf3e2f07e7fdeb90fa2efb7d51b1d29b2e6679928922786fb340600be0743fdbf65ad9320a72153a29d9a822166ce205f8e098e8d0f4353844b73ea02785a79b869f46ef8f26051d19ac46b6c67ecb50173d3c0287551f0ba1098a1f562b5b6ee163ace89eb05dbb07957a63ed95dd2ba64afb24a13476", 0xcf}, {&(0x7f0000001000)="ebd719d2b9de80fc1b982a5989a2055e09addb377dabb6218557598ff0c47014b40a3fcb7cb8357bfc198b17fea7990986763065b75c18e80d691e4d45866ef4448e0d7eeeddb770af30112034545da3aad1895f6ea90525403455", 0x5b}, {&(0x7f0000001080)="7d20621b90b808442a7195557f170a3bb985c694e80d98f405036f35999df515cb9f318ebef7e676c31b2967f9e9fdf1d65b3ad6b8edfb185c424a1f3c7c05d5365987d99b049850f43f00aa55168e8ea918611d5ff77bf9c203ff", 0x5b}, {&(0x7f0000001100)="6dba8c563cbe0479a75b92d4d23b9a9f1448bde159a3203b1615ec52334b41a3549cd00086317b2bab73c8b86a6503a9ff7bdc4e6aedc4107e42cdc2aecce0aa585edce7d56d31d4a74a8f95185c23e2fa26f94e37263ec467efcba8b026b18e95a449c5ffdf0338fd2a772ee8573cbc1cb2c068e09ce89144bb8f0b743582715e78f254ce46fea9c5cb4dc1ea5b0afcbf8835d09a7d0e79eb0619b7d2486af953acc8f4fd86ccbdf25c2b811df0546a9097cb54d23f2d1db0277d8f65dd0f3bd3a9622f173fc89efd1183f5376d04946d20837c8868637011d04e", 0xdb}, {&(0x7f0000001200)="34e7e7cd3a00335bd2f16389a4d911d172225edc12b694ba2e2bb7ca32af76d0162626d729d0973f61e1cba76654b7ba6d7c332500e2d24e6af0d17ed53daa46787e0b5570ae324c9201f3e6531b591b482d334fcbcc7dd7e24dc6dada414af3887b19b3bc3c5a4b6203ec749da7f5b83ff5e58238850aebda13daa02b277ee851581a3fdd37ef5eabe660ee8e11983f4db6acae51907cc65ece891468b3306fad5bc8bdbc4a8836c744ff251f3bf412e6df2c660d6cb8bbdbdcd56b1649e68b8f815d3be421a7b450c7576b023450fda2f49c580bd1a1d8bd4968a87eb1d87780452f01ab", 0xe5}], 0x7, &(0x7f0000001380)={0x108, 0x109, 0x7, "0de26db3e8a548a480fb16f9915f55ba4a1bdb14c70a95e6514dc941fd3b6806693c4571e4d2bcba409b69aee50d675fc87ddcfd74d12572366fe23cc804f5e72061e05def64804cf9d6d1aad68a51586391ffc53270904550669599fea4a42f7670e1b1ab84ea3a8e1a4f289e3b95974e0369a852a618db7a9ebb1adaeb9f091609c2cb1d59b942defcae789ca3f293acb072d874430f65816f6d74fd63188765a0d82136db0f9ac1fb4c40c15cd9e2a2537dafd7c1f8f10a4151cdd2193319add7a40b26384c474586cce8cd08d4bc3f3e094de3dae990832764012ea50a6e8aa756891b47e678b7b62213b25b018c3798e61e"}, 0x108, 0x40}, {&(0x7f00000014c0)={0x27, 0x0, 0x2, 0x4, 0x73, 0x8d, "6a527ad350abae45180ed15766801446a562591504396e6a9e79ad9dc6eaccd662d1ef604930d0b4ff42225ded72a2a61331bbcac40f742e2c1f4a0b59c6e2", 0x2d}, 0x60, &(0x7f0000001880)=[{&(0x7f0000001540)="b5a1f0e3d98c1744aae2e40656db9e17bf283a6faeb8f62b151f3c0cd4449345d1", 0x21}, {&(0x7f0000001580)="02c530ee3292635dbb9a0e8563023057106fc7d2b154abc2adff360044aa1f44db9793bb118653836d118da84e6899dca50616f11e492dafa446b7e41c9217c6a1af326193e165719b5033ba2473de8647caa2c1768e58cfb5fc6b23528b7f17f76288ca848e7879f2cdd8a54434abf2a8b838e6ea779bd110739acfdc9307d6b570fc59b43af2c2e38ba37685a1e428960c8eb993417a3d0a80c7d56292be707cebb0b6b772536395e066", 0xab}, {&(0x7f0000001640)="d111e899ffb121d6db4628e8e2551b77c34356a800f00bc98fe2bfa8190700661b939a2113297dacb4bcd2ac1b6004ea2638fed901a198dd86e380254d2063b2dd59e942c85db58fb4a0c1977607c6a536a1ce7636d22889f1617e0bb475829a6e86932227104b22f7e4aab570df303a8d81b07301c697e3c53b08fe66cc99424fc3745207746cbc0a3dbefb2cddd1eca42f74f30a7f9970ef46", 0x9a}, {&(0x7f0000001700)="73fff67eb7cfb8b8f52cb13b1eb4794de133c117d119f47a149aead16734366bd99850ee989f5c0361ebbb698813b4c825e5069085d54a0bb695c23993c21ab5ec9cafad3bf06247a165da733f0a29126f5e53a9b8e5d54a9807761c63ce8ea72cd69038c8de0793073fd2b93adb4d9789510cf6d39d2032e6d02c878058e35cc12c8280d877f2a0f05a97e5d6860f0e7ff8161648f5eda6e8ecfedb59ae3cf86438e8d6918a79ac524d47229ff2527db4a177f882bb4358cc9723fa531a6e343df2927b9973bed67f03f83df0a4a169a1e7244082b74feceb1fc0512304f4c0c9a6127e", 0xe4}, {&(0x7f0000001800)="f71642e57d993c5f201b6d8a26294f8c96b25651c361195c13eb060b5c52e86a1e1f9fd57dc48a1e64b6dd8fa2807d00a6eb87900ef6b9c2feb1e463192740e1c62b6845ad7f666b37b084b795ca2f321814e73e3ed799a15c178d7fe3368ceb3b29ffc271ddd97affd17fb4754eea22c3da83cb4c0e", 0x76}], 0x5, &(0x7f0000001900)={0xd0, 0x0, 0x6, "275f45d1603ab2fab756a82f2b67d11895b84bab07b4f2dbbdfdff9e8bd6061d5d6bfd97f4f2b3385534583549744c542a4d5ac86229869320dd3fac5484a73929663be6d976115af6f658537d3a3063c4a0aab87f5890d74f7288e01cbbf479a2736a223bfcc450b5b6d6d24274afe24892dbfd99bda9690803b7daa3ca786a98d47c24d01f54c4b3cc4a7df5691790f3c9c8febf8a8083cd4ae3106b18ea4b410bf284f99064d9913dac2bc91e3c47a89137fbcf3f93e6504c1635a3a410f2"}, 0xd0, 0x8040}, {&(0x7f0000001a00)={0x27, 0x0, 0x0, 0x2, 0x9, 0x5, "7e2d0431af572a966bd59aef08fcfcbeedfec8fe6b4507a317f08cbeea0187dd1f17f7fa0ef3e6fd9b31abf8c77a08cc134a4aa6ee478c2ec8bcd3ff415f60", 0x2}, 0x60, &(0x7f0000001b40), 0x1, &(0x7f0000001b80)={0x2b, 0x115, 0x9, "6df34742698e4c3f9358ea428cc7be159ee8a55b19fdcb96b2e9fdd694549659e6b18438608497c148b50aab17b3931a6074cb8e6a7fe845ad8f9f819ab5a3c3868e047a10224fd4ac28047759782de53f7c9702e0701d79a443b0fb12d6db00bce76757c5840fc025c18c5e5174d73ab17b5e045c515a6b5b6c997d7cac1da2d6ab7c22c0bb18ac195e440ef6162b44277b5a3e945fea9e2b28d7288229e239f8f29fdee4e3d2fc076dff30a4"}, 0xc0, 0x81}, {&(0x7f0000001c40)={0x27, 0x0, 0x1, 0x7, 0x5, 0x6, "e813e1148d9483a6ea5b483e87f4d85e9909b77e830d42df19949882e7d21ae31b9a46a2e97ec26c7298fdfa28042f8473980132a7148de683b556234bb30b", 0x38}, 0x60, &(0x7f0000001f80)=[{&(0x7f0000001cc0)="80fe2b09c8194e26bdbf42c2e58c4db6fe8f5e9be21382d2ae47c517a49f228d55a09d1ef65361cd64b579765fdabe917b0a3732f80ff6fa1d106f6b7dea8d55202a15a3780fa9a17feaeb99061caea62bfa5c7b674d719627b0445c70a258fe834cf858677d33fac1eea37731b3a215484a0a3cd5701ff75772c6002cdbeb1967e7fcd66ae189b213d0d5ed61b8cd6989a34c962f6475929309b7169574036ad9c3662de438e93f2378222714e54c3e4e1f342296aed088445a10a9433d37eb51973cfde007d4fff5c2f8d2daaaa73afd0ee4b2e99b6431c7a850b89c90a5fbf9a3fc", 0xe3}, {&(0x7f0000001dc0)="f0c3d6e82208ca7035bd4b62639c325ae53c1c8edf317162dd2670bafa621cc6dcc287b81d7bbedf7e2dc8016c6768d50c7cf3132b4f990675ed543ecf441dbeb0bbb3295257e67224b31d8652fec06f01cec1acf8e305ab1951e9664dc3f9b62595e3c36b89684880403f1e00aaf70e688f5304234c1d9edef75c35", 0x7c}, {&(0x7f0000001e40)="fb68d20bf23faedb59e7068d23cd930d0b40b988c669b49a80874e3e4cc263b403565e73ee74a6714a55905d17e30e", 0x2f}, {&(0x7f0000001e80)="469a7a279a717179f22b16029d0b069e270ef20d1468efe05fd67341e3d902dbc0eba09ae3e32d91659c922d2b38c1f3f7039f98a4092edb621328bfbe27c341ccf294a1dcb6aca7aea7fc3e8875d1501e01dbcd7b237553b63288fad10c060683fe3467e2d36aa2a541272e08f83afd57619612e50e4c72042cf0bf7c3105d9bdd6154ca122a93ac76b50f645c502dfc3fa76216d2fb29a0e703c11ea283958f75e9da815c3590a21ae458b81823408030068c085c9896070753519584f7fffbbb798b4aab3d12c003e6a27c9c34534254f96c608d86a54dc87bad18887b1ce1619", 0xe2}], 0x4, &(0x7f0000001fc0)={0x28, 0xc, 0x7, "0358757eba72abfe736ec85af190ffa075"}, 0x28, 0x20000014}, {&(0x7f0000002000)={0x27, 0x0, 0x1, 0xe, 0x16, 0x40, "039b58b94a69c99fc57ff447424a10fe29a0b175559cc781039584163052f4936dedea64e427b8f262ef26df2d7a99b6df0af5462afb215b7cc81fa8f1c476", 0xb}, 0x60, &(0x7f00000020c0)=[{&(0x7f0000002080)}], 0x1, &(0x7f0000002100)={0xfffffffffffffeee, 0x109, 0x3, "cfe7274bc9e437d55003dfe12933a66b4b2fbdfed4ad94b16c514d6619fc2fdf81a57385f817558311e2bddc67712491e09a32e8a7afd12b7097361e2b428673d414728932fef502abd18f9fcfc228397ae65f0f4e57a91b57ffef47386d81406c27f15673b103c3f9290233e83e9a5267e54273a8abfa6aa53978719740e137"}, 0x90, 0x1}, {&(0x7f00000021c0)={0x27, 0x1, 0x1, 0x3, 0x3, 0x24, "7b877962d9b4a1c685631842b34c1fd48126720a8406f1b62d39de701110d585a55a2e1fab6f82f710cfc462f3740e76414654929e748b1173d635cd5a52cf", 0x11}, 0x60, &(0x7f0000002740)=[{&(0x7f0000002240)="96043fa95a854584f2a18286aabfc6e14b154983fea94bed5b261663c5d2f86321ac9ed3f2788b3314d978b13147348239c65232518be01cac3e5e536d9dfb63466478dd279d587db11adaf7d9bfd2bba4c6a97f5bacdbc2ebecc83cf8e9199bc075361cc4fa6a45f9f096927e92bc9e5ae81511a95dc7e52d412828a02fcb1ee981eb4b60945f494e7aab363ceb3e0313edafcbd418203084fe88f77053f77aeb85209367117d49bb85e0f79dac34cf2c5cab9b21729f2eac1b8272336a6878c3fa5027bddb6fa6c83d49", 0xcb}, {&(0x7f0000002340)="3587a1e0d10c5d222cf7a52d7c2f0565251093d00010b04b401714893d0155e42896e3f319138bb364c8d8bf7d1b1151e8c624b3831c403331846c64dd9cde8265c0e3619bc4ed", 0x47}, {&(0x7f00000023c0)="53f53dda40f529908110953ecb41f45cec85c6c7d91a6fc0e4244122ea23cb80c782c66216156fed759cb679117f0579d28c48549a98991cbfc32c98861862cfc676d1a3ba1b7143fcf9e9efb7204743b08b70cd41c769e883e7c10000fbcfba49d8d2c0c525fe07ce18e6eabf3d0e34377aa84124cf0f4dc45d06e362b518712c0c5613a7617d1f9e46d5567aa54490c7ba1cb43af6c6cc8e5e0e53925c13291b4b24afb9c5e6aeb58b6bf9f3cb8ef62e9b62bbe0b5aad5a0b450c3d9c19e68d0cb71328628999d6de35379b7588dd2311d9e1470e69cff7d560a114f90dffb34c6f2c4e68f4a7b6914c0af", 0xec}, {&(0x7f00000024c0)="f7c49924d06bba0affc74e8a21e4bcbaaae646187e6263e57d0297aebb986f5ba9f6d8fc2f916d2f070092216ac3709b227b98f449bfe9ea3422d79950992b69201266f7527389eba4bacfee86fec720c1f6626e2d0acc632f21fe6d861dcb9c547149fc7c6280fdbc59457ce899030da36ac7ee36a0392a8b9522bbb3798c2fe494c18a0308faa737ce204a3775", 0x8e}, {&(0x7f0000002580)="7295ce16de1f3356b13c3a2d81bb33ca8c06042fd27a1d21e547c5300356672f7d8ff6159d53928742c57bd24dfca20c19b2dda24276644196cb9c1557bbb0bb3756c302ebacd494568b00b158390aede27c01ad1dc52cad8a1caf2792d78811d1ba150f68686188849eea7222cdd99b8014be90711a5f76d814b0e221cb2e3a12460b583bd432cdfa187648fd536283e7308fa6c698eb865dd3a30bddc56700d773080195b67ec3d701a2d2b50488b0abb8994a2ee77fce273ceb", 0xbb}, {&(0x7f0000002640)="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", 0xfd}], 0x6, &(0x7f00000027c0)={0x78, 0x118, 0x7, "e9e2e8eb172492f4b8db0360edc2ae5c175ee35fd0eb74da32d33e5261b095ec8fde3f785cca16fdaec845deb5aaa1941110ee5848b8c5b0da921e7a4eb13c431de64927ded140641f5c5dac9729041ca2ecc20a9823d63d1090b6e8f43512a75ef186"}, 0x78, 0x8000}], 0x9, 0x4081) 20:53:00 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x2, 0x0, {0x0, 0x7c}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f0000000080)='./file0\x00', 0x400, 0x100, &(0x7f00000000c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) recvfrom$packet(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64, 0x0, &(0x7f0000000340)={0x11, 0x1a, r3, 0x1, 0x1f, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', r3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) 20:53:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:53:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x17e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xcf, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:00 executing program 5: syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000100)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000080)={{0x5}, 0x0, 0xfffffffd, 0x0, {0x0, 0x4}, 0xfb, 0xfffffffe}) [ 2940.126601] protocol 88fb is buggy, dev hsr_slave_0 [ 2940.131785] protocol 88fb is buggy, dev hsr_slave_1 20:53:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) fsync(r0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 2940.286625] protocol 88fb is buggy, dev hsr_slave_0 [ 2940.291777] protocol 88fb is buggy, dev hsr_slave_1 [ 2940.328878] Bluetooth: hci1: Frame reassembly failed (-84) [ 2940.766675] protocol 88fb is buggy, dev hsr_slave_0 [ 2940.771799] protocol 88fb is buggy, dev hsr_slave_1 [ 2940.777003] protocol 88fb is buggy, dev hsr_slave_0 [ 2940.782314] protocol 88fb is buggy, dev hsr_slave_1 [ 2941.726679] Bluetooth: hci0: command 0x1003 tx timeout [ 2941.733097] Bluetooth: hci0: sending frame failed (-49) [ 2942.366838] Bluetooth: hci1: command 0x1003 tx timeout [ 2942.372414] Bluetooth: hci1: sending frame failed (-49) [ 2943.806762] Bluetooth: hci0: command 0x1001 tx timeout [ 2943.812220] Bluetooth: hci0: sending frame failed (-49) [ 2944.446840] Bluetooth: hci1: command 0x1001 tx timeout [ 2944.452308] Bluetooth: hci1: sending frame failed (-49) [ 2944.926741] net_ratelimit: 16 callbacks suppressed [ 2944.926750] protocol 88fb is buggy, dev hsr_slave_0 [ 2944.936847] protocol 88fb is buggy, dev hsr_slave_1 [ 2944.941957] protocol 88fb is buggy, dev hsr_slave_0 [ 2944.947072] protocol 88fb is buggy, dev hsr_slave_1 [ 2945.886693] Bluetooth: hci0: command 0x1009 tx timeout [ 2945.966735] protocol 88fb is buggy, dev hsr_slave_0 [ 2945.971916] protocol 88fb is buggy, dev hsr_slave_1 [ 2946.366692] protocol 88fb is buggy, dev hsr_slave_0 [ 2946.371821] protocol 88fb is buggy, dev hsr_slave_1 [ 2946.526689] protocol 88fb is buggy, dev hsr_slave_0 [ 2946.531818] protocol 88fb is buggy, dev hsr_slave_1 [ 2946.536653] Bluetooth: hci1: command 0x1009 tx timeout 20:53:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:53:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x17f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:53:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x81}) 20:53:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xd0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r9, 0x10, &(0x7f0000000780)={0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB='\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYBLOB], 0x50}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000001000)="1aafdb517ccb933795b89218e7709e", 0xf}], 0x1, &(0x7f00000010c0)}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x0) r11 = getpgrp(r10) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000080)={[], 0x7fff, 0x0, 0x7f, 0x7, 0x0, r11}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:53:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 2949.919185] Bluetooth: hci0: sending frame failed (-49) 20:53:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xd1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x180, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x200, 0x0, {}, 0x0, 0xfffffffd}) 20:53:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 2950.126639] net_ratelimit: 14 callbacks suppressed [ 2950.126647] protocol 88fb is buggy, dev hsr_slave_0 [ 2950.137006] protocol 88fb is buggy, dev hsr_slave_1 20:53:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x181, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 2950.526666] protocol 88fb is buggy, dev hsr_slave_0 [ 2950.531785] protocol 88fb is buggy, dev hsr_slave_1 [ 2950.696622] protocol 88fb is buggy, dev hsr_slave_0 [ 2950.701923] protocol 88fb is buggy, dev hsr_slave_1 [ 2951.166697] protocol 88fb is buggy, dev hsr_slave_0 [ 2951.171836] protocol 88fb is buggy, dev hsr_slave_1 [ 2951.177039] protocol 88fb is buggy, dev hsr_slave_0 [ 2951.182284] protocol 88fb is buggy, dev hsr_slave_1 [ 2951.966636] Bluetooth: hci0: command 0x1003 tx timeout [ 2951.972111] Bluetooth: hci0: sending frame failed (-49) [ 2954.046717] Bluetooth: hci0: command 0x1001 tx timeout [ 2954.052169] Bluetooth: hci0: sending frame failed (-49) [ 2955.326764] net_ratelimit: 16 callbacks suppressed [ 2955.331782] protocol 88fb is buggy, dev hsr_slave_0 [ 2955.337086] protocol 88fb is buggy, dev hsr_slave_1 [ 2955.342408] protocol 88fb is buggy, dev hsr_slave_0 [ 2955.347666] protocol 88fb is buggy, dev hsr_slave_1 [ 2956.126707] Bluetooth: hci0: command 0x1009 tx timeout [ 2956.366737] protocol 88fb is buggy, dev hsr_slave_0 [ 2956.371894] protocol 88fb is buggy, dev hsr_slave_1 [ 2956.766644] protocol 88fb is buggy, dev hsr_slave_0 [ 2956.771896] protocol 88fb is buggy, dev hsr_slave_1 [ 2956.926670] protocol 88fb is buggy, dev hsr_slave_0 [ 2956.932044] protocol 88fb is buggy, dev hsr_slave_1 20:53:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:53:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xd2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:53:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/d\xdfw/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x40, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x1c) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x18) 20:53:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='\x00\x00\x00\x00\x00\x00\x00\x00\xa3\xbd\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) execveat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000100)='trustedem1ppp0posix_acl_accesssystem^\x00', &(0x7f0000000140)='/dev/snd/seq\x00'], &(0x7f00000003c0)=[&(0x7f00000001c0)='\x00', &(0x7f0000000200)='/dev/snd/seq\x00', &(0x7f0000000240)='em0--%[\x00', &(0x7f0000000280)='/dev/snd/seq\x00', &(0x7f00000002c0)='$}nodev%..),cpuset\x00', &(0x7f0000000300)='usertrusted$.Iproc\x00', &(0x7f0000000340)='wlan1+\'\x00', &(0x7f0000000380)='selinuxtrustedwlan0vboxnet0%vboxnet1vmnet0]\x00'], 0x1000) r2 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000440)={0x8f76, 0x3, 'client0\x00', 0x1, "9b23e43b40bb407e", "a77a4b1cf51bf494080a71f9ec27acc6f8851d1cfd6bbc19055d51b1c40a843f", 0x1, 0x401}) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000000)=""/22) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000400)=""/17) 20:53:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x182, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xabb) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x78c80cdb992453cf) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc53b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff635}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40800}, 0x40) r4 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000080)={0xffffff81, 0x8, 0x3, 0x2, 0x8000, 0x8}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000000)={{0x57, 0x6}, 0x0, 0x0, 0xb15, {0x1}, 0x0, 0x8000}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) 20:53:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 2960.166359] Bluetooth: hci0: Frame reassembly failed (-84) 20:53:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xd3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x183, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r2, r3, 0xd, 0x2}, 0x10) 20:53:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x94002000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0xfffffffffffffedd}}, 0x4) getsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000180), &(0x7f0000000200)=0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 2960.449672] Bluetooth: hci2: Frame reassembly failed (-84) [ 2960.526684] net_ratelimit: 14 callbacks suppressed [ 2960.526693] protocol 88fb is buggy, dev hsr_slave_0 [ 2960.536926] protocol 88fb is buggy, dev hsr_slave_1 [ 2960.926616] protocol 88fb is buggy, dev hsr_slave_0 [ 2960.931807] protocol 88fb is buggy, dev hsr_slave_1 [ 2961.086633] protocol 88fb is buggy, dev hsr_slave_0 [ 2961.091787] protocol 88fb is buggy, dev hsr_slave_1 [ 2961.566709] protocol 88fb is buggy, dev hsr_slave_0 [ 2961.571973] protocol 88fb is buggy, dev hsr_slave_1 [ 2961.577209] protocol 88fb is buggy, dev hsr_slave_0 [ 2961.582413] protocol 88fb is buggy, dev hsr_slave_1 [ 2962.206664] Bluetooth: hci0: command 0x1003 tx timeout [ 2962.212215] Bluetooth: hci0: sending frame failed (-49) [ 2962.366652] Bluetooth: hci1: command 0x1003 tx timeout [ 2962.372162] Bluetooth: hci1: sending frame failed (-49) [ 2962.526741] Bluetooth: hci2: command 0x1003 tx timeout [ 2962.532168] Bluetooth: hci2: sending frame failed (-49) [ 2964.286678] Bluetooth: hci0: command 0x1001 tx timeout [ 2964.292105] Bluetooth: hci0: sending frame failed (-49) [ 2964.446682] Bluetooth: hci1: command 0x1001 tx timeout [ 2964.452126] Bluetooth: hci1: sending frame failed (-49) [ 2964.606752] Bluetooth: hci2: command 0x1001 tx timeout [ 2964.612181] Bluetooth: hci2: sending frame failed (-49) [ 2965.726726] net_ratelimit: 16 callbacks suppressed [ 2965.731723] protocol 88fb is buggy, dev hsr_slave_0 [ 2965.736982] protocol 88fb is buggy, dev hsr_slave_1 [ 2965.742414] protocol 88fb is buggy, dev hsr_slave_0 [ 2965.747629] protocol 88fb is buggy, dev hsr_slave_1 [ 2966.366729] Bluetooth: hci0: command 0x1009 tx timeout [ 2966.526691] Bluetooth: hci1: command 0x1009 tx timeout [ 2966.686743] Bluetooth: hci2: command 0x1009 tx timeout [ 2966.766743] protocol 88fb is buggy, dev hsr_slave_0 [ 2966.771999] protocol 88fb is buggy, dev hsr_slave_1 [ 2967.166662] protocol 88fb is buggy, dev hsr_slave_0 [ 2967.171749] protocol 88fb is buggy, dev hsr_slave_1 [ 2967.326643] protocol 88fb is buggy, dev hsr_slave_0 [ 2967.331919] protocol 88fb is buggy, dev hsr_slave_1 20:53:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:53:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xd4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x184, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101080, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000000c0)=0x9c) 20:53:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001140)={r2, &(0x7f0000000100)="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", &(0x7f0000001100)=""/37}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, &(0x7f00000011c0)={0x80000005, 0xee3a, 0x1, 0x7fffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000080)={0x20, 0xffff, 0x0, 0x100, 0x81, 0x1}) 20:53:31 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000080)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x1, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000100)={0x0, 0x2, 0x9, 'queue0\x00', 0x10001}) 20:53:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x185, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:53:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xd5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:31 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/sn\x04\x00\x00\x00q\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4$llc(r2, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x800) fanotify_init(0x12, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000100)={'ifb0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x3}) 20:53:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x186, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$TIOCSETD(r1, 0x5437, 0x0) [ 2970.926727] net_ratelimit: 14 callbacks suppressed [ 2970.926737] protocol 88fb is buggy, dev hsr_slave_0 [ 2970.931829] protocol 88fb is buggy, dev hsr_slave_1 [ 2971.042039] Bluetooth: hci1: Frame reassembly failed (-84) [ 2971.326661] protocol 88fb is buggy, dev hsr_slave_0 [ 2971.331846] protocol 88fb is buggy, dev hsr_slave_1 [ 2971.486621] protocol 88fb is buggy, dev hsr_slave_0 [ 2971.491811] protocol 88fb is buggy, dev hsr_slave_1 [ 2971.966722] protocol 88fb is buggy, dev hsr_slave_0 [ 2971.971964] protocol 88fb is buggy, dev hsr_slave_1 [ 2971.977173] protocol 88fb is buggy, dev hsr_slave_0 [ 2971.982293] protocol 88fb is buggy, dev hsr_slave_1 [ 2972.376601] Bluetooth: hci0: command 0x1003 tx timeout [ 2972.382055] Bluetooth: hci0: sending frame failed (-49) [ 2973.086609] Bluetooth: hci1: command 0x1003 tx timeout [ 2973.092074] Bluetooth: hci1: sending frame failed (-49) [ 2973.166598] Bluetooth: hci2: command 0x1003 tx timeout [ 2973.172101] Bluetooth: hci2: sending frame failed (-49) [ 2974.446671] Bluetooth: hci0: command 0x1001 tx timeout [ 2974.452113] Bluetooth: hci0: sending frame failed (-49) [ 2975.166699] Bluetooth: hci1: command 0x1001 tx timeout [ 2975.172104] Bluetooth: hci1: sending frame failed (-49) [ 2975.246709] Bluetooth: hci2: command 0x1001 tx timeout [ 2975.252150] Bluetooth: hci2: sending frame failed (-49) [ 2976.126707] net_ratelimit: 16 callbacks suppressed [ 2976.131725] protocol 88fb is buggy, dev hsr_slave_0 [ 2976.137000] protocol 88fb is buggy, dev hsr_slave_1 [ 2976.142308] protocol 88fb is buggy, dev hsr_slave_0 [ 2976.147549] protocol 88fb is buggy, dev hsr_slave_1 [ 2976.526723] Bluetooth: hci0: command 0x1009 tx timeout [ 2977.166721] protocol 88fb is buggy, dev hsr_slave_0 [ 2977.171833] protocol 88fb is buggy, dev hsr_slave_1 [ 2977.246700] Bluetooth: hci1: command 0x1009 tx timeout [ 2977.326696] Bluetooth: hci2: command 0x1009 tx timeout [ 2977.566695] protocol 88fb is buggy, dev hsr_slave_0 [ 2977.571867] protocol 88fb is buggy, dev hsr_slave_1 [ 2977.726622] protocol 88fb is buggy, dev hsr_slave_0 [ 2977.731709] protocol 88fb is buggy, dev hsr_slave_1 20:53:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:53:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/d\xf7v/snd/s\x02\x00\x80', 0x0, 0xeda7a6fe8e279469) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x4}) 20:53:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x187, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xd6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) [ 2980.592654] Bluetooth: hci0: sending frame failed (-49) 20:53:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x188, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xd7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:53:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) rt_sigprocmask(0x1, &(0x7f0000000080)={0x8}, &(0x7f00000000c0), 0x8) 20:53:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x189, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xd8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4000000000000) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101080, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}, 0x699}, 0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={r6, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x76}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000002c0)={r7, 0x3, 0xe7, "0ebcf16906c2d7fc11ced0bc722b9f090f6302a0b90f0230ea5d5622e9ac7c97dcd2d4670b1db62596c696fa58b13a35808dfd6cba138d46ca123ddba8538d0d840044ee90fee44dad36205924668c36ebd5b695ccc91b0d6603829eac7b13801a70787d969c40d99828886550238aae4139843c36f56059f7016f4f6fa7995c0b0bc98554eb3f66bc094c818b3a98666d79ba5d1f28bb39300a4fe403cc6d36970b2047cf17b0a38ab2274798005f372a779cc5b844cf46c074adf9ac84e1e3a41883bce191b910999b93daf0802d3389efa70b282184a8e1c21232b5a9c78e88802e8f11c96a"}, 0xef) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$TIOCSETD(r9, 0x5437, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)={{0xcc, 0x6, 0x7, 0x1ed, 0x356, 0x4, 0x3a7, 0x3}, "a2181bf63a90efb6e6ac3d12a03cb86cf2f49d3cd7cb2994b1f78c3046a5f16f4dac19da88ef430259f86b1c938d5bf6b533605409f836a5acae4fe4f2a1fb928f67c5eb96612e123f2c54b176cab0b53a31c2b95d0c69c7fd1b4f530d40adafa93feb7f3a0d3d45097fed88760afebd144f6f5368556135ad076431d7d04aff380cae67e915fa5213d51af464b8f152f1533249b21722fec8812a42ceafb4c18decb25a08b3e69db0d72326c8ecbd2dfb04fd1639c45b008bce4c5efb0fff23e3eef68c3eecf63d54de"}, 0xea) [ 2981.287056] Bluetooth: hci1: Frame reassembly failed (-84) [ 2981.304097] Bluetooth: hci2: Frame reassembly failed (-84) [ 2981.326713] net_ratelimit: 14 callbacks suppressed [ 2981.326743] protocol 88fb is buggy, dev hsr_slave_0 [ 2981.336874] protocol 88fb is buggy, dev hsr_slave_1 [ 2981.726668] protocol 88fb is buggy, dev hsr_slave_0 [ 2981.731782] protocol 88fb is buggy, dev hsr_slave_1 [ 2981.886636] protocol 88fb is buggy, dev hsr_slave_0 [ 2981.891807] protocol 88fb is buggy, dev hsr_slave_1 [ 2982.366672] protocol 88fb is buggy, dev hsr_slave_0 [ 2982.371865] protocol 88fb is buggy, dev hsr_slave_1 [ 2982.377131] protocol 88fb is buggy, dev hsr_slave_0 [ 2982.382347] protocol 88fb is buggy, dev hsr_slave_1 [ 2982.606638] Bluetooth: hci0: command 0x1003 tx timeout [ 2982.612124] Bluetooth: hci0: sending frame failed (-49) [ 2983.326610] Bluetooth: hci2: command 0x1003 tx timeout [ 2983.326687] Bluetooth: hci1: command 0x1003 tx timeout [ 2983.337576] Bluetooth: hci2: sending frame failed (-49) [ 2983.343094] Bluetooth: hci1: sending frame failed (-49) [ 2984.686645] Bluetooth: hci0: command 0x1001 tx timeout [ 2984.692069] Bluetooth: hci0: sending frame failed (-49) [ 2985.406752] Bluetooth: hci1: command 0x1001 tx timeout [ 2985.412211] Bluetooth: hci1: sending frame failed (-49) [ 2985.417760] Bluetooth: hci2: command 0x1001 tx timeout [ 2985.423140] Bluetooth: hci2: sending frame failed (-49) [ 2986.526723] net_ratelimit: 16 callbacks suppressed [ 2986.532092] protocol 88fb is buggy, dev hsr_slave_0 [ 2986.537363] protocol 88fb is buggy, dev hsr_slave_1 [ 2986.542728] protocol 88fb is buggy, dev hsr_slave_0 [ 2986.547943] protocol 88fb is buggy, dev hsr_slave_1 [ 2986.766697] Bluetooth: hci0: command 0x1009 tx timeout [ 2987.486693] Bluetooth: hci2: command 0x1009 tx timeout [ 2987.486718] Bluetooth: hci1: command 0x1009 tx timeout [ 2987.566767] protocol 88fb is buggy, dev hsr_slave_0 [ 2987.571936] protocol 88fb is buggy, dev hsr_slave_1 [ 2987.966691] protocol 88fb is buggy, dev hsr_slave_0 [ 2987.971818] protocol 88fb is buggy, dev hsr_slave_1 [ 2988.126655] protocol 88fb is buggy, dev hsr_slave_0 [ 2988.131803] protocol 88fb is buggy, dev hsr_slave_1 20:53:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:53:51 executing program 5: getgid() syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x42, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0xc3, 0x5b}, 0x0, 0x204, 0x0, {0xa5}, 0x0, 0x100}) 20:53:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xd9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x18a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000000c0)={0x16, 0x6f, 0x2, {0x1, [{0x1, 0x1, 0x5}]}}, 0x16) syz_open_procfs(0x0, &(0x7f0000000080)='schedstat\x00') [ 2990.841994] Bluetooth: hci0: Frame reassembly failed (-84) 20:53:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x18b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000080)={'veth0_to_bridge\x00', {0x2, 0x4e20}}) r2 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:53:52 executing program 5: syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r3, 0xfffffffffffffff9, 0xfffffffffffffff9, 0xe84, 0x401}) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0xc6000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000000)={{0x0, 0x47}, 0x0, 0x0, 0x0, {}, 0x0, 0xfffffffc}) 20:53:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xda, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x18c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:53:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:53:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x81, 0x6, 0x9, 0x81, 0x0, 0x2, 0x26644213130a6d25, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1f, 0x1, @perf_config_ext={0x7, 0x1}, 0x2e30, 0x20, 0xfffffea9, 0x8, 0xf0ca, 0x8, 0x7fff}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000100)={0x9, 0x9, 0x9, 0x1, 0x3, 0x0, 0xbf, 0x401, 0x0, 0x7, 0x5e, 0x27, 0xffe0, 0x5, &(0x7f0000000040)=""/28, 0x8, 0x4, 0x7}) [ 2991.555188] Bluetooth: hci1: Frame reassembly failed (-84) [ 2991.736672] net_ratelimit: 14 callbacks suppressed [ 2991.736681] protocol 88fb is buggy, dev hsr_slave_0 [ 2991.746840] protocol 88fb is buggy, dev hsr_slave_1 [ 2992.126630] protocol 88fb is buggy, dev hsr_slave_0 [ 2992.131775] protocol 88fb is buggy, dev hsr_slave_1 [ 2992.286624] protocol 88fb is buggy, dev hsr_slave_0 [ 2992.291776] protocol 88fb is buggy, dev hsr_slave_1 [ 2992.766725] protocol 88fb is buggy, dev hsr_slave_0 [ 2992.771880] protocol 88fb is buggy, dev hsr_slave_1 [ 2992.777087] protocol 88fb is buggy, dev hsr_slave_0 [ 2992.782166] protocol 88fb is buggy, dev hsr_slave_1 [ 2992.846584] Bluetooth: hci0: command 0x1003 tx timeout [ 2992.852012] Bluetooth: hci0: sending frame failed (-49) [ 2993.566686] Bluetooth: hci1: command 0x1003 tx timeout [ 2993.572297] Bluetooth: hci1: sending frame failed (-49) [ 2994.926672] Bluetooth: hci0: command 0x1001 tx timeout [ 2994.932141] Bluetooth: hci0: sending frame failed (-49) [ 2995.646696] Bluetooth: hci1: command 0x1001 tx timeout [ 2995.652126] Bluetooth: hci1: sending frame failed (-49) [ 2996.926707] net_ratelimit: 16 callbacks suppressed [ 2996.926715] protocol 88fb is buggy, dev hsr_slave_0 [ 2996.936848] protocol 88fb is buggy, dev hsr_slave_1 [ 2996.941998] protocol 88fb is buggy, dev hsr_slave_0 [ 2996.947105] protocol 88fb is buggy, dev hsr_slave_1 [ 2997.006727] Bluetooth: hci0: command 0x1009 tx timeout [ 2997.726681] Bluetooth: hci1: command 0x1009 tx timeout [ 2997.966693] protocol 88fb is buggy, dev hsr_slave_0 [ 2997.971818] protocol 88fb is buggy, dev hsr_slave_1 [ 2998.366671] protocol 88fb is buggy, dev hsr_slave_0 [ 2998.371761] protocol 88fb is buggy, dev hsr_slave_1 [ 2998.526735] protocol 88fb is buggy, dev hsr_slave_0 [ 2998.531895] protocol 88fb is buggy, dev hsr_slave_1 20:54:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:54:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='$\xebdv/\xce\xff\x00', 0x0, 0x446080) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0xa, 0x8) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000340)={{0x1d, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x1, 'wrr\x00', 0x2, 0xffffffff, 0x74}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e22, 0x2, 0x3, 0x4, 0x200}}, 0x44) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000180)={0x9, 0x1, {0xffffffffffffffff, 0x0, 0x3ff, 0x3, 0xc1f}}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000140)=0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x100}) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000080)={0x0, {0x3ff, 0x5c, 0x5, 0x672d}, {0x0, 0x40, 0x7fffffff, 0x7ff}, {0x2, 0x3}}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuset.memory_pressure\x00-\x1fc\x1aH:\x80\xf9\xba/\x9c\x1a\xfd6\xf2\xbf:>\x19\v\x9e\xa0\xb3\xa0\x97\x8e\x97\x9e\xf5\xae\x1b\xcd*\xb4\xa5\xadM\xd9\x9e\xe6\x84\x12\xdd\xa5\xc6\xe5\xe9~\x92AS\f? \xd0~D\xcb\xefr\x8eC\xf5\xf4\xe4\xcf\"\x80\xeb\x12\xa9\xb4_b\xa0\xc7\x1aq\xd5\xeb\xf6\x06%Zk\xf2a\x00\xf8\xef9\xf9\x85\xf8\r\xd5 \x12V\xd5\xac\xd5R\xc9\nk\x9f\xd4\xce0\xf4\x83\xb6{\'\xf4\xd63\xcf\xec5\xd2\bQZa\t\xdd\x1b\xd3\x9c\xde\xe4\xdf\xe3SM\xc7]\x1b13\x1b\x8e>*]\x03:\xaa\x11\x82\x14hu0Y@7\xa2\x89\xe6\xe0\x1e\xc6q\xda\xc9,\xfd\x03\x03~\xc6\xb8\x8f\xb9\x94\x9d\xc7\xd4\xc4\x03\x00\x00\x00\x00\x00\x00\x00\xfa#\x81\xd1K.\xc4GO\xf3&\xe5\xc9;\xc3\xbe\xb5k\xba,\xda\xb1\x00'/251, 0x0, 0x0) accept$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10) 20:54:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xdb, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x18d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x13) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:54:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) chroot(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = socket$inet6(0xa, 0x6, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept$unix(r3, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={'eql\x00', {0x2, 0x4e23, @empty}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:54:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xdc, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3001.097955] Bluetooth: hci0: sending frame failed (-49) 20:54:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x18e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x301000, 0x0) 20:54:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xdd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3001.330011] Bluetooth: hci2: Frame reassembly failed (-84) 20:54:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:54:02 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x2, 0x2) getsockopt$rose(r3, 0x104, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) write$P9_RLINK(r3, &(0x7f0000000080)={0xff11, 0x47, 0x1}, 0xfd27) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) [ 3001.734901] Bluetooth: hci1: Frame reassembly failed (-84) [ 3002.126667] net_ratelimit: 14 callbacks suppressed [ 3002.126676] protocol 88fb is buggy, dev hsr_slave_0 [ 3002.136842] protocol 88fb is buggy, dev hsr_slave_1 [ 3002.526614] protocol 88fb is buggy, dev hsr_slave_0 [ 3002.531728] protocol 88fb is buggy, dev hsr_slave_1 [ 3002.686618] protocol 88fb is buggy, dev hsr_slave_0 [ 3002.691770] protocol 88fb is buggy, dev hsr_slave_1 [ 3003.166745] Bluetooth: hci0: command 0x1003 tx timeout [ 3003.172642] Bluetooth: hci0: sending frame failed (-49) [ 3003.178208] protocol 88fb is buggy, dev hsr_slave_0 [ 3003.178258] protocol 88fb is buggy, dev hsr_slave_1 [ 3003.178353] protocol 88fb is buggy, dev hsr_slave_0 [ 3003.178392] protocol 88fb is buggy, dev hsr_slave_1 [ 3003.406666] Bluetooth: hci2: command 0x1003 tx timeout [ 3003.412076] Bluetooth: hci2: sending frame failed (-49) [ 3003.806665] Bluetooth: hci1: command 0x1003 tx timeout [ 3003.812233] Bluetooth: hci1: sending frame failed (-49) [ 3005.247097] Bluetooth: hci0: command 0x1001 tx timeout [ 3005.252546] Bluetooth: hci0: sending frame failed (-49) [ 3005.486692] Bluetooth: hci2: command 0x1001 tx timeout [ 3005.492116] Bluetooth: hci2: sending frame failed (-49) [ 3005.886703] Bluetooth: hci1: command 0x1001 tx timeout [ 3005.892129] Bluetooth: hci1: sending frame failed (-49) [ 3007.326750] net_ratelimit: 16 callbacks suppressed [ 3007.331769] protocol 88fb is buggy, dev hsr_slave_0 [ 3007.337023] protocol 88fb is buggy, dev hsr_slave_1 [ 3007.342366] protocol 88fb is buggy, dev hsr_slave_0 [ 3007.347613] protocol 88fb is buggy, dev hsr_slave_1 [ 3007.352973] Bluetooth: hci0: command 0x1009 tx timeout [ 3007.566809] Bluetooth: hci2: command 0x1009 tx timeout [ 3007.966649] Bluetooth: hci1: command 0x1009 tx timeout [ 3008.366743] protocol 88fb is buggy, dev hsr_slave_0 [ 3008.371915] protocol 88fb is buggy, dev hsr_slave_1 [ 3008.766664] protocol 88fb is buggy, dev hsr_slave_0 [ 3008.771785] protocol 88fb is buggy, dev hsr_slave_1 [ 3008.926653] protocol 88fb is buggy, dev hsr_slave_0 [ 3008.931770] protocol 88fb is buggy, dev hsr_slave_1 20:54:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:54:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x18f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xde, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:11 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x3, 0xf5}, 'port1\x00', 0x4, 0x40, 0x7, 0x0, 0x3, 0x3, 0x9, 0x0, 0x4, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x1}) 20:54:11 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x80, 0x3}, 0x0, 0x97f}) 20:54:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x190, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xdf, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:12 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001480)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000016c0)={&(0x7f0000001440), 0xc, &(0x7f0000001680)={&(0x7f00000014c0)={0x19c, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xba}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x154, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0xc840}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000780)={0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB='\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB], 0x50}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000001000)="1aafdb517ccb933795b89218e7709e", 0xf}], 0x1, &(0x7f00000010c0)}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x3f, 0x2, 0x4, 0x74, 0x0, 0x2, 0x4, 0x16, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x7, @perf_bp={&(0x7f0000000100)}, 0x8, 0x1, 0x0, 0x1, 0x56f, 0x20, 0x3}, r6, 0x8, 0xffffffffffffffff, 0x7) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f00000000c0)) [ 3011.493785] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=43 sclass=netlink_audit_socket pig=14214 comm=syz-executor.5 20:54:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3b) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "1e9988eeb64dff527e06e23cc7760edda94e290d93c49c809bc06291112b111ae01b853afef2cb143900fca2c9c4e5ec5a00"/63}, 0x4a) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000140)={0x8, 0x4, 0x4, 0x8e5, 0x2, 0x8, 0xfffffffb, 0x35c0, 0x2fc, 0x8, 0x87, 0x2, 0xee, 0x4, &(0x7f0000000100)=""/50, 0x3, 0x99, 0x6f}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) fcntl$getflags(0xffffffffffffffff, 0x2) 20:54:12 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) sched_getscheduler(r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:54:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x191, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xe0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3012.526676] net_ratelimit: 14 callbacks suppressed [ 3012.531697] protocol 88fb is buggy, dev hsr_slave_0 [ 3012.537544] protocol 88fb is buggy, dev hsr_slave_1 [ 3012.926702] protocol 88fb is buggy, dev hsr_slave_0 [ 3012.932123] protocol 88fb is buggy, dev hsr_slave_1 [ 3013.086641] protocol 88fb is buggy, dev hsr_slave_0 [ 3013.091902] protocol 88fb is buggy, dev hsr_slave_1 [ 3013.326664] Bluetooth: hci0: command 0x1003 tx timeout [ 3013.332140] Bluetooth: hci0: sending frame failed (-49) [ 3013.566722] protocol 88fb is buggy, dev hsr_slave_0 [ 3013.571900] protocol 88fb is buggy, dev hsr_slave_1 [ 3013.577098] protocol 88fb is buggy, dev hsr_slave_0 [ 3013.582205] protocol 88fb is buggy, dev hsr_slave_1 [ 3015.406699] Bluetooth: hci0: command 0x1001 tx timeout [ 3015.412258] Bluetooth: hci0: sending frame failed (-49) [ 3017.486693] Bluetooth: hci0: command 0x1009 tx timeout [ 3017.726747] net_ratelimit: 16 callbacks suppressed [ 3017.731760] protocol 88fb is buggy, dev hsr_slave_0 [ 3017.737224] protocol 88fb is buggy, dev hsr_slave_1 [ 3017.742565] protocol 88fb is buggy, dev hsr_slave_0 [ 3017.747822] protocol 88fb is buggy, dev hsr_slave_1 [ 3018.766724] protocol 88fb is buggy, dev hsr_slave_0 [ 3018.771908] protocol 88fb is buggy, dev hsr_slave_1 [ 3019.166661] protocol 88fb is buggy, dev hsr_slave_0 [ 3019.171842] protocol 88fb is buggy, dev hsr_slave_1 [ 3019.326699] protocol 88fb is buggy, dev hsr_slave_0 [ 3019.331885] protocol 88fb is buggy, dev hsr_slave_1 20:54:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) fcntl$dupfd(r2, 0x0, r0) r3 = accept(r1, &(0x7f0000000100)=@nl, &(0x7f0000000080)=0x80) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000200), 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x4f0883) getsockname$ax25(r5, &(0x7f0000000280)={{0x3, @rose}, [@rose, @null, @default, @rose, @rose, @bcast, @default, @null]}, &(0x7f0000000300)=0x48) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000180)=""/112) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:54:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:54:22 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x105000, 0x167) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000100)={0xffff, 0x2, 0x83, {0x77359400}, 0x3ff, 0x2}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000080)={0x3, 0xfffffffa}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:54:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x192, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xe1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 3021.563829] Bluetooth: hci0: Frame reassembly failed (-84) 20:54:22 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x329200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) [ 3021.612684] Bluetooth: hci1: Frame reassembly failed (-84) 20:54:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x193, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xe2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:22 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)) 20:54:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xe3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x194, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3022.926701] net_ratelimit: 14 callbacks suppressed [ 3022.926710] protocol 88fb is buggy, dev hsr_slave_0 [ 3022.936950] protocol 88fb is buggy, dev hsr_slave_1 [ 3023.326602] protocol 88fb is buggy, dev hsr_slave_0 [ 3023.331755] protocol 88fb is buggy, dev hsr_slave_1 [ 3023.486636] protocol 88fb is buggy, dev hsr_slave_0 [ 3023.491811] protocol 88fb is buggy, dev hsr_slave_1 [ 3023.566627] Bluetooth: hci0: command 0x1003 tx timeout [ 3023.572107] Bluetooth: hci0: sending frame failed (-49) [ 3023.646617] Bluetooth: hci2: command 0x1003 tx timeout [ 3023.646623] Bluetooth: hci1: command 0x1003 tx timeout [ 3023.646702] Bluetooth: hci1: sending frame failed (-49) [ 3023.654162] Bluetooth: hci2: sending frame failed (-49) [ 3023.966705] protocol 88fb is buggy, dev hsr_slave_0 [ 3023.971876] protocol 88fb is buggy, dev hsr_slave_1 [ 3023.977074] protocol 88fb is buggy, dev hsr_slave_0 [ 3023.982308] protocol 88fb is buggy, dev hsr_slave_1 [ 3025.646682] Bluetooth: hci0: command 0x1001 tx timeout [ 3025.652106] Bluetooth: hci0: sending frame failed (-49) [ 3025.726685] Bluetooth: hci1: command 0x1001 tx timeout [ 3025.726737] Bluetooth: hci2: command 0x1001 tx timeout [ 3025.737427] Bluetooth: hci1: sending frame failed (-49) [ 3025.743052] Bluetooth: hci2: sending frame failed (-49) [ 3027.726666] Bluetooth: hci0: command 0x1009 tx timeout [ 3027.806627] Bluetooth: hci2: command 0x1009 tx timeout [ 3027.806633] Bluetooth: hci1: command 0x1009 tx timeout [ 3028.126725] net_ratelimit: 16 callbacks suppressed [ 3028.131727] protocol 88fb is buggy, dev hsr_slave_0 [ 3028.136932] protocol 88fb is buggy, dev hsr_slave_1 [ 3028.142104] protocol 88fb is buggy, dev hsr_slave_0 [ 3028.147253] protocol 88fb is buggy, dev hsr_slave_1 [ 3029.166722] protocol 88fb is buggy, dev hsr_slave_0 [ 3029.171864] protocol 88fb is buggy, dev hsr_slave_1 [ 3029.566726] protocol 88fb is buggy, dev hsr_slave_0 [ 3029.571906] protocol 88fb is buggy, dev hsr_slave_1 [ 3029.726628] protocol 88fb is buggy, dev hsr_slave_0 [ 3029.731922] protocol 88fb is buggy, dev hsr_slave_1 20:54:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xe4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/d\xa4@\x04\xec\xfe\xfc\xe7\x1b\x00', 0x0, 0x100401) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) finit_module(0xffffffffffffffff, &(0x7f0000000100)='/d\xa4@\x04\xec\xfe\xfc\xe7\x1b\x00', 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000044ee14fa608d3d123389ea02e0"], 0x16d) 20:54:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x195, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:54:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:54:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000100)=0x10005) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x940, 0xffeb}, {0x4, 0xc62}, {0x9, 0x2}, {0x8c, 0x4}, {0x400, 0x9}, {0x1000, 0x1ff}, {0xc34, 0x1}]}) ioctl$KDADDIO(r4, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5437, 0x0) 20:54:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x2}) 20:54:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x196, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:54:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xe5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3031.954964] Bluetooth: hci0: Frame reassembly failed (-84) [ 3031.961595] Bluetooth: hci0: Frame reassembly failed (-84) 20:54:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000080)=0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:54:32 executing program 4: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000200)={0x10001, 0xed, 0x8, 0xc8, &(0x7f0000000100)=""/200, 0x30, &(0x7f0000000000)=""/48, 0x3, &(0x7f0000000080)=""/3}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:54:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:54:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x197, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xe6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:32 executing program 5: syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x0, {0x3}, 0xfd}) [ 3032.213685] Bluetooth: hci1: Frame reassembly failed (-84) [ 3033.326711] net_ratelimit: 14 callbacks suppressed [ 3033.326720] protocol 88fb is buggy, dev hsr_slave_0 [ 3033.336870] protocol 88fb is buggy, dev hsr_slave_1 [ 3033.726638] protocol 88fb is buggy, dev hsr_slave_0 [ 3033.731759] protocol 88fb is buggy, dev hsr_slave_1 [ 3033.886591] protocol 88fb is buggy, dev hsr_slave_0 [ 3033.891725] protocol 88fb is buggy, dev hsr_slave_1 [ 3033.966608] Bluetooth: hci0: command 0x1003 tx timeout [ 3033.972087] Bluetooth: hci0: sending frame failed (-49) [ 3034.286701] Bluetooth: hci1: command 0x1003 tx timeout [ 3034.292156] Bluetooth: hci1: sending frame failed (-49) [ 3034.366688] protocol 88fb is buggy, dev hsr_slave_0 [ 3034.371795] protocol 88fb is buggy, dev hsr_slave_1 [ 3034.376992] protocol 88fb is buggy, dev hsr_slave_0 [ 3034.382202] protocol 88fb is buggy, dev hsr_slave_1 [ 3036.046659] Bluetooth: hci0: command 0x1001 tx timeout [ 3036.052117] Bluetooth: hci0: sending frame failed (-49) [ 3036.366657] Bluetooth: hci1: command 0x1001 tx timeout [ 3036.372086] Bluetooth: hci1: sending frame failed (-49) [ 3038.126700] Bluetooth: hci0: command 0x1009 tx timeout [ 3038.446694] Bluetooth: hci1: command 0x1009 tx timeout [ 3038.526739] net_ratelimit: 16 callbacks suppressed [ 3038.526747] protocol 88fb is buggy, dev hsr_slave_0 [ 3038.536856] protocol 88fb is buggy, dev hsr_slave_1 [ 3038.542141] protocol 88fb is buggy, dev hsr_slave_0 [ 3038.547376] protocol 88fb is buggy, dev hsr_slave_1 [ 3039.566745] protocol 88fb is buggy, dev hsr_slave_0 [ 3039.571986] protocol 88fb is buggy, dev hsr_slave_1 [ 3039.966660] protocol 88fb is buggy, dev hsr_slave_0 [ 3039.971764] protocol 88fb is buggy, dev hsr_slave_1 [ 3040.126693] protocol 88fb is buggy, dev hsr_slave_0 [ 3040.131783] protocol 88fb is buggy, dev hsr_slave_1 20:54:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:54:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:54:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400000, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x7, 0x104e, 0x0, 0x3f, 0xff, 0x3d, 0x1, 0x1, 0x1f, 0x2, 0x81, 0xfb, 0x3ff}, {0x6, 0xfff, 0x7f, 0x6, 0x1, 0x80, 0x40, 0x6, 0x1, 0x1, 0x0, 0x91}, {0x8, 0x5, 0x32, 0xb2, 0x5, 0xac, 0x2, 0x0, 0x1, 0x9, 0x6, 0x8b, 0x7}], 0x1ebf}) 20:54:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x198, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xe7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:42 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x319400, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e1e, 0x106, @loopback, 0xfffffff7}}, 0x0, 0x4006, 0x0, "c8a6709074481d27afdf29c8d691679f739a413195336f7c6ec66e0b014b0a3d2acdcf6b1a9d03f4c76dff8d602b4c7521a59671f760071b1db5dfb6a10d2e767a3378bbe6083f2bb53523c879191e8f"}, 0xd8) r1 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x7, 0x10000) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:54:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 3042.102929] Bluetooth: hci0: Frame reassembly failed (-84) [ 3042.109450] Bluetooth: hci0: Frame reassembly failed (-84) 20:54:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xe8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:43 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x199, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:43 executing program 5: stat(&(0x7f0000001840)='./file0\x00', &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0xa84e, 0xa, &(0x7f0000001740)=[{&(0x7f0000000100)="3a34a64cad51f89e6e23df565478bfec27448299bffbf1daaa4bcc2396b6d90504a7d8253a72faff4b1851f14525efc2ac0164815886e760cc668318ac1efe5d5753cd5939bfebee9451ff192f986973e5e749739c34d6933a6b7da29feee9262adf1ca3cfa012449b9e7e4244237f409f", 0x71, 0x3f}, {&(0x7f0000000180)="4751a04b9bc55b5ffce20c35e589cb10e619d914d5000e24dd5a", 0x1a, 0xfffffffffffffffc}, {&(0x7f00000001c0)="8b1a9e8a61c694aa5d49b604171fb412f50068f33b0e1171d83a7342402e90d9f229a94a95db25575a35498a8668caa1e271d82630af709e322c38f248a5c45f7cd388a6fde6cfbe13c24fc0b6fd310d765da486f8eed5028351d11bff60275703cc346df9f8f5ebb218df0795494a5d7a92ced380f5cce05772e50ebe83fbd115a40875560257195c54d95d8f592ae9b0b08303bc6201bc2b923172a46d08232384961f599b28ff723a53ba0f545a02dd5cd68a13a0df9a2cc8ba70c6cadd50dd9805", 0xc3, 0x1}, {&(0x7f00000002c0)="26ed173963e5da13ef3bb328ea9c77df1f1e0d22e062deb60c6bc436336c43ffa999ecd5bbb64d06d4e0b745a61d9479e0619144c62e23fc8053854104f4af2211cc6190593238d438c63941ef5c80efb156", 0x52, 0x4}, {&(0x7f0000000340)="e561017c1d722444b06d0efefcf38f2c9d1102dab2b78582beab2bfe3c984279f443e58e26403f5baf6d7c1d7f458512b35b330997382ce1de9caf7c18ae0cb71b1887a2db58f0c13eee07460e7dc8ae7a749a9a8da215f232abe299823689b769b47a44cf68ef4ec2cd847d8f15fe", 0x6f, 0x80000000}, {&(0x7f00000003c0)="5d6a7a477565210cc93ce1098fb013e23635b85bdbecd0672fbe91c71dc5baf3caa790c6004e3acd10bfbaed8ceb25672994a52131c99d842dd6728af7f5cc2cd139e45cf99bb418f3e28c4d240f72df6a365f142588ce78b86c29b88cf22a5f76ff6fed67d54b632b33849ee0dc806874b2905df5c78d70653aceb4a02986b54b38de32f92121fa62a655e4befc93334cf4f6f5a509266a0ec441504551cc6c44cab4609e488f5587fd0de5e6e79d0e4ecf9244d7516e438718213f24fa78d844980f3fa99ae40f7479efdd66e1ee30f8fd50c1721817fff32a2af87b15cb32026d7ee039382712445599f2f4c3eba0789a76837bf40eaf", 0xf8, 0xa01f}, {&(0x7f00000004c0)="e3f9629da47bee594d2b5e5980ae5a9b88bdd20aa804b712e38de0822fe1975d0f5fa7213e6028b37c7a36a5c18914f1ee40931d0e4e068c9b44fed13426ad907737d5d113da2f2e8be64cce2abb2b64cd0caa1eb7d456e34879b641e583d83f8238aa1feed25494292ac745e46fca5a71cbc3abd677cc121ecaa897f02e3f8fe13a8dcd20605673c990f34f73cc849cc40d", 0x92, 0x5}, {&(0x7f0000000580)="5c9e1bb1416ed459d35c15912f45f8ae9344fb665819856aada41c6f0ccca32a7960c7fea09295c168d4d1c2c9c91d16ef460b4539d4f142787dd2ab48b5694b5e559244a8ab5e36689c87fd61f4a7476aa05a7b9f106b7bd4c864c52347304ca97a45aa4ca399b31cbe6d02f3cda74b59b657504f128512287e755100aff7f186583f381c5dd7b336c98926c08b5aed3c7ea2c01de9de6c8d28569bb2fac3411e9029d76d6bad7424ca4a87c2c94a5c03344d9302aa2a1f8d3553da9d6a48c996a5442b943672d9332db6e8f4b56073f98d98771a3c341a6f08114fac631cb2eee5ba108bff915ac00591bb9531b99f0af0", 0xf2, 0x5c}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="793e267a0d36f139a0b776fe5ea630f83ce8715d829c5255576f5bbe1f611645f9ee682039d9331b1b6d66eb35907ba8c399ae719b8aeb0a47c12d2eb1348b4b1f97864b639466e64c84253ae0f084d68dc95af89af9be45d4e3af4397c7875d26043f79602a4159c9a0f643a39e251360ca6ee9ed6781e91a5bf9aa064a9a14460273c5e4bb0bd9607cc56fa038ac670baf474f7520c27c21f201a7cc066f94fc5a7457c937bc716934dfaeedfe6f58d0cd0c6d35f576b4", 0xb8, 0xcc19}], 0x1000000, &(0x7f0000001900)={[{@lfs_mode='mode=lfs'}, {@adaptive_mode='mode=adaptive'}, {@noacl='noacl'}, {@acl='acl'}, {@acl='acl'}], [{@dont_hash='dont_hash'}, {@fowner_gt={'fowner>', r0}}]}) r1 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:54:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:54:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffffffffffffff01, 0x40240) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) pwrite64(r8, &(0x7f0000000200)="5ccde084545895ef60d284", 0xb, 0x9) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000000c0)={r10, @in={{0x2, 0x0, @empty}}, 0x699}, 0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000180)={0x3, 0x5, 0x3, 0x9, 0x0, 0x0, 0x7454, 0x6, r10}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x4, {0xa, 0x4e24, 0xf56, @dev={0xfe, 0x80, [], 0xf}, 0x1}, r11}}, 0x38) [ 3042.685278] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0xf8067d82) [ 3042.725328] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3042.741397] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3042.756665] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 3042.764685] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0xf8067d82) [ 3042.773390] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 3042.792080] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3042.799810] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 3043.726704] net_ratelimit: 14 callbacks suppressed [ 3043.726713] protocol 88fb is buggy, dev hsr_slave_0 [ 3043.736873] protocol 88fb is buggy, dev hsr_slave_1 [ 3044.126651] Bluetooth: hci0: command 0x1003 tx timeout [ 3044.132069] Bluetooth: hci0: sending frame failed (-49) [ 3044.137574] protocol 88fb is buggy, dev hsr_slave_0 [ 3044.137631] protocol 88fb is buggy, dev hsr_slave_1 [ 3044.286667] protocol 88fb is buggy, dev hsr_slave_0 [ 3044.291855] protocol 88fb is buggy, dev hsr_slave_1 [ 3044.776697] protocol 88fb is buggy, dev hsr_slave_0 [ 3044.781953] protocol 88fb is buggy, dev hsr_slave_1 [ 3044.787165] protocol 88fb is buggy, dev hsr_slave_0 [ 3044.792232] protocol 88fb is buggy, dev hsr_slave_1 [ 3046.206868] Bluetooth: hci0: command 0x1001 tx timeout [ 3046.212288] Bluetooth: hci0: sending frame failed (-49) [ 3048.286899] Bluetooth: hci0: command 0x1009 tx timeout [ 3048.926732] net_ratelimit: 16 callbacks suppressed [ 3048.931752] protocol 88fb is buggy, dev hsr_slave_0 [ 3048.937036] protocol 88fb is buggy, dev hsr_slave_1 [ 3048.942545] protocol 88fb is buggy, dev hsr_slave_0 [ 3048.947843] protocol 88fb is buggy, dev hsr_slave_1 [ 3049.966711] protocol 88fb is buggy, dev hsr_slave_0 [ 3049.971873] protocol 88fb is buggy, dev hsr_slave_1 [ 3050.366676] protocol 88fb is buggy, dev hsr_slave_0 [ 3050.372604] protocol 88fb is buggy, dev hsr_slave_1 [ 3050.526690] protocol 88fb is buggy, dev hsr_slave_0 [ 3050.531806] protocol 88fb is buggy, dev hsr_slave_1 20:54:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:54:52 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 20:54:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x19a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xe9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40000, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400242, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x16) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:54:52 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x200400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:54:52 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 20:54:52 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) fchmod(0xffffffffffffffff, 0x10) 20:54:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x19b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:54:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xea, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3052.373023] Bluetooth: hci0: Frame reassembly failed (-84) 20:54:53 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unlinkat(r3, &(0x7f0000000100)='./file0\x00', 0x200) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:54:53 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) [ 3054.126744] net_ratelimit: 14 callbacks suppressed [ 3054.126753] protocol 88fb is buggy, dev hsr_slave_0 [ 3054.136940] protocol 88fb is buggy, dev hsr_slave_1 [ 3054.446603] Bluetooth: hci0: command 0x1003 tx timeout [ 3054.452017] Bluetooth: hci0: sending frame failed (-49) [ 3054.526729] protocol 88fb is buggy, dev hsr_slave_0 [ 3054.531862] protocol 88fb is buggy, dev hsr_slave_1 [ 3054.686648] protocol 88fb is buggy, dev hsr_slave_0 [ 3054.691751] protocol 88fb is buggy, dev hsr_slave_1 [ 3055.166662] protocol 88fb is buggy, dev hsr_slave_0 [ 3055.171766] protocol 88fb is buggy, dev hsr_slave_1 [ 3055.177097] protocol 88fb is buggy, dev hsr_slave_0 [ 3055.182370] protocol 88fb is buggy, dev hsr_slave_1 [ 3056.526785] Bluetooth: hci0: command 0x1001 tx timeout [ 3056.532214] Bluetooth: hci0: sending frame failed (-49) [ 3058.606691] Bluetooth: hci0: command 0x1009 tx timeout [ 3059.326728] net_ratelimit: 16 callbacks suppressed [ 3059.326738] protocol 88fb is buggy, dev hsr_slave_0 [ 3059.336885] protocol 88fb is buggy, dev hsr_slave_1 [ 3059.342330] protocol 88fb is buggy, dev hsr_slave_0 [ 3059.347560] protocol 88fb is buggy, dev hsr_slave_1 [ 3060.366701] protocol 88fb is buggy, dev hsr_slave_0 [ 3060.371880] protocol 88fb is buggy, dev hsr_slave_1 [ 3060.766670] protocol 88fb is buggy, dev hsr_slave_0 [ 3060.771807] protocol 88fb is buggy, dev hsr_slave_1 [ 3060.926633] protocol 88fb is buggy, dev hsr_slave_0 [ 3060.931983] protocol 88fb is buggy, dev hsr_slave_1 20:55:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xeb, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x19c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:03 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x400, 0x200) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:55:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000080)={0x2, 0x1, 'client0\x00', 0x4, "3aa4b4f32cb01999", "1eb5a6f703448097d551d4b065ad35915d5fc6dfe806556e66d56c1db647d395", 0x186}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:55:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x19d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3062.594666] Bluetooth: hci0: sending frame failed (-49) 20:55:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xec, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000100)={0xc, 0x81, {0x57, 0x5, 0x6, {0x5, 0x94}, {0x6, 0x7fff}, @period={0x5c, 0x9, 0x4, 0x200, 0x2, {0x3, 0x100, 0x6, 0x81}, 0x3, &(0x7f0000000000)=[0xf4b, 0x4, 0xef95]}}, {0xc71e715ec2c04fb5, 0x1, 0x3, {0x401, 0x8000}, {0x3, 0x1ff}, @cond=[{0x7e, 0x8, 0xc406, 0x9, 0xffff, 0x4}, {0x200, 0x3f, 0xfffd, 0x7, 0x1, 0x8000}]}}) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40000) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000100)={0x40, 0x1, 'client0\x00', 0x3, "43589e784cda8355", "1e576c7b1fc420161c25411d5067e0a477995f64833a322db17f868904e33ca6", 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) [ 3062.772940] Bluetooth: hci1: Frame reassembly failed (-84) 20:55:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x19e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xed, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3064.526668] net_ratelimit: 14 callbacks suppressed [ 3064.526677] protocol 88fb is buggy, dev hsr_slave_0 [ 3064.536859] protocol 88fb is buggy, dev hsr_slave_1 [ 3064.606701] Bluetooth: hci0: command 0x1003 tx timeout [ 3064.612105] Bluetooth: hci0: sending frame failed (-49) [ 3064.846595] Bluetooth: hci1: command 0x1003 tx timeout [ 3064.852087] Bluetooth: hci1: sending frame failed (-49) [ 3064.926589] protocol 88fb is buggy, dev hsr_slave_0 [ 3064.931718] protocol 88fb is buggy, dev hsr_slave_1 [ 3065.086615] protocol 88fb is buggy, dev hsr_slave_0 [ 3065.091731] protocol 88fb is buggy, dev hsr_slave_1 [ 3065.566705] protocol 88fb is buggy, dev hsr_slave_0 [ 3065.571866] protocol 88fb is buggy, dev hsr_slave_1 [ 3065.577044] protocol 88fb is buggy, dev hsr_slave_0 [ 3065.582319] protocol 88fb is buggy, dev hsr_slave_1 [ 3066.686673] Bluetooth: hci0: command 0x1001 tx timeout [ 3066.692109] Bluetooth: hci0: sending frame failed (-49) [ 3066.926675] Bluetooth: hci1: command 0x1001 tx timeout [ 3066.932190] Bluetooth: hci1: sending frame failed (-49) [ 3068.766692] Bluetooth: hci0: command 0x1009 tx timeout [ 3069.006688] Bluetooth: hci1: command 0x1009 tx timeout [ 3069.736750] net_ratelimit: 16 callbacks suppressed [ 3069.736759] protocol 88fb is buggy, dev hsr_slave_0 [ 3069.746863] protocol 88fb is buggy, dev hsr_slave_1 [ 3069.752160] protocol 88fb is buggy, dev hsr_slave_0 [ 3069.757407] protocol 88fb is buggy, dev hsr_slave_1 [ 3070.766723] protocol 88fb is buggy, dev hsr_slave_0 [ 3070.771897] protocol 88fb is buggy, dev hsr_slave_1 [ 3071.166664] protocol 88fb is buggy, dev hsr_slave_0 [ 3071.171750] protocol 88fb is buggy, dev hsr_slave_1 [ 3071.326662] protocol 88fb is buggy, dev hsr_slave_0 [ 3071.331828] protocol 88fb is buggy, dev hsr_slave_1 20:55:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x19f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:13 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000080)={{0x1, 0x0, @descriptor="d9c7239c0264f9e1"}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x0, {}, 0x0, 0x95c8}) 20:55:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xee, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 3072.782734] Bluetooth: hci0: Frame reassembly failed (-84) 20:55:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1a0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:13 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r1 = getuid() r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r4, 0xc0a85322, &(0x7f0000000240)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x0, &(0x7f0000000100)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x9d4}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0xffff}}, {@mode={'mode', 0x3d, 0x2d6}}, {@mode={'mode', 0x3d, 0x7}}], [{@permit_directio='permit_directio'}, {@obj_user={'obj_user'}}, {@uid_eq={'uid', 0x3d, r1}}, {@audit='audit'}, {@uid_gt={'uid>', r5}}]}) fgetxattr(r2, &(0x7f0000000300)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000340)=""/234, 0xea) 20:55:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xef, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r1, 0x440}, {r2, 0xa3b8}, {r0, 0x4}, {r3}, {r4, 0x800}, {r5, 0x4000}, {r8, 0x6000}], 0x7, 0x328e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:14 executing program 5: ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x2, 0x0, 0x2c, 0x0, 0xc7, 0x40, 0x5, 0x1, 0x1f, 0x0, 0x5, 0x81, 0x0, 0x4, 0xbc65, 0x7f, 0x81, 0x5a, 0x81}) r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:55:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3073.430682] Bluetooth: hci1: Frame reassembly failed (-84) 20:55:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1a1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3074.846600] Bluetooth: hci0: command 0x1003 tx timeout [ 3074.852259] Bluetooth: hci0: sending frame failed (-49) [ 3074.926637] net_ratelimit: 14 callbacks suppressed [ 3074.926644] protocol 88fb is buggy, dev hsr_slave_0 [ 3074.936937] protocol 88fb is buggy, dev hsr_slave_1 [ 3075.326614] protocol 88fb is buggy, dev hsr_slave_0 [ 3075.331727] protocol 88fb is buggy, dev hsr_slave_1 [ 3075.486604] protocol 88fb is buggy, dev hsr_slave_0 [ 3075.491755] protocol 88fb is buggy, dev hsr_slave_1 [ 3075.496996] Bluetooth: hci1: command 0x1003 tx timeout [ 3075.502366] Bluetooth: hci1: sending frame failed (-49) [ 3075.966731] protocol 88fb is buggy, dev hsr_slave_0 [ 3075.971931] protocol 88fb is buggy, dev hsr_slave_1 [ 3075.977295] protocol 88fb is buggy, dev hsr_slave_0 [ 3075.982532] protocol 88fb is buggy, dev hsr_slave_1 [ 3076.926656] Bluetooth: hci0: command 0x1001 tx timeout [ 3076.932081] Bluetooth: hci0: sending frame failed (-49) [ 3077.566909] Bluetooth: hci1: command 0x1001 tx timeout [ 3077.572343] Bluetooth: hci1: sending frame failed (-49) [ 3079.006747] Bluetooth: hci0: command 0x1009 tx timeout [ 3079.646868] Bluetooth: hci1: command 0x1009 tx timeout [ 3080.126747] net_ratelimit: 16 callbacks suppressed [ 3080.131821] protocol 88fb is buggy, dev hsr_slave_0 [ 3080.137232] protocol 88fb is buggy, dev hsr_slave_1 [ 3080.142588] protocol 88fb is buggy, dev hsr_slave_0 [ 3080.147860] protocol 88fb is buggy, dev hsr_slave_1 [ 3081.166735] protocol 88fb is buggy, dev hsr_slave_0 [ 3081.171970] protocol 88fb is buggy, dev hsr_slave_1 [ 3081.566714] protocol 88fb is buggy, dev hsr_slave_0 [ 3081.571967] protocol 88fb is buggy, dev hsr_slave_1 [ 3081.726658] protocol 88fb is buggy, dev hsr_slave_0 [ 3081.731946] protocol 88fb is buggy, dev hsr_slave_1 20:55:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:23 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0xd8}}) 20:55:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1a2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:23 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:55:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 3083.060596] Bluetooth: hci0: Frame reassembly failed (-84) 20:55:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1a3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) flock(r0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x4, 0x101440) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000100)={0x10, 0x3, {0x51, 0x1f, 0xf96, {0x0, 0x200}, {0x4}, @cond=[{0x40, 0x4000, 0x0, 0xdf80, 0x1}, {0x5, 0x1, 0x1, 0x7, 0x3, 0x100}]}, {0x0, 0xbe1d, 0xfe00, {0x5, 0x7}, {0x3f, 0x1000}, @period={0x5c, 0x1ff, 0x4, 0x5, 0x9, {0x8001, 0x401, 0x9, 0x101}, 0x3, &(0x7f00000000c0)=[0xfff7, 0x7, 0x8]}}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0xfc, 0x58}, 0x0, 0xfffffffe, 0x1, {0x0, 0x2b}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$security_ima(r4, &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@sha1={0x1, "8fac874ffdd6c0788a64932a5932b0a77bf15758"}, 0x15, 0x1) r5 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r7, 0x6, 0x2, &(0x7f0000000280)=0xf1, 0x4) ioctl$KVM_GET_PIT(r7, 0xc048ae65, &(0x7f0000000200)) ioctl$SIOCRSACCEPT(r5, 0x89e3) 20:55:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000780)={0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB='\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB], 0x50}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000001000)="1aafdb517ccb933795b89218e7709e", 0xf}], 0x1, &(0x7f00000010c0)}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup(0xffffffffffffffff) r6 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @dev, 0x6}, 0x1c) getsockopt$sock_buf(r6, 0x1, 0x19, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000000)=0x0) wait4(r7, 0x0, 0x40000000, 0x0) r8 = getpgid(r7) r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x80000000000000, 0x0, 0x4}, 0x0) r10 = getpid() sched_setattr(r10, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r11 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r12 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r13 = fcntl$dupfd(r11, 0x0, r12) r14 = gettid() ioctl$BLKTRACESETUP(r13, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x5, 0x81, 0x1, r14}) r15 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r16 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r17 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r18 = fcntl$dupfd(r16, 0x0, r17) r19 = gettid() ioctl$BLKTRACESETUP(r18, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x81, 0x1, r19}) r20 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r21 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r21, 0x0, 0x0) r22 = getpgrp(0x0) waitid(0x0, r22, &(0x7f00000002c0), 0x5, 0x0) r23 = getpgid(r22) r24 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r24, 0x8904, &(0x7f0000000000)=0x0) r26 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r27 = openat$cgroup_ro(r26, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r28 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r29 = inotify_init1(0x0) r30 = gettid() fcntl$setown(r29, 0x8, r30) r31 = getpid() r32 = socket(0xa, 0x3, 0x8) r33 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r32, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r33, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r32, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r35 = gettid() waitid(0x0, r35, &(0x7f0000000780), 0x8, &(0x7f0000000800)) sendmsg$key(r32, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r34, @ANYRESDEC=r35]], 0xfffffffffffffe56}}, 0x20004850) r36 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r37 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r38 = dup2(r37, r36) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x4, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00u#c1y\x8a\xc6^\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r38, 0xc08c5334, &(0x7f0000000200)) r39 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r39) timer_create(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r39}, 0x0) kcmp(r39, r39, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r39, 0x0, 0x0) r40 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r39, r40, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r41}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r35, r38, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r41}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r41}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r41}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r31, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r41}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r41}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r30, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r41}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r28, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r41}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r27, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r41}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r25, r24, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r41}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r23, r21, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r41}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r41}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r19, r20, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r41}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r41}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r14, r15, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r41}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r10, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000040)='GPLvmnet0\\]GPL&systemeth1\x00', r41}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00', r41}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r9, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000000c0)='*\x00\x00\x00/Ppp\x00', r41}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r8, r5, 0x0, 0x3, &(0x7f0000000100)=',)\x00', r41}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r41}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000140)='team0\x00', r41}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r41}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, r4, 0x0, 0x1, &(0x7f0000000000)='\x00', r41}, 0x30) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r42, 0x5a, &(0x7f0000000100)=""/4096) 20:55:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:24 executing program 5: r0 = semget(0x1, 0x2, 0x20) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000080)=""/128) r1 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:55:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3083.740337] Bluetooth: hci1: Frame reassembly failed (-84) [ 3085.086603] Bluetooth: hci0: command 0x1003 tx timeout [ 3085.092882] Bluetooth: hci0: sending frame failed (-49) [ 3085.336640] net_ratelimit: 14 callbacks suppressed [ 3085.336647] protocol 88fb is buggy, dev hsr_slave_0 [ 3085.346831] protocol 88fb is buggy, dev hsr_slave_1 [ 3085.726619] protocol 88fb is buggy, dev hsr_slave_0 [ 3085.731939] protocol 88fb is buggy, dev hsr_slave_1 [ 3085.806610] Bluetooth: hci1: command 0x1003 tx timeout [ 3085.812042] Bluetooth: hci1: sending frame failed (-49) [ 3085.886698] protocol 88fb is buggy, dev hsr_slave_0 [ 3085.891978] protocol 88fb is buggy, dev hsr_slave_1 [ 3086.376652] protocol 88fb is buggy, dev hsr_slave_0 [ 3086.381795] protocol 88fb is buggy, dev hsr_slave_1 [ 3086.387053] protocol 88fb is buggy, dev hsr_slave_0 [ 3086.392323] protocol 88fb is buggy, dev hsr_slave_1 [ 3087.166642] Bluetooth: hci0: command 0x1001 tx timeout [ 3087.172079] Bluetooth: hci0: sending frame failed (-49) [ 3087.886729] Bluetooth: hci1: command 0x1001 tx timeout [ 3087.892379] Bluetooth: hci1: sending frame failed (-49) [ 3089.246721] Bluetooth: hci0: command 0x1009 tx timeout [ 3089.966738] Bluetooth: hci1: command 0x1009 tx timeout [ 3090.526768] net_ratelimit: 16 callbacks suppressed [ 3090.532318] protocol 88fb is buggy, dev hsr_slave_0 [ 3090.537463] protocol 88fb is buggy, dev hsr_slave_1 [ 3090.542846] protocol 88fb is buggy, dev hsr_slave_0 [ 3090.548361] protocol 88fb is buggy, dev hsr_slave_1 [ 3091.566790] protocol 88fb is buggy, dev hsr_slave_0 [ 3091.576075] protocol 88fb is buggy, dev hsr_slave_1 [ 3091.966685] protocol 88fb is buggy, dev hsr_slave_0 [ 3091.972175] protocol 88fb is buggy, dev hsr_slave_1 [ 3092.126683] protocol 88fb is buggy, dev hsr_slave_0 [ 3092.131925] protocol 88fb is buggy, dev hsr_slave_1 20:55:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1a4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0xfffffffe, 0x5, {}, 0x0, 0x800}) 20:55:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/d\xb9~H\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0xfe, 0x7}}) 20:55:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r2, 0x5}, 0x10) 20:55:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1a5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:34 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x8180, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000100)={0x1, 0x0, 0x102, 0x2, {0x8000, 0x100, 0x9, 0x7}}) 20:55:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x9efbb53a044eb434) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0x4, 0x5, 0x2, {0x77359400}, 0x1b814362, 0xb1c}) 20:55:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 20:55:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1a6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:34 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3094.090986] Bluetooth: hci1: Frame reassembly failed (-84) 20:55:34 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x3) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x2, &(0x7f0000000080)=[r1, 0x0]) r2 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) [ 3094.132923] Bluetooth: hci2: Frame reassembly failed (-84) [ 3095.726703] net_ratelimit: 14 callbacks suppressed [ 3095.726712] protocol 88fb is buggy, dev hsr_slave_0 [ 3095.736865] protocol 88fb is buggy, dev hsr_slave_1 [ 3095.966635] Bluetooth: hci0: command 0x1003 tx timeout [ 3095.972167] Bluetooth: hci0: sending frame failed (-49) [ 3096.126647] protocol 88fb is buggy, dev hsr_slave_0 [ 3096.126654] Bluetooth: hci1: command 0x1003 tx timeout [ 3096.136754] Bluetooth: hci1: sending frame failed (-49) [ 3096.137385] protocol 88fb is buggy, dev hsr_slave_1 [ 3096.206592] Bluetooth: hci2: command 0x1003 tx timeout [ 3096.212122] Bluetooth: hci2: sending frame failed (-49) [ 3096.286635] protocol 88fb is buggy, dev hsr_slave_0 [ 3096.291796] protocol 88fb is buggy, dev hsr_slave_1 [ 3096.776677] protocol 88fb is buggy, dev hsr_slave_0 [ 3096.781867] protocol 88fb is buggy, dev hsr_slave_1 [ 3096.787108] protocol 88fb is buggy, dev hsr_slave_0 [ 3096.792336] protocol 88fb is buggy, dev hsr_slave_1 [ 3098.046731] Bluetooth: hci0: command 0x1001 tx timeout [ 3098.052458] Bluetooth: hci0: sending frame failed (-49) [ 3098.206673] Bluetooth: hci1: command 0x1001 tx timeout [ 3098.212130] Bluetooth: hci1: sending frame failed (-49) [ 3098.286736] Bluetooth: hci2: command 0x1001 tx timeout [ 3098.292188] Bluetooth: hci2: sending frame failed (-49) [ 3100.126669] Bluetooth: hci0: command 0x1009 tx timeout [ 3100.286799] Bluetooth: hci1: command 0x1009 tx timeout [ 3100.366613] Bluetooth: hci2: command 0x1009 tx timeout [ 3100.926731] net_ratelimit: 16 callbacks suppressed [ 3100.931774] protocol 88fb is buggy, dev hsr_slave_0 [ 3100.937111] protocol 88fb is buggy, dev hsr_slave_1 [ 3100.942281] protocol 88fb is buggy, dev hsr_slave_0 [ 3100.947519] protocol 88fb is buggy, dev hsr_slave_1 [ 3101.966750] protocol 88fb is buggy, dev hsr_slave_0 [ 3101.971984] protocol 88fb is buggy, dev hsr_slave_1 [ 3102.366644] protocol 88fb is buggy, dev hsr_slave_0 [ 3102.371781] protocol 88fb is buggy, dev hsr_slave_1 [ 3102.526741] protocol 88fb is buggy, dev hsr_slave_0 [ 3102.531937] protocol 88fb is buggy, dev hsr_slave_1 20:55:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1a7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{0x0, 0xba}, {0x2, 0xe0}, 0x6, 0x4, 0x2}) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x400000) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x3) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r5, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000140)={0x90, 0x0, 0x8, {0x3, 0x3, 0x80000000, 0x4, 0x3, 0x80, {0x4, 0x1, 0x67ee, 0x1ff, 0x0, 0x9, 0x6, 0x8, 0xd1d4, 0x4, 0x63d, r3, r5, 0x2}}}, 0x90) 20:55:44 executing program 5: syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x20, 0x200a81) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x0, 0x7}, 0x1, 0xffffffff, 0x0, {}, 0x0, 0xd3c00000}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$CAPI_NCCI_OPENCOUNT(r3, 0x80044326, &(0x7f0000000000)=0x9) [ 3104.125531] Bluetooth: hci0: Frame reassembly failed (-84) 20:55:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1a8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3104.193758] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3104.206217] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 20:55:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:45 executing program 5: syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x1) syz_open_dev$sndseq(&(0x7f0000000100)='\x00\x8a\xb2\f\x00yd\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x8000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000140)={{0x3e}, 0x0, 0x1ff, 0xfffffffe, {}, 0x4, 0x2}) 20:55:45 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1a9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 20:55:45 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1aa, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3104.843622] Bluetooth: hci1: Frame reassembly failed (-84) [ 3104.873640] Bluetooth: hci2: Frame reassembly failed (-84) [ 3106.126651] net_ratelimit: 14 callbacks suppressed [ 3106.126660] protocol 88fb is buggy, dev hsr_slave_0 [ 3106.126740] Bluetooth: hci0: command 0x1003 tx timeout [ 3106.131690] protocol 88fb is buggy, dev hsr_slave_1 [ 3106.156126] Bluetooth: hci0: sending frame failed (-49) [ 3106.526615] protocol 88fb is buggy, dev hsr_slave_0 [ 3106.531762] protocol 88fb is buggy, dev hsr_slave_1 [ 3106.686616] protocol 88fb is buggy, dev hsr_slave_0 [ 3106.691808] protocol 88fb is buggy, dev hsr_slave_1 [ 3106.846605] Bluetooth: hci1: command 0x1003 tx timeout [ 3106.852064] Bluetooth: hci1: sending frame failed (-49) [ 3106.926590] Bluetooth: hci2: command 0x1003 tx timeout [ 3106.932133] Bluetooth: hci2: sending frame failed (-49) [ 3107.166683] protocol 88fb is buggy, dev hsr_slave_0 [ 3107.171904] protocol 88fb is buggy, dev hsr_slave_1 [ 3107.177102] protocol 88fb is buggy, dev hsr_slave_0 [ 3107.182160] protocol 88fb is buggy, dev hsr_slave_1 [ 3108.206767] Bluetooth: hci0: command 0x1001 tx timeout [ 3108.212231] Bluetooth: hci0: sending frame failed (-49) [ 3108.926727] Bluetooth: hci1: command 0x1001 tx timeout [ 3108.932134] Bluetooth: hci1: sending frame failed (-49) [ 3109.006683] Bluetooth: hci2: command 0x1001 tx timeout [ 3109.012108] Bluetooth: hci2: sending frame failed (-49) [ 3110.286947] Bluetooth: hci0: command 0x1009 tx timeout [ 3111.006665] Bluetooth: hci1: command 0x1009 tx timeout [ 3111.086704] Bluetooth: hci2: command 0x1009 tx timeout [ 3111.326755] net_ratelimit: 16 callbacks suppressed [ 3111.331766] protocol 88fb is buggy, dev hsr_slave_0 [ 3111.337052] protocol 88fb is buggy, dev hsr_slave_1 [ 3111.342432] protocol 88fb is buggy, dev hsr_slave_0 [ 3111.347753] protocol 88fb is buggy, dev hsr_slave_1 [ 3112.366746] protocol 88fb is buggy, dev hsr_slave_0 [ 3112.371919] protocol 88fb is buggy, dev hsr_slave_1 [ 3112.766699] protocol 88fb is buggy, dev hsr_slave_0 [ 3112.771795] protocol 88fb is buggy, dev hsr_slave_1 [ 3112.926648] protocol 88fb is buggy, dev hsr_slave_0 [ 3112.931740] protocol 88fb is buggy, dev hsr_slave_1 20:55:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1ab, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000100)=""/185) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$KDDISABIO(r0, 0x4b37) 20:55:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) r3 = socket(0x1e, 0x2, 0x0) bind(r3, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0xd6, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0x2}, 0x0, 0x0, &(0x7f0000000200)={0x4, 0x6, 0xfffff001, 0xfff}, &(0x7f0000000240)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x6}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r2, 0x10, &(0x7f00000003c0)={&(0x7f0000000080)=""/250, 0xfa, r5}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r5, 0x4) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x101000, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x20}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VHOST_RESET_OWNER(r8, 0xaf02, 0x0) r9 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r9, 0x28, 0x0, &(0x7f00000000c0)=0x9, 0x8) 20:55:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000780)={0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB='\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB], 0x50}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000001000)="1aafdb517ccb933795b89218e7709e", 0xf}], 0x1, &(0x7f00000010c0)}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x0) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f00000024c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r7) sendmsg$netlink(r2, &(0x7f0000003a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003980)=[{&(0x7f0000000100)={0x18, 0x2f, 0x4, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0x6f, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x18}, {&(0x7f00000003c0)={0x101c, 0x30, 0x2, 0x70bd2c, 0x25dfdbfd, "", [@nested={0x100c, 0x1d, [@generic="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", @typed={0x8, 0x1b, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x101c}, {&(0x7f0000000140)={0xfc, 0x34, 0x2, 0x70bd2b, 0x25dfdbfb, "", [@generic="c4eceb539d938bc0a35f4b1d5e2eea9d54451555ad71147ec5a06e2dfdedb17a800a89740dabf44ecf90d8e0fca53cf76d1bc0dd282043dadcf812abb86619eee1cdeeb5c541f025ead4caf1effa5d3a271b3777943babffa7b462d97d27268383deb9f9b216f633903957c1492fa7cb96b7ddcada68d15e7dfcae590ab2bc4de4da8feb25c3dece7fba584f6a65b0a51bcab533c5c0d0dbdb6773ff76e85a5d4c2707f457a55b1420fa7021bb135ff746f65faf0b53afb0575a441ba3c9e418d610e808f998a815fed189c9ae65b043faf5f0e4457f26b1027c75d0fee58063dc4f604bb35edca1be27c1"]}, 0xfc}, {&(0x7f0000001400)={0x1084, 0x33, 0x113, 0x6, 0x25dfdbfc, "", [@nested={0x1074, 0x5b, [@generic="cef921e86fe67e762f98968d5edb0a0786baf5d68c9f5d4dc81bdd7a9b89580e9c2154808e5764e17a47f29d17bae48d2fd758b602adc7bda369a67da331d1eb4e4bda4a2af074ecdd36e715fa2a7121741e21823e98a2f94987339e77f64afcc68acb3cad5826c6b8f3bff25bd8d72264f4f495afccd19605c313235c007b5dbac75732953eaf2790a68567ec02a1d6c9ff909c5d73509b11208b9d0c5173f92f7513dcc519d7b441bd16f31e85bda296b157cb45d00b1dbcc87e874894cf2ddc46de8fc1f90d8726a97c4733fba50cad1adaa3d556db1ba0d0e0047fa975daf21e89ba3dd2f329cf24a3afd8c3ecb032a10fd45b5db41f27481e5dd059ea5921af31beadcaf9bd980450cc35099d4070d4bc4556f5a66ad0524f344a2ac5992407b18e11a63a318963578c839234b685727540447b42b87e0ed3b340770601ec5dc1f50a47c31d6a147e244244a0ffe83cfd54cb3479e9fa882b36e48a03511d1a5a18ef5959802169ca0d7a7009f5b52da4ba1d7b46dc8bf9e4e5dd30a2c8125e522fbcca03492b406e12cb116355dae1eddbb573f7a9d9a79db9f72559621ff9a75c3315511b7679f2ea1a09ffcd03e23260c0a0a8c2da059ce572d9de0c0dfc61fce710853ee27d985a63af07cfa3c4a03bdbe80002decc0590672e6cc7c7c079d2eacbb58b27f480915cdaee907dbb02a1914dbafb2267cdb8adaa4cb65f985153cf504e9864a66ed0604ccfbb57062f949afc2a4571f7e0f28a5ccae0e4c96e663b97cd7fe449991ba5f7f26f6277dbc5eb690673c2d9acd1e80c510ca16f5e3c3e094f4b4e40a3068102fcf5404d7965ffdd1d445e67097397312e6ef90a246c3a49aba98190168a11ef91890c13f1e7b84da7219cffe36697d37ea5170aad3211825cc1237e96fba0c1bed29f6a1455dc8487a7b2d1bd12449cfcb2a1b42c18cc2a60d5e0c0bc97e36947ce80407be5f4d50e9aa2a9186ae06505c558cf1edfb8e76660b69af8f8be49fc4201019110c9b8a68a02f6a1f55ade0cc296fbf7357a8a1091a86433f192090436c6585dd7453b67c7acb3918de3d0d31e069098c8ba6802fcb9395aeb3e6a4ce368b6649623da6e0b61e32db764307aac013596f08ea88350eeed3e13ee306978fbbf6c43bd17b26e50c54e18c41ad1e58eec321897de92d59866888495d5bd84aeb044ba9af32977946d9e74606c5b1ea4710c262ff89bb548af333e7c34719f42b54f7a62e1b47bfbd1c461b4d688b691bea2038ef27e3185f38b67f8cb8903178c4af2ad533adacff731d772a6c3aa30615f1f9c9fa2f2bc31f60056e49be5ee9e09f74c46145a5e0bf6a122e7bb65e8da596a3f4d5630046db793dae95bbbf3fc893c5bffc3f25a9a7fd62960120ea154304edbcd01d2cb71096c07be34e7a383d6ada97233e939451d2b16ec6b242f6db491ec9756dd409e9dac96e29ed70038f05868632bdd01561fccc51c775adfc9b34ba6a9195088fa3d90666cff1e71a27071d98faa611df37da6415bf731397491570f72a2d962d056aaf2b2ab4fa1908dc36652dab53c651f352ee28b1c1dff04130ae88c8d1d023dfec13027b225d406a6235a3e0cac29a1be9b47155668b11c8b122f6198c495ec6958a746eb2e6c838d6c9466410a31c474744ad72a7376c989fbfd9f891b73feb3d96f9b04f8a9c65efcbae3015ac5a58d31845395ef120b4441f7ef96eb75960890b471c778dac212b8e76ff230e8d34e66598f72c5a02f9bbeb7c1e771f0951f97e733b279b5a90dd36374b4a389834e090370d69cd09ba3d80a4714aaf5dd00945ebbeb64aa53a867fb32f88759097d119ca8f6a61e18a93fcfc4e177fa4edd16c15e785b71da7c044d341b472af0986f732e951969d7ebfce92153c550e410af4691be89964cd79277394f8df35e397ac6d1b1df3959482c694e94ee96515da07bc5f4d2819627ee78f3ed704bbaa22e3bdd29e7bbc5944fa6ab2cfaeb3d90ee04bf1115d5f5d9a2c49eb15d12adb1832a8cd4d760841b6bfe69fea793b55a4931cf85dbb730637c257433f7b9e85e1f348d407605d0f657986f2cb08e0421c2a324964a3f8d6d25f572eb67b0d64adf186a02851add50053618f4e5bb50cc19ef5ca7ff0f92ddeff99291dea2c708c65b926314d8d546ac755630e69a89d933a5e85f74a6c7e8e9ec65a61fa197ffe84fc3a4c6be1593f6bd2c37663eece3676c579bf3305b73a803c21e7cf7d0773e29d0ffcd8cc0b649061fff8c5096f756a45bd219f017815d30d35a99e27cfbfc1b6ac12c3e28386fe8557aee2a9ff41c199dd1ead091c1ab574650ea0d63167917d5a5be86cd3dd107c97ce7aedb200e2e594ecb582d9e23fa08c81f77927eebe636f986a72c054c459e0082b4bda0642f792e656424eb6d46b3a563c6c8e43cd54eec85dfcb3b4b08b2923635b7a98f46e7b2147cacf35196a51c55524c9f69d8fa8d4866ca9f9d878e378054192ff22504996e09a849e46b772226aa2fc417f119d01ec8988eda8e83ad05dc56a177615f8b0ddb37d2009076b0f58c27bb5e863ad87180ea08e0d883511bb6a927b459173c7e88d0cd7a65af5c1f3a8c523cf7df1c3c22cc1a2b6aeb330f1217685f71dc49b5769a931abdbbc3890f9f9ffac77af7a2b593ef8ca5447d4f77e31159b706cf6c7fe68f34a1e1dcd3f7a8b191c50f44f00279d1907039be4a39eb7ad8d79031179903d18b052311a6d7474b943cc373b7a3432988444dcd19048841c57da4bf8fd27fbf7c85942bf3e0ee386735e15967bead5054bcdaa23cb523686002c9216d1b07b9b43ef623ddf0d7e6e56c70cf6ed911fb9afcc29f0792e23ba429e90f623e406d643b38eb4a2e059d5a7efadbf9f32514484e691eb5dc0478f6e777f5874f2b15b34fc17a66ed3b75d605a1d590ded18f6a6fbd273ef9aeea5f821d8417ffee0ffe53c4ea01f20088401e5b9d575bd9d504925a94177007a542999ede2cce00bb14befbc9d6d71addc3f1d5f0228bbc470970eea25e13e9d244e326ef9d699e7cdcf24b641fe776cc611c5ccd8d8212dd4c60d8481abfda101ee86103754b7622d5538eb5b61bb129a3a9d75dbdd74f4cd8aa05af623cce9ef0ef0edd63cf24a15a5b9fe7b09500855d2f3ed0fdb70beea7d100825693d50a510506cb29f97f58a79a0cc5afa0cc9c8035a887a73b59d8c17ebaddd2b911e6143fbb3b289b7835f5a2c5e2179911ce21da226fb78f438cb2033cbba007cf69cdd4ad5f401dde935afcf4cde47ec0404e44d4fcd4538a771d66e1f8b01e97cbbcbdb7b6523cd12225108b12798b9917c2590f65ebe29f8c968c8a453f1b22f2ae45b7caa7ffa4be417bb4803f47341f965c69bca6c55dda4a976b00a62c78923f237ce2cb5a5dbdd78021e42e85ce47597ebb986f87727e555f43661ac80f2a257859da565e508c43fcbcf882a6121607fd059d254266a28cc0869dc7cd84109b7ff38dd4586b690a946e8ebf01dbc9656ae6b192f6beb1469ed9ee5e94a7593c63feab50e4473f9089add379fe4566cf6049f7cea2cb10c8e05957fe9a1aa4741067bf20aa0ce4dee48f60b51904a522d8b273de6cc4007a4370dee69fdbd64bc69ab241364ec011472f2f9c8e40369fae2d151eed6d334f359e318208e7214317654218dc0c3fb5148abfe887047c372c8d258f64376c1fe8b093a55cc73d41ab6972a42b4f04c7cf78d57444b97c71a820b1becc13ed0cab9a6a5c43c02a060d51f10cd2da102a0b12d2ede2a14f97e1f80cc09ceac82c95a760dddc702ec97603d2985d9770d11a4a45591b514f498115b0352f34541e9d91d468894c54b0a5db316c25fd7a60878a5c74e2ab4702706f1619909f75daf936cca1a8d320ac8c5a841a30739ba39103f8d6d560087698318c2e62c2939f69d1c893540e634f3164bf4245c5a06457960f73afc4be4e4c6e259770f7e58fe394f19d84b7f49431b51642030d1e5c192a2174e72439068a96986a4d25f69112ca85c37298913ba579560e9d4615cd5bfa4ed14ea46756eb9f0d7d71b4cdbd70f15c78fa6d18bcf367b5c108992d0ee4cac72db72ae818631b2001e7b70207048b18dd44ae86501e0861cf9d5f6de900787fe91d840e6fda0a25449649f8770c04c2f084ad5e0c4f974b4992bf10d8b8a821eb77f43288d9dceeb437e92efd5c5f89607b0d0094014bbcafdaed75d0d31ed01b9da8e2b0196282f6c9004711cb883189ed74ea6a7e523b70764e77f5fbdd655270f02c9f6825c90c8dafc8fbe7f81dc1e5ff8681cf7387ea7eef058f5c61536fa66b156054ce8901a9e75261eaf55edcf7c05f3d41da427d02da0279fd7253f3794d1d5f7be2480d01b453bd350889b51b40619c0535e67db18cb57f3fe5448308d868f2859c48f9daae0ff627b2f9e9ebf31978beaabfb88a5593b24dd1a7757d9f90f16f664621850814717fc2b167098d75aeb3155d5750a7c94a363428a71d7a4d347e34264e3dd0aea38731fb87d03fc726d51c220251d6ff0c01cbed4af401e58b9a7527af80fedef8884c4d7eb3b535def14b801a043cb1fe7632d3ce19f77fa8b5b20a89c3c7f9206a3e7b13dcc8aff0010a6e55d1d92b53249e75132b3c0bcb638b13d85b3f7a0c9c5cbb41c29fb9a3a23bbd27a4fe81e2452c5138123449079680a8b71ed30ea22030caddbbfa1bbb3c853aafff2347d9eb476940873ec2d0ad57f3d31c77b4fbb0ca14fcc699faa9b900fd79809d58e5c02dde5e1624b7face9163493f452c1e50087998916b289a5645df8dbf7a12668d3625a8adaa4165e6e3412faf6fe576463f6f2b2d7234c2a685a9492ea4642e9ba037988c4294ff454c7faa7c4639db14bcf79a40afb6f3aed542c495539e099dd6034a2c3896b3c5e29994b71f9370fe5d44e7b70dbdd8f24f362f49ae0dc3c3507904a89bce98fa124d68d10744b58a8e0f177ca0489eb11682a7e831b1fa99e9279998eb3789fa274e059ec9503758e68efac189495b63afd4a5976b1733b4be483236f527938091f0f511d3fbdd42cf8ccc4612c94a53533083a494a3e2c1f14c68869eaa341ebf7c04b0473513611cd057b572a94122e9c86a21936db0d9151c84ecf33862ce830c8b2849983fdddeeec35d9ca5876e557ce23845d58880a4771f03a7cc7c68e047887511dcfd5beb131c690de7824029604409b2e9e2e89a32e8784ad1afa4ee92aafd82629936245552d9eedf9a352bc9313731c579c1593f0073a9a13c90f7ce1d73a449c5bc96bfef3d45b0545d859a23ea4ad1e141a5d3c18748fe2c3f3870bb375e1f8c8575b783921e4a81ae576a9d109b517aeab2362d92cad5c6d2d865bf7796d4392c9471f7d860110ca61c299fdb9ed65103453183fca614e3d08a5f55a47664a07f023cfbe86bd318de00abf431c3d27110159da6c4c6bb7ffd5dddf34b9eb40e203c042830368eac3f8d144ddedb9b59b1d72ffb94c13e0dcd36c123a99c9f090c9457df24a696db9e8cabb189a92bde6b2e1601f8a7a33c07160c9ab546e7f6b94a82321a1e630801a39046acbdebc744c52b9a5b2cdd95da33fd7cbcbeae99adfd97f98273f48bb0a2671347556722c715836b7690e9ad2b98740976645016813bf1d16c9b43f88170858e98860ad6fbe23f6d997fab97379fb44a93cfc01720b0d00033bb0aa5b2e8819f609c8cbb2cbd0d44c5271e8fcd2e02e6e349766637e14d76dc49bd849b159cfb1215a0720f2fde9d2f6e13d6ee3fb1", @generic="0ed4af472ce990b97f073206b9a904b13927f0f906e596b604cd2b2c697dfc75795c001f2d1a470c646d967f05c524fc994df748d59c1367bf88d48e93b3172e13f34040d2f184de1ca1bca2dc598fc1cf54c855c78dd44b39176c8e81bc8485876dadf8fb5d14c2f2f790379ab12f"]}]}, 0x1084}, {&(0x7f0000002500)={0x147c, 0x35, 0x8, 0x70bd26, 0x25dfdbfd, "", [@typed={0x8, 0x61, @uid=r3}, @generic, @nested={0x9c, 0x91, [@typed={0x80, 0x83, @binary="3817acd8c8f9fa9f748366c10effa97a8102ebc197e4befd7cb2a9b25299494a056baf9445927f21c236c3e0820fe732a5c153bb975f3a18a9c338bf76e2c11f7e854d7b6a32109f5cda5d08cf1e1ce3e0c2715b89639b2a905150798209b3318fe6bf40a3c2f107233ebf9ca87c9903e137b22595c979184d"}, @generic="364dc0e51cd33745fc3f7c5cf835c5", @typed={0x8, 0x50, @pid=r5}]}, @nested={0x1004, 0x11, [@generic="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"]}, @nested={0xec, 0x8f, [@generic="8feddb670e6304aff7c0ecc574ec959697ca27d4ed1f092a4364892ed943559978a7a497e46809f177b5607a0dd7e47f80524a2ee37b9ff4d1c6bfb87491c23eba61422d753714d0237112b0036f1f0a96085b24afb7d9490707bba4cfe2e0079edcde040edfda70e38da5af71283013c27b54ca44a801b27fc60eb9eda3bf5d222409a1b206dddac8294d90560593c406b468e9b92bbdd34975ed66c1e55d84b01b9b0bd827b221d3b71ad7fec90bd24e8f4d44e6d52671193f36d62c6bcb71f33e0bf21965cf692def91eb4dcdcaa02211c83e0aa752f89f84059ad6cf7f62407d46d99985"]}, @typed={0x14, 0x3b, @str='/dev/sndQse{\x00'}, @nested={0x1a4, 0x3b, [@generic="0966526e7736eccb79e9b981222792be690e43ad504611e88cf92a1cf70a2ea371ee97c2f3b56390a495d1ce0cf77e7667cea92fc4fdd4ca14edfe9ac96271d53d89e2d42a736977f2186d115563c2b6f032b72b0119dce7e607b4663b09dca7a244d9c78d8c1d5b3b5dc3c1b5b20b4e679c5463717a9f4aab6a7a304bd1eb9076d0819198e85455e50264696114dd4b580d662379e7631f5353b4d6e82bfc9ade7777d4c8188f79f5a63a87cead9acaa4e369c84791bd97c4886d2cd2d3f60899314a6c99d15908716d", @generic="c97223dcc3841523da9f6f457835807d44af4e60f74fa10d09fa19a850b53aaa43eab37322518896aa78c3af75ecca81869907572f154157eb29ee05732c29ba0f8e5bdba23c1bb3ea6606fbd37506ecb21b999f2050a002722d55742603ee61354ac8fc2be13d35f66864f0ef05ecd649e14e3c26ba5eb7511e3e5c686a39ec6c69b680f0a04bb6a5df5c4c032688407b32d371d7c2a406682740eb96ff7452007dc83c38dca3ef61793d6566a1274be48b4ea30114fc07085e07549de12f90c6dfc374f651d3dbc7cbd0f5dad42a2819886f"]}, @typed={0x8, 0x67, @ipv4=@broadcast}, @nested={0x44, 0x92, [@generic="ad4242727c7cabab8145a74c9f9c72346bfad282451e39acf4c5c16316020a24ec48468db615e339e5a91fc48ca54d20415fce0d9bb5e124fe0409f7c326"]}, @nested={0xd4, 0x89, [@typed={0x8, 0x47, @uid=r6}, @typed={0x8, 0x93, @str=',\x00'}, @typed={0x1c, 0x10, @str='-#selfloselfmd5sum\\,:\x00'}, @typed={0x8, 0x4b, @fd=r7}, @generic="fe109fad2c567c14ad2a75b7bf29b784c32044a67c46ba2362ca3abc1b98dc774299cd9ec52f845fe0a39b3c7d10d51f92397683295b3a355f788fba84e1b09b9b1a92d898cac5ef1eea4c2668ea99544b736ea6f0829cfbfa10965d9f548668f2ef0b11be315a23f37edce2b1393354e074c1fb93be653d1468", @generic="1870f721ad27da9df5e9c9e09cafa95ba942f154a867e8ca68dde256f5c264d14e"]}]}, 0x147c}], 0x5, 0x0, 0x0, 0x4000051}, 0x84f064d2d471e5b9) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x9}, 0x8) r8 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/sndQse{\x00', 0x0, 0x8001) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:55:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1ac, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3114.368848] Bluetooth: hci0: Frame reassembly failed (-84) 20:55:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:55:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1ad, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xfa, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:55:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) recvfrom$rose(r1, &(0x7f0000000140)=""/191, 0xbf, 0x40000021, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @default}, 0x1c) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/75, 0x4b) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1c1a) 20:55:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 20:55:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000080)={0x4, 0x1, 0x8, 'queue1\x00', 0x8}) 20:55:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xfb, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3115.049587] Bluetooth: hci1: Frame reassembly failed (-84) [ 3115.083278] Bluetooth: hci2: Frame reassembly failed (-84) 20:55:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1ae, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3116.446633] Bluetooth: hci0: command 0x1003 tx timeout [ 3116.453001] Bluetooth: hci0: sending frame failed (-49) [ 3116.526661] net_ratelimit: 14 callbacks suppressed [ 3116.526670] protocol 88fb is buggy, dev hsr_slave_0 [ 3116.536904] protocol 88fb is buggy, dev hsr_slave_1 [ 3116.936670] protocol 88fb is buggy, dev hsr_slave_0 [ 3116.941795] protocol 88fb is buggy, dev hsr_slave_1 [ 3117.086629] Bluetooth: hci2: command 0x1003 tx timeout [ 3117.086657] protocol 88fb is buggy, dev hsr_slave_0 [ 3117.092245] Bluetooth: hci2: sending frame failed (-49) [ 3117.097126] protocol 88fb is buggy, dev hsr_slave_1 [ 3117.097278] Bluetooth: hci1: command 0x1003 tx timeout [ 3117.112979] Bluetooth: hci1: sending frame failed (-49) [ 3117.566716] protocol 88fb is buggy, dev hsr_slave_0 [ 3117.571904] protocol 88fb is buggy, dev hsr_slave_1 [ 3117.577091] protocol 88fb is buggy, dev hsr_slave_0 [ 3117.582676] protocol 88fb is buggy, dev hsr_slave_1 [ 3118.526716] Bluetooth: hci0: command 0x1001 tx timeout [ 3118.532171] Bluetooth: hci0: sending frame failed (-49) [ 3119.166731] Bluetooth: hci1: command 0x1001 tx timeout [ 3119.172108] Bluetooth: hci2: command 0x1001 tx timeout [ 3119.172161] Bluetooth: hci1: sending frame failed (-49) [ 3119.177951] Bluetooth: hci2: sending frame failed (-49) [ 3120.606708] Bluetooth: hci0: command 0x1009 tx timeout [ 3121.246692] Bluetooth: hci2: command 0x1009 tx timeout [ 3121.246837] Bluetooth: hci1: command 0x1009 tx timeout [ 3121.726750] net_ratelimit: 16 callbacks suppressed [ 3121.726759] protocol 88fb is buggy, dev hsr_slave_0 [ 3121.737043] protocol 88fb is buggy, dev hsr_slave_1 [ 3121.742343] protocol 88fb is buggy, dev hsr_slave_0 [ 3121.747552] protocol 88fb is buggy, dev hsr_slave_1 [ 3122.766736] protocol 88fb is buggy, dev hsr_slave_0 [ 3122.771854] protocol 88fb is buggy, dev hsr_slave_1 [ 3123.166634] protocol 88fb is buggy, dev hsr_slave_0 [ 3123.171735] protocol 88fb is buggy, dev hsr_slave_1 [ 3123.326666] protocol 88fb is buggy, dev hsr_slave_0 [ 3123.331867] protocol 88fb is buggy, dev hsr_slave_1 20:56:05 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:56:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xfc, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1af, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f0000000080)={0x8f1e, 0x3ff, 0xff}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) [ 3124.620348] Bluetooth: hci0: Frame reassembly failed (-84) 20:56:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:56:05 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0xa6a82461f9acfed7, 0x1, 0x0, {}, 0xfc, 0xd0e}) 20:56:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1b0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xfd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:05 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 20:56:05 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x325de2552afca77b, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000440)={{0xf6, 0xcd}, 'port0\x00', 0x40, 0x1eb291f96101b907, 0xfffffffc, 0x480, 0x9, 0x0, 0x6, 0x0, 0x0, 0x8000800}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000600e565de372ca0b510df52dcffcb3a37d977c02fe40603dbc107cf3c5f90188132e3a645d11faaa8bdefcdad7b9ebda9cdb9ca95b56c8d1953e42e71af5135a4b760fdeec8048e36a4f94ebf41225bd1206bb802ae1a0e30aa25d422cf", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000000c0)={r7, @in={{0x2, 0x0, @empty}}, 0x699}, 0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x5, 0x0, 0x9, 0x3, 0x0, r7}, &(0x7f00000000c0)=0x20) 20:56:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1b1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xfe, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3125.283402] Bluetooth: hci1: Frame reassembly failed (-84) 20:56:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x102, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1b2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:06 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x4040, 0x0) creat(&(0x7f0000002500)='./file0/bus\x00', 0xcebb6074bb566d03) r0 = open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) [ 3125.682234] audit: type=1804 audit(1574196966.262:547): pid=16154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir174805279/syzkaller.ugfYkP/3290/file0/bus" dev="ramfs" ino=307076 res=1 [ 3125.711426] audit: type=1400 audit(1574196966.262:548): avc: denied { map } for pid=16153 comm="syz-executor.3" path="/root/syzkaller-testdir174805279/syzkaller.ugfYkP/3290/file0/bus" dev="ramfs" ino=307076 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ramfs_t:s0 tclass=file permissive=1 [ 3125.748400] audit: type=1804 audit(1574196966.262:549): pid=16154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir174805279/syzkaller.ugfYkP/3290/file0/bus" dev="ramfs" ino=307078 res=1 [ 3126.686596] Bluetooth: hci0: command 0x1003 tx timeout [ 3126.692053] Bluetooth: hci0: sending frame failed (-49) [ 3126.926710] net_ratelimit: 14 callbacks suppressed [ 3126.926718] protocol 88fb is buggy, dev hsr_slave_0 [ 3126.936960] protocol 88fb is buggy, dev hsr_slave_1 [ 3127.326602] protocol 88fb is buggy, dev hsr_slave_0 [ 3127.331754] protocol 88fb is buggy, dev hsr_slave_1 [ 3127.337014] Bluetooth: hci1: command 0x1003 tx timeout [ 3127.342561] Bluetooth: hci1: sending frame failed (-49) [ 3127.486602] protocol 88fb is buggy, dev hsr_slave_0 [ 3127.491732] protocol 88fb is buggy, dev hsr_slave_1 [ 3127.966661] protocol 88fb is buggy, dev hsr_slave_0 [ 3127.971807] protocol 88fb is buggy, dev hsr_slave_1 [ 3127.977002] protocol 88fb is buggy, dev hsr_slave_0 [ 3127.982267] protocol 88fb is buggy, dev hsr_slave_1 [ 3128.766685] Bluetooth: hci0: command 0x1001 tx timeout [ 3128.772111] Bluetooth: hci0: sending frame failed (-49) [ 3129.406858] Bluetooth: hci1: command 0x1001 tx timeout [ 3129.412307] Bluetooth: hci1: sending frame failed (-49) [ 3130.846708] Bluetooth: hci0: command 0x1009 tx timeout [ 3131.486881] Bluetooth: hci1: command 0x1009 tx timeout [ 3132.126739] net_ratelimit: 16 callbacks suppressed [ 3132.131749] protocol 88fb is buggy, dev hsr_slave_0 [ 3132.137048] protocol 88fb is buggy, dev hsr_slave_1 [ 3132.142440] protocol 88fb is buggy, dev hsr_slave_0 [ 3132.147696] protocol 88fb is buggy, dev hsr_slave_1 [ 3133.166749] protocol 88fb is buggy, dev hsr_slave_0 [ 3133.171931] protocol 88fb is buggy, dev hsr_slave_1 [ 3133.566740] protocol 88fb is buggy, dev hsr_slave_0 [ 3133.571889] protocol 88fb is buggy, dev hsr_slave_1 [ 3133.726649] protocol 88fb is buggy, dev hsr_slave_0 [ 3133.731911] protocol 88fb is buggy, dev hsr_slave_1 20:56:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x103, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:56:16 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x22, 0x400, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r2 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/185) shmctl$IPC_RMID(r2, 0x0) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x2000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r4 = creat(0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000100)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r6, 0x0) lstat(&(0x7f0000000500)='./bus\x00', 0x0) sendmsg$unix(r4, &(0x7f0000000640)={&(0x7f0000000340)=@file={0x0, './bus\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1000000000000000010000000100000024000000000000000100000001000000f8ba947384f0f7622eb62a9dda0a351ddd30540c79f673b68147cffc3a25cc0508fc682932cac5258b608cb5e8eed72ddb5005293ec413f8d280f2449029cabd04", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32, @ANYBLOB="bf4356e0fc0f3a68b23c424884e179dc9ec24557587e6f31f49ccafe52e419271277c515b60d3048d1b74091f2183a59258b278ec3371c6ca421fc9668", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000b12f13dd408a604433f2f0bb3967c4100fd2b30900006c9a75c84c7937d701929507744fa022c4d62c00000000000000ce00001000"/67], 0x85, 0x2000c081}, 0x20000044) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x426000, 0x0) getresuid(&(0x7f0000000380)=0x0, &(0x7f0000000400), &(0x7f0000000440)) ioctl$TUNSETOWNER(r7, 0x400454cc, r8) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000580)={{0x10000, r3, 0x0, r8, r9, 0x1, 0x1f}, 0xfffffffe, 0x10001, 0x8, 0x10001, r10, 0x0, 0x5}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x40000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) r11 = creat(0x0, 0x0) pipe2(0x0, 0x4000) inotify_add_watch(r11, &(0x7f0000000040)='./bus\x00', 0x500000d) prctl$PR_GET_THP_DISABLE(0x2a) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r12, 0xc08c5334, &(0x7f0000000340)={0x9, 0x8, 0x0, 'queue0\x00', 0x13}) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x9, 0x0, 0x1, 0x80, @broadcast}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)="66f8c4d4eae20c83eabe3ce534db24de968b2e09b64bc25559f14037106cb502d350b323798c3bf0cf8e3ba32b0644f7524c5c046f9d569dfcf05a1c19396416602f97ce27aa4542dc488bf69d62a42273d1f694c9c415be52ee3f50ec041ce858c48268a4cc013be6834e797114c5314516b0ea2d0f35fab020e7188a8c9c4acb7ff1357d2563d354423337f79c52892005c6046b3ad9d34494e1c7b1cf7cec1c056653eeb206f5117e1236c3752ff8149ce28a21cd556ebc", 0xb9}], 0x1, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x3b8}, 0x0) 20:56:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1b3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:16 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x20, @tick=0xffff, 0x13, {0x9, 0x2}, 0x6, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000080)={{0x3, 0x1}, {0x0, 0x6}, 0x3f, 0x4, 0x6}) 20:56:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000100)={&(0x7f0000000000)=[0x7, 0x1], 0x2, 0x80, 0x8, 0x2, 0x200, 0xc7180000, {0x63, 0x2, 0x6, 0xffff, 0xffff, 0x3ff, 0x401, 0x6, 0x86, 0x400, 0x1ff, 0x1ff, 0xffffffe0, 0x80000000, "805af43c33b129df0af68e2b58c2e327ff98fa89053b0ed3277a31b922394f2d"}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_int(r7, 0x29, 0x42, &(0x7f0000000200)=0x6202, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$BLKIOOPT(r9, 0x1279, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000180)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x0) fcntl$dupfd(r4, 0xc0a, r7) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:56:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x104, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:16 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x1, 0x0, 0x0, {0x0, 0x2}}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x101100, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1ffe00000000, 0x80}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7, 0x4, 0x7, 0x8, 0x0, 0x1f, 0x61280, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xc0, 0x5, @perf_bp={&(0x7f0000000100), 0x6}, 0x26003, 0x5, 0x101, 0x0, 0x5, 0xfe5, 0x9}, r2, 0xffffffffffffffff, r4, 0x8) 20:56:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1b4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x105, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3135.585817] Bluetooth: hci0: Frame reassembly failed (-84) 20:56:16 executing program 5: ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) accept$netrom(r0, &(0x7f00000000c0)={{}, [@null, @default, @null, @rose, @rose, @null, @remote, @netrom]}, &(0x7f0000000140)=0x48) 20:56:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='\t\x00x\x00', 0x420a02, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000080)={{0x0, 0x2, 0x101, 0x0, 0x80}, 0x5, 0x8}) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:56:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1b5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3135.776414] audit: type=1400 audit(1574196976.352:550): avc: denied { map } for pid=16166 comm="syz-executor.3" path="socket:[307565]" dev="sockfs" ino=307565 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=udp_socket permissive=1 [ 3137.326756] net_ratelimit: 14 callbacks suppressed [ 3137.331830] protocol 88fb is buggy, dev hsr_slave_0 [ 3137.336953] protocol 88fb is buggy, dev hsr_slave_1 [ 3137.646651] Bluetooth: hci0: command 0x1003 tx timeout [ 3137.652200] Bluetooth: hci0: sending frame failed (-49) [ 3137.726646] protocol 88fb is buggy, dev hsr_slave_0 [ 3137.731806] protocol 88fb is buggy, dev hsr_slave_1 [ 3137.886623] protocol 88fb is buggy, dev hsr_slave_0 [ 3137.891745] protocol 88fb is buggy, dev hsr_slave_1 [ 3138.376725] protocol 88fb is buggy, dev hsr_slave_0 [ 3138.381866] protocol 88fb is buggy, dev hsr_slave_1 [ 3138.387091] protocol 88fb is buggy, dev hsr_slave_0 [ 3138.392346] protocol 88fb is buggy, dev hsr_slave_1 [ 3139.726699] Bluetooth: hci0: command 0x1001 tx timeout [ 3139.732118] Bluetooth: hci0: sending frame failed (-49) [ 3141.806677] Bluetooth: hci0: command 0x1009 tx timeout [ 3142.526739] net_ratelimit: 16 callbacks suppressed [ 3142.526746] protocol 88fb is buggy, dev hsr_slave_0 [ 3142.536865] protocol 88fb is buggy, dev hsr_slave_1 [ 3142.541969] protocol 88fb is buggy, dev hsr_slave_0 [ 3142.547206] protocol 88fb is buggy, dev hsr_slave_1 [ 3143.566858] protocol 88fb is buggy, dev hsr_slave_0 [ 3143.572050] protocol 88fb is buggy, dev hsr_slave_1 [ 3143.966673] protocol 88fb is buggy, dev hsr_slave_0 [ 3143.971824] protocol 88fb is buggy, dev hsr_slave_1 [ 3144.126689] protocol 88fb is buggy, dev hsr_slave_0 [ 3144.131851] protocol 88fb is buggy, dev hsr_slave_1 20:56:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:56:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x106, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:26 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff) 20:56:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000400)={0x45, "a77ae658619b82c0b284495a3b41c561459bc33ddb67b8bc494c54c09bc89fbf21365007ba1c4b3eba6c0f71dfadcf2e79be0062301d89db610d577998641ff4d42e70f64141fffacd08743bdbc753ac062b8e55e3805b5434cb22f423cd9be1fb5d1c1a70b9684d55a5ecdfd619cd62f738d6bb3d791383e0bdb0add05e1381"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x0, 0x0, 0x46}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x18) setsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f00000000c0)="f2151e0f8d2e05518a5bc5af885b69bc42abbb570641ad9afc7a1a804f700e05adda9e297aa4ca5d0c0a779141c6858e0056f710b059ecc0738a1e58b938199269c66c761c2af24b5a44629072453e48e72cda12f92f2146a70a29012b15546b2a5527ffa9e93c79f2879966f22805c0f099a4957076a453191166cd76ec5109c3c2b134731fd02406dedac4c7938edc307361e01eb5b2ccbc69e28c9c17b0a9cc5f8fe1", 0xa4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x2c0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat(r5, &(0x7f0000000180)='./file0\x00', 0x200400, 0x4) sendto$ax25(r6, &(0x7f00000001c0)="2511eaa25f35e580b24a68d0d14451f60d9dacd7cf79b2bbc597f06399cde7efd630fd29c63cc940059d8cb6b007651a4cf3be43b1de8a8e0e25712af309c62cf3ca109d2cd32fc3ff579687b7093df19f6b3ae619932776a752b071bca1d7f1be86f09a71df95a9924045afcbf571fecf29d6b13817d39ac4acbd15ed560a9cb59f11f251bff4ea71f28b509f0aa549448ed82cc1c682e4bd70000f5229ade3293e440718785d", 0xa7, 0x40850, &(0x7f0000000280)={{0x3, @null, 0x4000}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48) 20:56:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1b6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000100)="d882a89277f8b41fc8d8788b7d64140e8734bfaba71226b7db0b82e7d9fa59741884f6c1e02b2aa0e1722b8a4aac72da057938ae24b5a75a2370253f20c81d0ad37d36677de67e91be51dbcf827228b7676d5c1815b53d6ac4fba0fe80e9c7844c24facaf55d3365ed4bf82ca37fec69e41b313e573c9324b489b8a27b0951296bb8874f9141abc80a9fff426fd0041ac17f94660dbf186b9bcc8401da857739749f40b5d4040b1755ed5f879dd33880e4abdf940fe42af87ed08726b360bb4c2493cd14f1183d23de5cce758a09f6d7f8a8145b21775007a8399a4a38b12af397") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5437, 0x0) [ 3145.724982] Bluetooth: hci0: Frame reassembly failed (-84) 20:56:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x107, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1b7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3145.804497] Bluetooth: hci1: Frame reassembly failed (-84) 20:56:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r2, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) readlinkat(r3, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/218, 0xda) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000400)) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90020000", @ANYRES16=r2, @ANYBLOB="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"], 0x290}, 0x1, 0x0, 0x0, 0x20000810}, 0x800) 20:56:26 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff) 20:56:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1b8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x108, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3147.726682] net_ratelimit: 14 callbacks suppressed [ 3147.726691] protocol 88fb is buggy, dev hsr_slave_0 [ 3147.736881] protocol 88fb is buggy, dev hsr_slave_1 [ 3147.742229] Bluetooth: hci0: command 0x1003 tx timeout [ 3147.747846] Bluetooth: hci0: sending frame failed (-49) [ 3147.806618] Bluetooth: hci1: command 0x1003 tx timeout [ 3147.812065] Bluetooth: hci1: sending frame failed (-49) [ 3148.126615] protocol 88fb is buggy, dev hsr_slave_0 [ 3148.131759] protocol 88fb is buggy, dev hsr_slave_1 [ 3148.296620] protocol 88fb is buggy, dev hsr_slave_0 [ 3148.301724] protocol 88fb is buggy, dev hsr_slave_1 [ 3148.766723] protocol 88fb is buggy, dev hsr_slave_0 [ 3148.771887] protocol 88fb is buggy, dev hsr_slave_1 [ 3148.777060] protocol 88fb is buggy, dev hsr_slave_0 [ 3148.782101] protocol 88fb is buggy, dev hsr_slave_1 [ 3149.806842] Bluetooth: hci0: command 0x1001 tx timeout [ 3149.812269] Bluetooth: hci0: sending frame failed (-49) [ 3149.886683] Bluetooth: hci1: command 0x1001 tx timeout [ 3149.892150] Bluetooth: hci1: sending frame failed (-49) [ 3151.886934] Bluetooth: hci0: command 0x1009 tx timeout [ 3151.966661] Bluetooth: hci1: command 0x1009 tx timeout [ 3152.926707] net_ratelimit: 16 callbacks suppressed [ 3152.931714] protocol 88fb is buggy, dev hsr_slave_0 [ 3152.936984] protocol 88fb is buggy, dev hsr_slave_1 [ 3152.942307] protocol 88fb is buggy, dev hsr_slave_0 [ 3152.947584] protocol 88fb is buggy, dev hsr_slave_1 [ 3153.966724] protocol 88fb is buggy, dev hsr_slave_0 [ 3153.971915] protocol 88fb is buggy, dev hsr_slave_1 [ 3154.366684] protocol 88fb is buggy, dev hsr_slave_0 [ 3154.371840] protocol 88fb is buggy, dev hsr_slave_1 [ 3154.526704] protocol 88fb is buggy, dev hsr_slave_0 [ 3154.531832] protocol 88fb is buggy, dev hsr_slave_1 20:56:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:56:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000080)=0x5) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) recvfrom$packet(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64, 0x0, &(0x7f0000000340)={0x11, 0x1a, r3, 0x1, 0x1f, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001e80)={'vxcan0\x00', r3}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001ec0)={'vxcan1\x00', r4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:56:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1b9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x109, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:36 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff) 20:56:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) [ 3156.000987] Bluetooth: hci0: Frame reassembly failed (-84) 20:56:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1ba, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:36 executing program 5: syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80900, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x14, 0x7}, 0x0, 0x0, 0x7}) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000080)={0x2d80000000, 0x4002}) 20:56:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x10a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3156.050073] Bluetooth: hci1: sending frame failed (-49) 20:56:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x200080) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r1 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x0, 0x2) write$FUSE_LSEEK(r1, &(0x7f0000000340)={0x18, 0x0, 0x2, {0x40}}, 0x18) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x104a0, 0x0) fcntl$setown(r2, 0x8, 0x0) syz_mount_image$ceph(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)='./file0\x00', 0xb88, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="bab23184e9944d3675f70818439c802b7e562623034cdc4d2486801283b4ffb0942cfef2628feef1e6b8771f74bd352413be487d7b5b664d", 0x38, 0x80000000}, {&(0x7f0000000180)="78d1dcf7a065fce46a747a2b7129ee3dff86fca0973a6a7c68a430143e6a4a1cfe60833c637a1fd7ea51f6e04ca5fb574a0d3bff97f507d30d047e2be19db326a5b1a71506fbe2e710903a195dc9989cdf6df158d521791024576148", 0x5c, 0x6}], 0x88001, &(0x7f0000000240)='/dev/ion\x00') r3 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x2, 0x8001) ioctl$TIOCSRS485(r3, 0x542f, &(0x7f00000002c0)={0x2588, 0x8000, 0x6}) 20:56:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1bb, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:36 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff) [ 3158.046604] Bluetooth: hci0: command 0x1003 tx timeout [ 3158.052040] Bluetooth: hci0: sending frame failed (-49) [ 3158.126673] net_ratelimit: 14 callbacks suppressed [ 3158.126682] protocol 88fb is buggy, dev hsr_slave_0 [ 3158.136815] protocol 88fb is buggy, dev hsr_slave_1 [ 3158.142479] Bluetooth: hci1: command 0x1003 tx timeout [ 3158.148003] Bluetooth: hci1: sending frame failed (-49) [ 3158.526641] protocol 88fb is buggy, dev hsr_slave_0 [ 3158.531772] protocol 88fb is buggy, dev hsr_slave_1 [ 3158.686587] protocol 88fb is buggy, dev hsr_slave_0 [ 3158.691722] protocol 88fb is buggy, dev hsr_slave_1 [ 3159.166758] protocol 88fb is buggy, dev hsr_slave_0 [ 3159.171917] protocol 88fb is buggy, dev hsr_slave_1 [ 3159.177092] protocol 88fb is buggy, dev hsr_slave_0 [ 3159.182147] protocol 88fb is buggy, dev hsr_slave_1 [ 3160.126733] Bluetooth: hci0: command 0x1001 tx timeout [ 3160.133502] Bluetooth: hci0: sending frame failed (-49) [ 3160.206957] Bluetooth: hci1: command 0x1001 tx timeout [ 3160.212389] Bluetooth: hci1: sending frame failed (-49) [ 3162.206702] Bluetooth: hci0: command 0x1009 tx timeout [ 3162.286952] Bluetooth: hci1: command 0x1009 tx timeout [ 3163.326749] net_ratelimit: 16 callbacks suppressed [ 3163.331800] protocol 88fb is buggy, dev hsr_slave_0 [ 3163.336909] protocol 88fb is buggy, dev hsr_slave_1 [ 3163.342103] protocol 88fb is buggy, dev hsr_slave_0 [ 3163.347184] protocol 88fb is buggy, dev hsr_slave_1 [ 3164.366696] protocol 88fb is buggy, dev hsr_slave_0 [ 3164.371870] protocol 88fb is buggy, dev hsr_slave_1 [ 3164.766681] protocol 88fb is buggy, dev hsr_slave_0 [ 3164.771837] protocol 88fb is buggy, dev hsr_slave_1 [ 3164.926721] protocol 88fb is buggy, dev hsr_slave_0 [ 3164.931888] protocol 88fb is buggy, dev hsr_slave_1 20:56:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x2}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x1) 20:56:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x10b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:56:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1bc, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:46 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:56:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) 20:56:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x270401, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0xffff, 0x0, "7ce18c91a8fc7d9de6a40f2288484037d65b0ce22881666ffd164266896c4b173ff99605f4cbf21d472255a2e20c4357d6790bf5a4866487bb063bc236c74e3c290829a4cd3b1ea0fef8141219593fd8"}, 0xd8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000780)={0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB='\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB], 0x50}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000001000)="1aafdb517ccb933795b89218e7709e", 0xf}], 0x1, &(0x7f00000010c0)}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x0) fcntl$lock(r3, 0x26, &(0x7f00000001c0)={0x2, 0x2, 0x7, 0x5, r5}) [ 3166.270389] Bluetooth: hci0: Frame reassembly failed (-84) 20:56:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1bd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x10c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:47 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r3) sendfile(r1, r0, 0x0, 0x7ffff) 20:56:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1be, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x2a8800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r3, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x280242}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x500, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x3, 0x40, 0x0, {0x0, 0x6f}, 0x0, 0x8001}) 20:56:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x10d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='\x16\x03e\x00\x00\x00\x00\x01\x00\b\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000080)={0x3f, 0x0, 0x101, 'queue1\x00', 0x7}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x200, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000140)={0x0, 0x7, 0xf9b3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) [ 3168.286644] Bluetooth: hci0: command 0x1003 tx timeout [ 3168.292143] Bluetooth: hci0: sending frame failed (-49) [ 3168.297658] Bluetooth: hci1: command 0x1003 tx timeout [ 3168.303225] Bluetooth: hci1: sending frame failed (-49) [ 3168.526694] net_ratelimit: 14 callbacks suppressed [ 3168.531711] protocol 88fb is buggy, dev hsr_slave_0 [ 3168.536992] protocol 88fb is buggy, dev hsr_slave_1 [ 3168.926629] protocol 88fb is buggy, dev hsr_slave_0 [ 3168.931723] protocol 88fb is buggy, dev hsr_slave_1 [ 3169.086632] protocol 88fb is buggy, dev hsr_slave_0 [ 3169.091844] protocol 88fb is buggy, dev hsr_slave_1 [ 3169.566749] protocol 88fb is buggy, dev hsr_slave_0 [ 3169.571937] protocol 88fb is buggy, dev hsr_slave_1 [ 3169.577282] protocol 88fb is buggy, dev hsr_slave_0 [ 3169.582468] protocol 88fb is buggy, dev hsr_slave_1 [ 3170.366694] Bluetooth: hci1: command 0x1001 tx timeout [ 3170.372259] Bluetooth: hci0: command 0x1001 tx timeout [ 3170.372332] Bluetooth: hci1: sending frame failed (-49) [ 3170.383541] Bluetooth: hci0: sending frame failed (-49) [ 3172.446715] Bluetooth: hci0: command 0x1009 tx timeout [ 3172.452069] Bluetooth: hci1: command 0x1009 tx timeout [ 3173.726741] net_ratelimit: 16 callbacks suppressed [ 3173.731754] protocol 88fb is buggy, dev hsr_slave_0 [ 3173.737026] protocol 88fb is buggy, dev hsr_slave_1 [ 3173.742195] protocol 88fb is buggy, dev hsr_slave_0 [ 3173.747415] protocol 88fb is buggy, dev hsr_slave_1 [ 3174.766730] protocol 88fb is buggy, dev hsr_slave_0 [ 3174.771883] protocol 88fb is buggy, dev hsr_slave_1 [ 3175.166661] protocol 88fb is buggy, dev hsr_slave_0 [ 3175.171771] protocol 88fb is buggy, dev hsr_slave_1 [ 3175.326643] protocol 88fb is buggy, dev hsr_slave_0 [ 3175.331734] protocol 88fb is buggy, dev hsr_slave_1 20:56:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:56:56 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1bf, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7, 0x1a1402) 20:56:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x10e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:56 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r3) sendfile(r1, r0, 0x0, 0x7ffff) 20:56:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000140)={{0x6, 0x20, 0x5, 0xe4, 0x8, 0x4f}, 0x5, 0x6, 0x5, 0x6, 0x9, "0714d4e6bdd0b22382d60f673995c94c61a156f19dcf5f61508bb2c0e217b6d5f55b00c1d60ff36d3f9afce5d30609036ca2171240c7df37954a857626104db43b33420e6c207a87b7efd592f808f12ea6a424111b1ddf2ae325db7fd287f943ebc0dbe53d3876ac68c103216e3c083822d9cea9b8b7a67b9fd7cb2c1d6b3e38"}) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000080)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCGSOFTCAR(r6, 0x5419, &(0x7f0000000200)) 20:56:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x200000) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x7ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x40000, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00') r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x5b, &(0x7f00000000c0)=0x2, 0x4) exit(0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1, 0x0) preadv(r2, &(0x7f00000013c0), 0x1e3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x5, 0x1) 20:56:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x10f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3176.549808] Bluetooth: hci1: Frame reassembly failed (-84) 20:56:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1c0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:56:57 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r3) sendfile(r1, r0, 0x0, 0x7ffff) 20:56:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3ff, 0x800) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f00000000c0)=0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}, 0x1, 0x0, 0x0, {}, 0x81}) 20:56:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x110, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3178.526749] Bluetooth: hci0: command 0x1003 tx timeout [ 3178.532305] Bluetooth: hci0: sending frame failed (-49) [ 3178.606673] Bluetooth: hci1: command 0x1003 tx timeout [ 3178.612144] Bluetooth: hci1: sending frame failed (-49) [ 3178.926678] net_ratelimit: 14 callbacks suppressed [ 3178.926686] protocol 88fb is buggy, dev hsr_slave_0 [ 3178.937060] protocol 88fb is buggy, dev hsr_slave_1 [ 3179.326623] protocol 88fb is buggy, dev hsr_slave_0 [ 3179.332981] protocol 88fb is buggy, dev hsr_slave_1 [ 3179.486589] protocol 88fb is buggy, dev hsr_slave_0 [ 3179.491741] protocol 88fb is buggy, dev hsr_slave_1 [ 3179.966756] protocol 88fb is buggy, dev hsr_slave_0 [ 3179.971937] protocol 88fb is buggy, dev hsr_slave_1 [ 3179.977313] protocol 88fb is buggy, dev hsr_slave_0 [ 3179.982490] protocol 88fb is buggy, dev hsr_slave_1 [ 3180.606752] Bluetooth: hci0: command 0x1001 tx timeout [ 3180.612188] Bluetooth: hci0: sending frame failed (-49) [ 3180.686713] Bluetooth: hci1: command 0x1001 tx timeout [ 3180.692200] Bluetooth: hci1: sending frame failed (-49) [ 3182.686743] Bluetooth: hci0: command 0x1009 tx timeout [ 3182.766735] Bluetooth: hci1: command 0x1009 tx timeout [ 3184.126741] net_ratelimit: 16 callbacks suppressed [ 3184.131750] protocol 88fb is buggy, dev hsr_slave_0 [ 3184.137031] protocol 88fb is buggy, dev hsr_slave_1 [ 3184.142417] protocol 88fb is buggy, dev hsr_slave_0 [ 3184.147676] protocol 88fb is buggy, dev hsr_slave_1 [ 3185.166721] protocol 88fb is buggy, dev hsr_slave_0 [ 3185.171897] protocol 88fb is buggy, dev hsr_slave_1 [ 3185.566709] protocol 88fb is buggy, dev hsr_slave_0 [ 3185.571818] protocol 88fb is buggy, dev hsr_slave_1 [ 3185.726662] protocol 88fb is buggy, dev hsr_slave_0 [ 3185.731809] protocol 88fb is buggy, dev hsr_slave_1 20:57:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:57:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1c1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x7, 0x7, 0x6, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000100)={{0x7f, 0x7}, 0x1, 0x0, 0x4}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2202, 0x0) 20:57:07 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:57:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x111, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$caif(r3, &(0x7f0000000240)=@rfm={0x25, 0x0, "22828a42ccdf89ea4112d3202d8d7f74"}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000000)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:57:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 20:57:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x112, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1c2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3186.769675] Bluetooth: hci0: Frame reassembly failed (-84) [ 3186.818047] Bluetooth: hci1: Frame reassembly failed (-84) 20:57:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0)={0x0, {}, 0x1, 0x5}) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) 20:57:07 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:57:07 executing program 5: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, r0) r1 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) [ 3188.846635] Bluetooth: hci1: command 0x1003 tx timeout [ 3188.852058] Bluetooth: hci1: sending frame failed (-49) [ 3188.857979] Bluetooth: hci0: command 0x1003 tx timeout [ 3188.863397] Bluetooth: hci0: sending frame failed (-49) [ 3189.326687] net_ratelimit: 14 callbacks suppressed [ 3189.326694] protocol 88fb is buggy, dev hsr_slave_0 [ 3189.336883] protocol 88fb is buggy, dev hsr_slave_1 [ 3189.726618] protocol 88fb is buggy, dev hsr_slave_0 [ 3189.731777] protocol 88fb is buggy, dev hsr_slave_1 [ 3189.886633] protocol 88fb is buggy, dev hsr_slave_0 [ 3189.891756] protocol 88fb is buggy, dev hsr_slave_1 [ 3190.366692] protocol 88fb is buggy, dev hsr_slave_0 [ 3190.371843] protocol 88fb is buggy, dev hsr_slave_1 [ 3190.377066] protocol 88fb is buggy, dev hsr_slave_0 [ 3190.382282] protocol 88fb is buggy, dev hsr_slave_1 [ 3190.926725] Bluetooth: hci0: command 0x1001 tx timeout [ 3190.926731] Bluetooth: hci1: command 0x1001 tx timeout [ 3190.936824] Bluetooth: hci1: sending frame failed (-49) [ 3190.938254] Bluetooth: hci0: sending frame failed (-49) [ 3193.006702] Bluetooth: hci1: command 0x1009 tx timeout [ 3193.006719] Bluetooth: hci0: command 0x1009 tx timeout [ 3194.526721] net_ratelimit: 16 callbacks suppressed [ 3194.531749] protocol 88fb is buggy, dev hsr_slave_0 [ 3194.537019] protocol 88fb is buggy, dev hsr_slave_1 [ 3194.542336] protocol 88fb is buggy, dev hsr_slave_0 [ 3194.547573] protocol 88fb is buggy, dev hsr_slave_1 [ 3195.566756] protocol 88fb is buggy, dev hsr_slave_0 [ 3195.571944] protocol 88fb is buggy, dev hsr_slave_1 [ 3195.966705] protocol 88fb is buggy, dev hsr_slave_0 [ 3195.971812] protocol 88fb is buggy, dev hsr_slave_1 [ 3196.126663] protocol 88fb is buggy, dev hsr_slave_0 [ 3196.131799] protocol 88fb is buggy, dev hsr_slave_1 20:57:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:57:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1c3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x113, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:17 executing program 5: syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/de6/s\xff\xff\xff\xffeq\b', 0x0, 0x800) 20:57:17 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:57:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80800) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000180)="38060905a01030a64b18ca0f38da58a2", 0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L+', 0x800}, 0x28, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:57:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x114, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1c4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x7}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r4, 0x115, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x274, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcab}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe8f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2c6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8cf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}]}, @TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x34eb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc0bd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff80000000}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) [ 3197.031875] Bluetooth: hci0: Frame reassembly failed (-84) [ 3197.052086] Bluetooth: hci1: Frame reassembly failed (-84) [ 3197.060162] Bluetooth: hci1: Frame reassembly failed (-84) 20:57:17 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:57:17 executing program 5: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff) 20:57:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x115, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3199.086676] Bluetooth: hci1: command 0x1003 tx timeout [ 3199.092301] Bluetooth: hci0: command 0x1003 tx timeout [ 3199.092428] Bluetooth: hci1: sending frame failed (-49) [ 3199.104502] Bluetooth: hci0: sending frame failed (-49) [ 3199.726696] net_ratelimit: 14 callbacks suppressed [ 3199.726705] protocol 88fb is buggy, dev hsr_slave_0 [ 3199.737184] protocol 88fb is buggy, dev hsr_slave_1 [ 3200.126719] protocol 88fb is buggy, dev hsr_slave_0 [ 3200.132146] protocol 88fb is buggy, dev hsr_slave_1 [ 3200.286652] protocol 88fb is buggy, dev hsr_slave_0 [ 3200.291923] protocol 88fb is buggy, dev hsr_slave_1 [ 3200.766765] protocol 88fb is buggy, dev hsr_slave_0 [ 3200.771931] protocol 88fb is buggy, dev hsr_slave_1 [ 3200.777131] protocol 88fb is buggy, dev hsr_slave_0 [ 3200.782370] protocol 88fb is buggy, dev hsr_slave_1 [ 3201.166723] Bluetooth: hci0: command 0x1001 tx timeout [ 3201.166752] Bluetooth: hci1: command 0x1001 tx timeout [ 3201.172226] Bluetooth: hci0: sending frame failed (-49) [ 3201.183318] Bluetooth: hci1: sending frame failed (-49) [ 3203.246677] Bluetooth: hci1: command 0x1009 tx timeout [ 3203.252274] Bluetooth: hci0: command 0x1009 tx timeout [ 3204.926786] net_ratelimit: 16 callbacks suppressed [ 3204.926794] protocol 88fb is buggy, dev hsr_slave_0 [ 3204.937046] protocol 88fb is buggy, dev hsr_slave_1 [ 3204.942389] protocol 88fb is buggy, dev hsr_slave_0 [ 3204.947779] protocol 88fb is buggy, dev hsr_slave_1 [ 3205.966771] protocol 88fb is buggy, dev hsr_slave_0 [ 3205.972238] protocol 88fb is buggy, dev hsr_slave_1 [ 3206.366680] protocol 88fb is buggy, dev hsr_slave_0 [ 3206.372005] protocol 88fb is buggy, dev hsr_slave_1 [ 3206.526716] protocol 88fb is buggy, dev hsr_slave_0 [ 3206.532100] protocol 88fb is buggy, dev hsr_slave_1 20:57:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:57:27 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:57:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1c5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x116, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:27 executing program 5: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff) 20:57:27 executing program 5: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff) 20:57:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x117, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1c6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3207.274731] Bluetooth: hci0: Frame reassembly failed (-84) 20:57:27 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:57:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x118, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:28 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:57:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1c7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3209.326662] Bluetooth: hci0: command 0x1003 tx timeout [ 3209.332083] Bluetooth: hci0: sending frame failed (-49) [ 3210.136680] net_ratelimit: 14 callbacks suppressed [ 3210.136687] protocol 88fb is buggy, dev hsr_slave_0 [ 3210.146780] protocol 88fb is buggy, dev hsr_slave_1 [ 3210.526682] protocol 88fb is buggy, dev hsr_slave_0 [ 3210.531797] protocol 88fb is buggy, dev hsr_slave_1 [ 3210.686656] protocol 88fb is buggy, dev hsr_slave_0 [ 3210.691765] protocol 88fb is buggy, dev hsr_slave_1 [ 3211.166689] protocol 88fb is buggy, dev hsr_slave_0 [ 3211.171786] protocol 88fb is buggy, dev hsr_slave_1 [ 3211.177001] protocol 88fb is buggy, dev hsr_slave_0 [ 3211.182216] protocol 88fb is buggy, dev hsr_slave_1 [ 3211.406738] Bluetooth: hci0: command 0x1001 tx timeout [ 3211.412186] Bluetooth: hci0: sending frame failed (-49) [ 3213.486705] Bluetooth: hci0: command 0x1009 tx timeout [ 3215.326726] net_ratelimit: 16 callbacks suppressed [ 3215.331777] protocol 88fb is buggy, dev hsr_slave_0 [ 3215.337058] protocol 88fb is buggy, dev hsr_slave_1 [ 3215.342319] protocol 88fb is buggy, dev hsr_slave_0 [ 3215.347616] protocol 88fb is buggy, dev hsr_slave_1 [ 3216.376672] protocol 88fb is buggy, dev hsr_slave_0 [ 3216.381802] protocol 88fb is buggy, dev hsr_slave_1 [ 3216.766688] protocol 88fb is buggy, dev hsr_slave_0 [ 3216.771828] protocol 88fb is buggy, dev hsr_slave_1 [ 3216.926635] protocol 88fb is buggy, dev hsr_slave_0 [ 3216.931755] protocol 88fb is buggy, dev hsr_slave_1 20:57:37 executing program 5: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 20:57:37 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:57:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 20:57:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x119, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1c8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x6, 0x1) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) bind$bt_sco(r2, &(0x7f0000000040), 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000280)={0x0, @ctrl}) r5 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000380)=0x3) fcntl$dupfd(r5, 0x0, r5) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x40000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000240)=r1) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f00000000c0)={r7, 0x3}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000180)={r7, &(0x7f0000000100)=""/67}) socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x606000, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r8, 0x2) [ 3217.410022] Bluetooth: hci0: Frame reassembly failed (-84) 20:57:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1c9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:38 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:57:38 executing program 5: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 20:57:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x11a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1ca, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:38 executing program 5: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r3) 20:57:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x11b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:38 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) [ 3219.486731] Bluetooth: hci1: command 0x1003 tx timeout [ 3219.492505] Bluetooth: hci1: sending frame failed (-49) [ 3219.498010] Bluetooth: hci0: command 0x1003 tx timeout [ 3219.503520] Bluetooth: hci0: sending frame failed (-49) [ 3220.526688] net_ratelimit: 14 callbacks suppressed [ 3220.531704] protocol 88fb is buggy, dev hsr_slave_0 [ 3220.536942] protocol 88fb is buggy, dev hsr_slave_1 [ 3220.926668] protocol 88fb is buggy, dev hsr_slave_0 [ 3220.932075] protocol 88fb is buggy, dev hsr_slave_1 [ 3221.086660] protocol 88fb is buggy, dev hsr_slave_0 [ 3221.091938] protocol 88fb is buggy, dev hsr_slave_1 [ 3221.566758] protocol 88fb is buggy, dev hsr_slave_0 [ 3221.566809] Bluetooth: hci1: command 0x1001 tx timeout [ 3221.571870] protocol 88fb is buggy, dev hsr_slave_1 [ 3221.582316] protocol 88fb is buggy, dev hsr_slave_0 [ 3221.587376] protocol 88fb is buggy, dev hsr_slave_1 [ 3221.592614] Bluetooth: hci0: command 0x1001 tx timeout [ 3221.598475] Bluetooth: hci1: sending frame failed (-49) [ 3221.599466] Bluetooth: hci0: sending frame failed (-49) [ 3223.646707] Bluetooth: hci1: command 0x1009 tx timeout [ 3223.647044] Bluetooth: hci0: command 0x1009 tx timeout [ 3225.726744] net_ratelimit: 16 callbacks suppressed [ 3225.731755] protocol 88fb is buggy, dev hsr_slave_0 [ 3225.736876] protocol 88fb is buggy, dev hsr_slave_1 [ 3225.742039] protocol 88fb is buggy, dev hsr_slave_0 [ 3225.747270] protocol 88fb is buggy, dev hsr_slave_1 [ 3226.766779] protocol 88fb is buggy, dev hsr_slave_0 [ 3226.772054] protocol 88fb is buggy, dev hsr_slave_1 [ 3227.166636] protocol 88fb is buggy, dev hsr_slave_0 [ 3227.171716] protocol 88fb is buggy, dev hsr_slave_1 [ 3227.326675] protocol 88fb is buggy, dev hsr_slave_0 [ 3227.331829] protocol 88fb is buggy, dev hsr_slave_1 20:57:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x11c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1cb, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:48 executing program 5: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 20:57:48 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:57:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendto$inet6(r2, &(0x7f0000000100)="16e457250898740fe64b31b9b3b057e24a09685b1b3550836d51b70c8dc4208088623e1b60dc0cf08cf6a6e7ad1ee862bfbd0de3d27ade32b04c15e8550533105be08e4d47156df3ab26faf68ae5c49aa9c4dae922403a957a9aeed958237751a44d67de534e509a6714062e085dfc9762f8916ec9f2d71bc74858dd4fe9a9933ec73f2f35e7228947ebbe4c6fa325edb76ab3cd356e1d3c5100bae9adad96381d40ab69f2942c2d8c8a42693f178898e306d727bbade58721054d3fa5dfd70c917823d204fa81c3229a2d84c1fd2a7f322d5994986ee4ae20bf5284b5f3c5ceaffa25ac87d42cbd1dda5c537c706ac5cf3a630e79c2fb", 0xf7, 0x34040800, &(0x7f0000000000)={0xa, 0x4e23, 0x12b8, @mcast2, 0x3}, 0x1c) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000080)={0x3, r3}) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x1, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x3) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:57:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 20:57:48 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:57:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1cc, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3227.715408] Bluetooth: hci0: Frame reassembly failed (-84) [ 3227.722099] Bluetooth: hci0: Frame reassembly failed (-84) 20:57:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x11d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:48 executing program 5: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) 20:57:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000080)=0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:57:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x11e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:48 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) [ 3228.012812] Bluetooth: hci1: Frame reassembly failed (-84) [ 3228.023882] Bluetooth: hci1: Frame reassembly failed (-84) 20:57:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1cd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:48 executing program 5: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) 20:57:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x11f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:48 executing program 5: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) [ 3229.726587] Bluetooth: hci0: command 0x1003 tx timeout [ 3229.732012] Bluetooth: hci0: sending frame failed (-49) [ 3230.046605] Bluetooth: hci1: command 0x1003 tx timeout [ 3230.052021] Bluetooth: hci1: sending frame failed (-49) [ 3230.926674] net_ratelimit: 14 callbacks suppressed [ 3230.926684] protocol 88fb is buggy, dev hsr_slave_0 [ 3230.936780] protocol 88fb is buggy, dev hsr_slave_1 [ 3231.326604] protocol 88fb is buggy, dev hsr_slave_0 [ 3231.331700] protocol 88fb is buggy, dev hsr_slave_1 [ 3231.486673] protocol 88fb is buggy, dev hsr_slave_0 [ 3231.491819] protocol 88fb is buggy, dev hsr_slave_1 [ 3231.806676] Bluetooth: hci0: command 0x1001 tx timeout [ 3231.812210] Bluetooth: hci0: sending frame failed (-49) [ 3231.966694] protocol 88fb is buggy, dev hsr_slave_0 [ 3231.971810] protocol 88fb is buggy, dev hsr_slave_1 [ 3231.976996] protocol 88fb is buggy, dev hsr_slave_0 [ 3231.982242] protocol 88fb is buggy, dev hsr_slave_1 [ 3232.126713] Bluetooth: hci1: command 0x1001 tx timeout [ 3232.132163] Bluetooth: hci1: sending frame failed (-49) [ 3233.886690] Bluetooth: hci0: command 0x1009 tx timeout [ 3234.206698] Bluetooth: hci1: command 0x1009 tx timeout [ 3236.126736] net_ratelimit: 16 callbacks suppressed [ 3236.132111] protocol 88fb is buggy, dev hsr_slave_0 [ 3236.137449] protocol 88fb is buggy, dev hsr_slave_1 [ 3236.142771] protocol 88fb is buggy, dev hsr_slave_0 [ 3236.148019] protocol 88fb is buggy, dev hsr_slave_1 [ 3237.166705] protocol 88fb is buggy, dev hsr_slave_0 [ 3237.171854] protocol 88fb is buggy, dev hsr_slave_1 [ 3237.566733] protocol 88fb is buggy, dev hsr_slave_0 [ 3237.571886] protocol 88fb is buggy, dev hsr_slave_1 [ 3237.726623] protocol 88fb is buggy, dev hsr_slave_0 [ 3237.731753] protocol 88fb is buggy, dev hsr_slave_1 20:57:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 20:57:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1ce, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:58 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:57:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x120, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:58 executing program 5: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) 20:57:59 executing program 5: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) fadvise64(r1, 0x0, 0x0, 0x1) 20:57:59 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:57:59 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1cf, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCNOTTY(r2, 0x5422) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:57:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x121, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:57:59 executing program 5: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) fadvise64(r1, 0x0, 0x0, 0x1) 20:57:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x122, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3238.543068] Bluetooth: hci1: Frame reassembly failed (-84) [ 3239.966644] Bluetooth: hci0: command 0x1003 tx timeout [ 3239.973552] Bluetooth: hci0: sending frame failed (-49) [ 3240.606606] Bluetooth: hci1: command 0x1003 tx timeout [ 3240.612207] Bluetooth: hci1: sending frame failed (-49) [ 3241.326696] net_ratelimit: 14 callbacks suppressed [ 3241.332253] protocol 88fb is buggy, dev hsr_slave_0 [ 3241.337525] protocol 88fb is buggy, dev hsr_slave_1 [ 3241.726687] protocol 88fb is buggy, dev hsr_slave_0 [ 3241.731775] protocol 88fb is buggy, dev hsr_slave_1 [ 3241.886703] protocol 88fb is buggy, dev hsr_slave_0 [ 3241.893471] protocol 88fb is buggy, dev hsr_slave_1 [ 3242.046598] Bluetooth: hci0: command 0x1001 tx timeout [ 3242.052016] Bluetooth: hci0: sending frame failed (-49) [ 3242.376709] protocol 88fb is buggy, dev hsr_slave_0 [ 3242.381801] protocol 88fb is buggy, dev hsr_slave_1 [ 3242.386958] protocol 88fb is buggy, dev hsr_slave_0 [ 3242.392013] protocol 88fb is buggy, dev hsr_slave_1 [ 3242.686685] Bluetooth: hci1: command 0x1001 tx timeout [ 3242.692134] Bluetooth: hci1: sending frame failed (-49) [ 3244.136705] Bluetooth: hci0: command 0x1009 tx timeout [ 3244.766686] Bluetooth: hci1: command 0x1009 tx timeout [ 3246.526754] net_ratelimit: 16 callbacks suppressed [ 3246.526762] protocol 88fb is buggy, dev hsr_slave_0 [ 3246.536864] protocol 88fb is buggy, dev hsr_slave_1 [ 3246.542154] protocol 88fb is buggy, dev hsr_slave_0 [ 3246.547363] protocol 88fb is buggy, dev hsr_slave_1 [ 3247.566741] protocol 88fb is buggy, dev hsr_slave_0 [ 3247.571891] protocol 88fb is buggy, dev hsr_slave_1 [ 3247.966641] protocol 88fb is buggy, dev hsr_slave_0 [ 3247.971859] protocol 88fb is buggy, dev hsr_slave_1 20:58:08 executing program 5: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) fadvise64(r1, 0x0, 0x0, 0x1) 20:58:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1d0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:08 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:58:08 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x123, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:08 executing program 0: 20:58:08 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:58:08 executing program 0: 20:58:08 executing program 5: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) [ 3248.126641] protocol 88fb is buggy, dev hsr_slave_0 [ 3248.131872] protocol 88fb is buggy, dev hsr_slave_1 20:58:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1d1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x124, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:09 executing program 0: 20:58:09 executing program 5: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) 20:58:09 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:58:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x7) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x20000) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000080)={r0, 0x0, 0xd, 0x3cb0000000000}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r9, 0x0, r9) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x40, 0x0) fcntl$dupfd(r8, 0x0, r9) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) openat$cgroup_type(r11, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) r12 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f0000000040)) ioctl$KDADDIO(r6, 0x400455c8, 0x6) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:58:09 executing program 0: 20:58:09 executing program 5: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) 20:58:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1d2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:09 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) [ 3248.873951] sp0: Synchronizing with TNC 20:58:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x125, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:09 executing program 0: 20:58:09 executing program 5: open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) fadvise64(r0, 0x0, 0x0, 0x1) 20:58:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1d3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:09 executing program 0: 20:58:09 executing program 5: open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) fadvise64(r0, 0x0, 0x0, 0x1) 20:58:09 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:58:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x126, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xc) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="15010000000000000000ceb6000000000010000000000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x7bbfab89d404890) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:58:09 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:58:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1d4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:10 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:58:10 executing program 5: open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) fadvise64(r0, 0x0, 0x0, 0x1) 20:58:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x127, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000200)=0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000100)=""/197) ioctl$TIOCSETD(r1, 0x5437, 0x0) 20:58:10 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:58:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1d5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:10 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:58:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x128, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:10 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) fadvise64(r0, 0x0, 0x0, 0x1) 20:58:10 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:58:10 executing program 5: r0 = syz_open_dev$loop(0x0, 0x5, 0x105082) fadvise64(r0, 0x0, 0x0, 0x1) [ 3250.102992] audit: type=1400 audit(1574197090.682:551): avc: denied { sys_ptrace } for pid=17980 comm="ps" capability=19 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 20:58:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1d6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:10 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:58:10 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:58:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x129, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3251.726677] net_ratelimit: 14 callbacks suppressed [ 3251.726683] protocol 88fb is buggy, dev hsr_slave_0 [ 3251.738043] protocol 88fb is buggy, dev hsr_slave_1 [ 3251.886663] Bluetooth: hci0: command 0x1003 tx timeout [ 3251.892118] Bluetooth: hci0: sending frame failed (-49) [ 3252.126617] protocol 88fb is buggy, dev hsr_slave_0 [ 3252.131851] protocol 88fb is buggy, dev hsr_slave_1 [ 3252.286673] protocol 88fb is buggy, dev hsr_slave_0 [ 3252.291807] protocol 88fb is buggy, dev hsr_slave_1 [ 3252.766672] protocol 88fb is buggy, dev hsr_slave_0 [ 3252.771810] protocol 88fb is buggy, dev hsr_slave_1 [ 3252.777043] protocol 88fb is buggy, dev hsr_slave_0 [ 3252.782271] protocol 88fb is buggy, dev hsr_slave_1 [ 3253.966733] Bluetooth: hci0: command 0x1001 tx timeout [ 3253.972168] Bluetooth: hci0: sending frame failed (-49) [ 3256.046679] Bluetooth: hci0: command 0x1009 tx timeout [ 3256.926747] net_ratelimit: 16 callbacks suppressed [ 3256.926755] protocol 88fb is buggy, dev hsr_slave_0 [ 3256.936849] protocol 88fb is buggy, dev hsr_slave_1 [ 3256.942135] protocol 88fb is buggy, dev hsr_slave_0 [ 3256.947356] protocol 88fb is buggy, dev hsr_slave_1 [ 3257.966721] protocol 88fb is buggy, dev hsr_slave_0 [ 3257.971836] protocol 88fb is buggy, dev hsr_slave_1 [ 3258.366667] protocol 88fb is buggy, dev hsr_slave_0 [ 3258.371801] protocol 88fb is buggy, dev hsr_slave_1 [ 3258.526684] protocol 88fb is buggy, dev hsr_slave_0 [ 3258.531801] protocol 88fb is buggy, dev hsr_slave_1 20:58:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x5, 0xfe00, 0x7ff, 0x10, 0x2, 0x0, 0xff, 0x80, 0x2}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:58:20 executing program 5: r0 = syz_open_dev$loop(0x0, 0x5, 0x105082) fadvise64(r0, 0x0, 0x0, 0x1) 20:58:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1d7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x12a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:20 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff) 20:58:20 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:58:20 executing program 5: r0 = syz_open_dev$loop(0x0, 0x5, 0x105082) fadvise64(r0, 0x0, 0x0, 0x1) 20:58:20 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff) 20:58:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1d8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:20 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:58:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x12b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3260.363205] Bluetooth: hci0: sending frame failed (-49) 20:58:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) fadvise64(r0, 0x0, 0x0, 0x1) [ 3262.126705] net_ratelimit: 14 callbacks suppressed [ 3262.126714] protocol 88fb is buggy, dev hsr_slave_0 [ 3262.137284] protocol 88fb is buggy, dev hsr_slave_1 [ 3262.446662] Bluetooth: hci0: command 0x1003 tx timeout [ 3262.452074] Bluetooth: hci0: sending frame failed (-49) [ 3262.536697] protocol 88fb is buggy, dev hsr_slave_0 [ 3262.541956] protocol 88fb is buggy, dev hsr_slave_1 [ 3262.686659] protocol 88fb is buggy, dev hsr_slave_0 [ 3262.691788] protocol 88fb is buggy, dev hsr_slave_1 [ 3263.166660] protocol 88fb is buggy, dev hsr_slave_0 [ 3263.171772] protocol 88fb is buggy, dev hsr_slave_1 [ 3263.176974] protocol 88fb is buggy, dev hsr_slave_0 [ 3263.182028] protocol 88fb is buggy, dev hsr_slave_1 [ 3264.526742] Bluetooth: hci0: command 0x1001 tx timeout [ 3264.532175] Bluetooth: hci0: sending frame failed (-49) [ 3266.606706] Bluetooth: hci0: command 0x1009 tx timeout [ 3267.326706] net_ratelimit: 16 callbacks suppressed [ 3267.326714] protocol 88fb is buggy, dev hsr_slave_0 [ 3267.336814] protocol 88fb is buggy, dev hsr_slave_1 [ 3267.342112] protocol 88fb is buggy, dev hsr_slave_0 [ 3267.347320] protocol 88fb is buggy, dev hsr_slave_1 [ 3268.366740] protocol 88fb is buggy, dev hsr_slave_0 [ 3268.371899] protocol 88fb is buggy, dev hsr_slave_1 [ 3268.766703] protocol 88fb is buggy, dev hsr_slave_0 [ 3268.771975] protocol 88fb is buggy, dev hsr_slave_1 [ 3268.926659] protocol 88fb is buggy, dev hsr_slave_0 [ 3268.931796] protocol 88fb is buggy, dev hsr_slave_1 20:58:31 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:58:31 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff) 20:58:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1d9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x1) 20:58:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x12c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000000)={0x0, {0x2, 0x8}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/de/ptmx\x00', 0x100, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000002000e5be00000000000000000a80000000000000000000000400000014000100fe80000000aaf0d3dd000000000000aa"], 0x34}}, 0x0) fdatasync(r3) ioctl$TIOCSETD(r2, 0x5437, 0x0) 20:58:31 executing program 5: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) 20:58:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x12d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:31 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() tkill(r3, 0x1e) 20:58:31 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:58:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1da, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000240)=0x7, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}, 0x699}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000340)={r6, 0x1b}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r6, 0x80000000}, &(0x7f0000000200)=0x8) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{0x7, 0xf7, 0x5, 0x4}, {0x8, 0x0, 0x4, 0x6db00000}, {0x7, 0x40, 0x2, 0x8}, {0x8, 0x80, 0x8, 0xfffffffe}]}) sendmsg$nl_generic(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x48221080}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) 20:58:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x12e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:31 executing program 5: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) 20:58:31 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() tkill(r3, 0x1e) 20:58:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1db, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:31 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:58:31 executing program 5: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) 20:58:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x12f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1dc, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:31 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:58:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 20:58:31 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() tkill(r3, 0x1e) [ 3272.526685] net_ratelimit: 14 callbacks suppressed [ 3272.526693] protocol 88fb is buggy, dev hsr_slave_0 [ 3272.536849] protocol 88fb is buggy, dev hsr_slave_1 [ 3272.926613] protocol 88fb is buggy, dev hsr_slave_0 [ 3272.926690] Bluetooth: hci0: command 0x1003 tx timeout [ 3272.931817] protocol 88fb is buggy, dev hsr_slave_1 [ 3272.943774] Bluetooth: hci0: sending frame failed (-49) [ 3273.086609] protocol 88fb is buggy, dev hsr_slave_0 [ 3273.091735] protocol 88fb is buggy, dev hsr_slave_1 [ 3273.566720] protocol 88fb is buggy, dev hsr_slave_0 [ 3273.571934] protocol 88fb is buggy, dev hsr_slave_1 [ 3273.577180] protocol 88fb is buggy, dev hsr_slave_0 [ 3273.582432] protocol 88fb is buggy, dev hsr_slave_1 [ 3275.006886] Bluetooth: hci0: command 0x1001 tx timeout [ 3275.012323] Bluetooth: hci0: sending frame failed (-49) [ 3277.086855] Bluetooth: hci0: command 0x1009 tx timeout [ 3277.726748] net_ratelimit: 16 callbacks suppressed [ 3277.731761] protocol 88fb is buggy, dev hsr_slave_0 [ 3277.737084] protocol 88fb is buggy, dev hsr_slave_1 [ 3277.742485] protocol 88fb is buggy, dev hsr_slave_0 [ 3277.747902] protocol 88fb is buggy, dev hsr_slave_1 [ 3278.766742] protocol 88fb is buggy, dev hsr_slave_0 [ 3278.771908] protocol 88fb is buggy, dev hsr_slave_1 [ 3279.166709] protocol 88fb is buggy, dev hsr_slave_0 [ 3279.171822] protocol 88fb is buggy, dev hsr_slave_1 [ 3279.326635] protocol 88fb is buggy, dev hsr_slave_0 [ 3279.331758] protocol 88fb is buggy, dev hsr_slave_1 20:58:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x6) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:58:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x130, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 20:58:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1dd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:41 executing program 3: close(0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fadvise64(r0, 0x0, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff) 20:58:41 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x1e) 20:58:42 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 20:58:42 executing program 3: close(0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fadvise64(r0, 0x0, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff) 20:58:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x131, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:42 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x1e) 20:58:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1de, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:42 executing program 5: 20:58:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:58:42 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x1e) 20:58:42 executing program 3: close(0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fadvise64(r0, 0x0, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff) 20:58:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x132, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1df, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:42 executing program 5: 20:58:42 executing program 3: r0 = open(0x0, 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:58:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000100)={0x8, 0x100, 0x1, {0x200, 0x4, 0x9, 0x5}}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x7, 0x7, 0x80, 0xfffffb6d, 0x10, 0x3, 0x5, 0xdf, 0xfff, 0x5, 0x80}) 20:58:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1e0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:42 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:58:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x133, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:42 executing program 5: 20:58:42 executing program 3: r0 = open(0x0, 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) [ 3282.161961] Bluetooth: hci0: Frame reassembly failed (-84) [ 3282.174151] Bluetooth: hci0: Frame reassembly failed (-84) 20:58:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1e1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x134, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:42 executing program 5: 20:58:42 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:58:43 executing program 5: 20:58:43 executing program 3: r0 = open(0x0, 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) [ 3282.926653] net_ratelimit: 14 callbacks suppressed [ 3282.926660] protocol 88fb is buggy, dev hsr_slave_0 [ 3282.936878] protocol 88fb is buggy, dev hsr_slave_1 [ 3283.326625] protocol 88fb is buggy, dev hsr_slave_0 [ 3283.331759] protocol 88fb is buggy, dev hsr_slave_1 [ 3283.486592] protocol 88fb is buggy, dev hsr_slave_0 [ 3283.491991] protocol 88fb is buggy, dev hsr_slave_1 [ 3283.966695] protocol 88fb is buggy, dev hsr_slave_0 [ 3283.972077] protocol 88fb is buggy, dev hsr_slave_1 [ 3283.977319] protocol 88fb is buggy, dev hsr_slave_0 [ 3283.982428] protocol 88fb is buggy, dev hsr_slave_1 [ 3284.216655] Bluetooth: hci0: command 0x1003 tx timeout [ 3284.222122] Bluetooth: hci0: sending frame failed (-49) [ 3286.286717] Bluetooth: hci0: command 0x1001 tx timeout [ 3286.292363] Bluetooth: hci0: sending frame failed (-49) [ 3288.126741] net_ratelimit: 16 callbacks suppressed [ 3288.131763] protocol 88fb is buggy, dev hsr_slave_0 [ 3288.136999] protocol 88fb is buggy, dev hsr_slave_1 [ 3288.142301] protocol 88fb is buggy, dev hsr_slave_0 [ 3288.147534] protocol 88fb is buggy, dev hsr_slave_1 [ 3288.366654] Bluetooth: hci0: command 0x1009 tx timeout [ 3289.166738] protocol 88fb is buggy, dev hsr_slave_0 [ 3289.171923] protocol 88fb is buggy, dev hsr_slave_1 [ 3289.566689] protocol 88fb is buggy, dev hsr_slave_0 [ 3289.573123] protocol 88fb is buggy, dev hsr_slave_1 [ 3289.726666] protocol 88fb is buggy, dev hsr_slave_0 [ 3289.731962] protocol 88fb is buggy, dev hsr_slave_1 20:58:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x135, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1e2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:52 executing program 5: 20:58:52 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) gettid() r1 = creat(0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 20:58:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 20:58:52 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:58:52 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCCONS(r3, 0x541d) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) dup3(r3, r2, 0x0) 20:58:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1e3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:52 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) gettid() r1 = creat(0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 20:58:52 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:58:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x136, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0xab, "2be084fcc4fc419a42c502606bc76ad2549eaf2e22174cbe341b392b4eb86775c20ac06a7428c3f2e8630b650e7f65672d45cf6c207419a5feb56c666d5bf68d9a2443bcf6e90e1e69e44f6f89c9e100fa3c46a336ac1ee39912b7091ce653fe7dbda9d8c1b96d93e06e6456330f310f5bc4ddfee233e74e977cba1a3afdf15adad2f3bc861fe24d7d08b6aed51bad465cbb4cd70b61e0b6eb2b54cb6f36e2ceb9e629b050d9dd261415f8"}, &(0x7f0000000000)=0xb3) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000300)={r3, 0xaf, "6231ff062b90fac90e67ebacda72aef608ec41659de6271a9a0b49e95f26b93c7853e2715192da201ceaaee7c7da8d5a1038881ba7867632ca246f78f7adebd3e5cb7400808155877942c193fad41189b615e92657105c32f69e2bd0f72ed1b3c10248e0e7754f4a74305dee13b0d5c444262d6ca03e74ecca649a11d4e8bd46bd9adb5152b94a66933ddc0aa1399ade8f7686b70c0b3b6ed5a1d09e0c80489cd5b0ba1fe6d05f7b916a3611aa8b48"}, &(0x7f00000003c0)=0xb7) prctl$PR_GET_TIMERSLACK(0x1e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000180)) ioctl$TIOCSETD(r0, 0x5437, 0x0) r6 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x1000, 0x800) write$P9_RSYMLINK(r6, &(0x7f0000000100)={0x14, 0x11, 0x1, {0x5, 0x2, 0x8}}, 0x14) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x6, 0x200000) 20:58:53 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) gettid() r1 = creat(0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 20:58:53 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:58:53 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:58:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1e4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:53 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:58:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x137, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 20:58:53 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:58:53 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:58:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1e5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:53 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:58:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x138, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 20:58:53 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:58:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1e6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x139, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3293.327887] net_ratelimit: 14 callbacks suppressed [ 3293.327913] protocol 88fb is buggy, dev hsr_slave_0 [ 3293.339500] protocol 88fb is buggy, dev hsr_slave_1 20:58:54 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:58:54 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 20:58:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1e7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:54 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:58:54 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:58:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x13a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3293.726648] protocol 88fb is buggy, dev hsr_slave_0 [ 3293.731781] protocol 88fb is buggy, dev hsr_slave_1 [ 3293.896636] protocol 88fb is buggy, dev hsr_slave_0 [ 3293.901819] protocol 88fb is buggy, dev hsr_slave_1 [ 3294.366702] protocol 88fb is buggy, dev hsr_slave_0 [ 3294.371853] protocol 88fb is buggy, dev hsr_slave_1 [ 3294.377092] protocol 88fb is buggy, dev hsr_slave_0 [ 3294.382298] protocol 88fb is buggy, dev hsr_slave_1 20:58:56 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:58:56 executing program 4: fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:58:56 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(0x0, 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:58:56 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1e8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x13b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000200)=0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000100)=""/197) ioctl$TIOCSETD(r1, 0x5437, 0x0) 20:58:56 executing program 4: fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:58:56 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(0x0, 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:58:56 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:58:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x13c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:56 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1e9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:56 executing program 4: fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:58:56 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(0x0, 0x5, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:58:57 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:58:57 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 20:58:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x13d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:58:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1ea, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3298.206735] Bluetooth: hci0: command 0x1003 tx timeout [ 3298.212167] Bluetooth: hci0: sending frame failed (-49) [ 3298.526685] net_ratelimit: 16 callbacks suppressed [ 3298.526694] protocol 88fb is buggy, dev hsr_slave_0 [ 3298.536880] protocol 88fb is buggy, dev hsr_slave_1 [ 3298.541995] protocol 88fb is buggy, dev hsr_slave_0 [ 3298.547086] protocol 88fb is buggy, dev hsr_slave_1 [ 3299.566820] protocol 88fb is buggy, dev hsr_slave_0 [ 3299.572044] protocol 88fb is buggy, dev hsr_slave_1 [ 3299.966677] protocol 88fb is buggy, dev hsr_slave_0 [ 3299.971878] protocol 88fb is buggy, dev hsr_slave_1 [ 3300.126688] protocol 88fb is buggy, dev hsr_slave_0 [ 3300.131857] protocol 88fb is buggy, dev hsr_slave_1 [ 3300.286661] Bluetooth: hci0: command 0x1001 tx timeout [ 3300.292559] Bluetooth: hci0: sending frame failed (-49) [ 3302.366650] Bluetooth: hci0: command 0x1009 tx timeout [ 3303.726753] net_ratelimit: 14 callbacks suppressed [ 3303.731764] protocol 88fb is buggy, dev hsr_slave_0 [ 3303.737238] protocol 88fb is buggy, dev hsr_slave_1 [ 3304.126681] protocol 88fb is buggy, dev hsr_slave_0 [ 3304.131766] protocol 88fb is buggy, dev hsr_slave_1 [ 3304.286669] protocol 88fb is buggy, dev hsr_slave_0 [ 3304.291770] protocol 88fb is buggy, dev hsr_slave_1 [ 3304.766749] protocol 88fb is buggy, dev hsr_slave_0 [ 3304.771964] protocol 88fb is buggy, dev hsr_slave_1 [ 3304.777311] protocol 88fb is buggy, dev hsr_slave_0 [ 3304.782489] protocol 88fb is buggy, dev hsr_slave_1 20:59:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000200)=0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000100)=""/197) ioctl$TIOCSETD(r1, 0x5437, 0x0) 20:59:06 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 20:59:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x13e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:06 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:59:06 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:59:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1eb, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:06 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 20:59:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1ec, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x13f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:07 executing program 4: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:59:07 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:59:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1ed, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3308.526683] Bluetooth: hci0: command 0x1003 tx timeout [ 3308.532120] Bluetooth: hci0: sending frame failed (-49) [ 3308.926717] net_ratelimit: 16 callbacks suppressed [ 3308.926728] protocol 88fb is buggy, dev hsr_slave_0 [ 3308.936898] protocol 88fb is buggy, dev hsr_slave_1 [ 3308.942247] protocol 88fb is buggy, dev hsr_slave_0 [ 3308.947527] protocol 88fb is buggy, dev hsr_slave_1 [ 3309.966706] protocol 88fb is buggy, dev hsr_slave_0 [ 3309.972179] protocol 88fb is buggy, dev hsr_slave_1 [ 3310.366641] protocol 88fb is buggy, dev hsr_slave_0 [ 3310.371731] protocol 88fb is buggy, dev hsr_slave_1 [ 3310.526702] protocol 88fb is buggy, dev hsr_slave_0 [ 3310.531813] protocol 88fb is buggy, dev hsr_slave_1 [ 3310.606679] Bluetooth: hci0: command 0x1001 tx timeout [ 3310.612302] Bluetooth: hci0: sending frame failed (-49) [ 3312.686713] Bluetooth: hci0: command 0x1009 tx timeout [ 3314.126722] net_ratelimit: 14 callbacks suppressed [ 3314.126731] protocol 88fb is buggy, dev hsr_slave_0 [ 3314.136869] protocol 88fb is buggy, dev hsr_slave_1 [ 3314.526681] protocol 88fb is buggy, dev hsr_slave_0 [ 3314.531844] protocol 88fb is buggy, dev hsr_slave_1 [ 3314.686687] protocol 88fb is buggy, dev hsr_slave_0 [ 3314.691824] protocol 88fb is buggy, dev hsr_slave_1 [ 3315.166741] protocol 88fb is buggy, dev hsr_slave_0 [ 3315.172038] protocol 88fb is buggy, dev hsr_slave_1 [ 3315.177344] protocol 88fb is buggy, dev hsr_slave_0 [ 3315.182600] protocol 88fb is buggy, dev hsr_slave_1 20:59:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000200)=0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000100)=""/197) ioctl$TIOCSETD(r1, 0x5437, 0x0) 20:59:17 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:59:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x140, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:17 executing program 4: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:59:17 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:59:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1ee, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:17 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:59:17 executing program 4: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:59:17 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:59:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1ef, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x141, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:17 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) [ 3318.686708] Bluetooth: hci0: command 0x1003 tx timeout [ 3318.692135] Bluetooth: hci0: sending frame failed (-49) [ 3319.326690] net_ratelimit: 16 callbacks suppressed [ 3319.331719] protocol 88fb is buggy, dev hsr_slave_0 [ 3319.336865] protocol 88fb is buggy, dev hsr_slave_1 [ 3319.342185] protocol 88fb is buggy, dev hsr_slave_0 [ 3319.347399] protocol 88fb is buggy, dev hsr_slave_1 [ 3320.376737] protocol 88fb is buggy, dev hsr_slave_0 [ 3320.381837] protocol 88fb is buggy, dev hsr_slave_1 [ 3320.766713] protocol 88fb is buggy, dev hsr_slave_0 [ 3320.766750] Bluetooth: hci0: command 0x1001 tx timeout [ 3320.771867] protocol 88fb is buggy, dev hsr_slave_1 [ 3320.777685] Bluetooth: hci0: sending frame failed (-49) [ 3320.926642] protocol 88fb is buggy, dev hsr_slave_0 [ 3320.931914] protocol 88fb is buggy, dev hsr_slave_1 [ 3322.846668] Bluetooth: hci0: command 0x1009 tx timeout [ 3324.526735] net_ratelimit: 14 callbacks suppressed [ 3324.526744] protocol 88fb is buggy, dev hsr_slave_0 [ 3324.536886] protocol 88fb is buggy, dev hsr_slave_1 [ 3324.926660] protocol 88fb is buggy, dev hsr_slave_0 [ 3324.931759] protocol 88fb is buggy, dev hsr_slave_1 [ 3325.086642] protocol 88fb is buggy, dev hsr_slave_0 [ 3325.091755] protocol 88fb is buggy, dev hsr_slave_1 [ 3325.576744] protocol 88fb is buggy, dev hsr_slave_0 [ 3325.581844] protocol 88fb is buggy, dev hsr_slave_1 [ 3325.587047] protocol 88fb is buggy, dev hsr_slave_0 [ 3325.592281] protocol 88fb is buggy, dev hsr_slave_1 20:59:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000200)=0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000100)=""/197) 20:59:27 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(0x0, 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:59:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1f0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x142, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:27 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:59:27 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:59:27 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(0x0, 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:59:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x143, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1f1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:27 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:59:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x144, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:27 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(0x0, 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) [ 3328.926612] Bluetooth: hci0: command 0x1003 tx timeout [ 3328.932125] Bluetooth: hci0: sending frame failed (-49) [ 3329.736687] net_ratelimit: 16 callbacks suppressed [ 3329.736695] protocol 88fb is buggy, dev hsr_slave_0 [ 3329.746844] protocol 88fb is buggy, dev hsr_slave_1 [ 3329.752031] protocol 88fb is buggy, dev hsr_slave_0 [ 3329.757121] protocol 88fb is buggy, dev hsr_slave_1 [ 3330.766738] protocol 88fb is buggy, dev hsr_slave_0 [ 3330.771873] protocol 88fb is buggy, dev hsr_slave_1 [ 3331.006717] Bluetooth: hci0: command 0x1001 tx timeout [ 3331.012227] Bluetooth: hci0: sending frame failed (-49) [ 3331.166674] protocol 88fb is buggy, dev hsr_slave_0 [ 3331.171819] protocol 88fb is buggy, dev hsr_slave_1 [ 3331.326705] protocol 88fb is buggy, dev hsr_slave_0 [ 3331.331873] protocol 88fb is buggy, dev hsr_slave_1 [ 3333.086721] Bluetooth: hci0: command 0x1009 tx timeout [ 3334.926734] net_ratelimit: 14 callbacks suppressed [ 3334.931760] protocol 88fb is buggy, dev hsr_slave_0 [ 3334.937013] protocol 88fb is buggy, dev hsr_slave_1 [ 3335.326638] protocol 88fb is buggy, dev hsr_slave_0 [ 3335.332899] protocol 88fb is buggy, dev hsr_slave_1 [ 3335.486666] protocol 88fb is buggy, dev hsr_slave_0 [ 3335.491796] protocol 88fb is buggy, dev hsr_slave_1 [ 3335.966725] protocol 88fb is buggy, dev hsr_slave_0 [ 3335.971895] protocol 88fb is buggy, dev hsr_slave_1 [ 3335.977269] protocol 88fb is buggy, dev hsr_slave_0 [ 3335.982434] protocol 88fb is buggy, dev hsr_slave_1 20:59:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1f2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:37 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:59:37 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:59:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000200)=0x4) 20:59:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x145, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:37 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:59:37 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:59:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1f3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x146, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:37 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:59:38 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:59:38 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:59:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x147, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:38 executing program 4: 20:59:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1f4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3339.326680] Bluetooth: hci0: command 0x1003 tx timeout [ 3339.332099] Bluetooth: hci0: sending frame failed (-49) [ 3340.126716] net_ratelimit: 16 callbacks suppressed [ 3340.126724] protocol 88fb is buggy, dev hsr_slave_0 [ 3340.136842] protocol 88fb is buggy, dev hsr_slave_1 [ 3340.142740] protocol 88fb is buggy, dev hsr_slave_0 [ 3340.147980] protocol 88fb is buggy, dev hsr_slave_1 [ 3341.166730] protocol 88fb is buggy, dev hsr_slave_0 [ 3341.171928] protocol 88fb is buggy, dev hsr_slave_1 [ 3341.406637] Bluetooth: hci0: command 0x1001 tx timeout [ 3341.412061] Bluetooth: hci0: sending frame failed (-49) [ 3341.566726] protocol 88fb is buggy, dev hsr_slave_0 [ 3341.571851] protocol 88fb is buggy, dev hsr_slave_1 [ 3341.726654] protocol 88fb is buggy, dev hsr_slave_0 [ 3341.732030] protocol 88fb is buggy, dev hsr_slave_1 [ 3343.486676] Bluetooth: hci0: command 0x1009 tx timeout [ 3345.326723] net_ratelimit: 14 callbacks suppressed [ 3345.331737] protocol 88fb is buggy, dev hsr_slave_0 [ 3345.336976] protocol 88fb is buggy, dev hsr_slave_1 [ 3345.726699] protocol 88fb is buggy, dev hsr_slave_0 [ 3345.731954] protocol 88fb is buggy, dev hsr_slave_1 [ 3345.886668] protocol 88fb is buggy, dev hsr_slave_0 [ 3345.891860] protocol 88fb is buggy, dev hsr_slave_1 [ 3346.366730] protocol 88fb is buggy, dev hsr_slave_0 [ 3346.372005] protocol 88fb is buggy, dev hsr_slave_1 [ 3346.377240] protocol 88fb is buggy, dev hsr_slave_0 [ 3346.382563] protocol 88fb is buggy, dev hsr_slave_1 20:59:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 20:59:48 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:59:48 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:59:48 executing program 4: 20:59:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x148, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1f5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:48 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:59:48 executing program 4: 20:59:48 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:59:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1f6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x149, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:48 executing program 4: [ 3350.046690] Bluetooth: hci0: command 0x1003 tx timeout [ 3350.052112] Bluetooth: hci0: sending frame failed (-49) [ 3350.526719] net_ratelimit: 16 callbacks suppressed [ 3350.526727] protocol 88fb is buggy, dev hsr_slave_0 [ 3350.536887] protocol 88fb is buggy, dev hsr_slave_1 [ 3350.542274] protocol 88fb is buggy, dev hsr_slave_0 [ 3350.547509] protocol 88fb is buggy, dev hsr_slave_1 [ 3351.566731] protocol 88fb is buggy, dev hsr_slave_0 [ 3351.571835] protocol 88fb is buggy, dev hsr_slave_1 [ 3351.966655] protocol 88fb is buggy, dev hsr_slave_0 [ 3351.971779] protocol 88fb is buggy, dev hsr_slave_1 [ 3352.126633] Bluetooth: hci0: command 0x1001 tx timeout [ 3352.126660] protocol 88fb is buggy, dev hsr_slave_0 [ 3352.137081] protocol 88fb is buggy, dev hsr_slave_1 [ 3352.142289] Bluetooth: hci0: sending frame failed (-49) [ 3354.206786] Bluetooth: hci0: command 0x1009 tx timeout [ 3355.726721] net_ratelimit: 14 callbacks suppressed [ 3355.731761] protocol 88fb is buggy, dev hsr_slave_0 [ 3355.737046] protocol 88fb is buggy, dev hsr_slave_1 [ 3356.126637] protocol 88fb is buggy, dev hsr_slave_0 [ 3356.131770] protocol 88fb is buggy, dev hsr_slave_1 [ 3356.286720] protocol 88fb is buggy, dev hsr_slave_0 [ 3356.291873] protocol 88fb is buggy, dev hsr_slave_1 [ 3356.766747] protocol 88fb is buggy, dev hsr_slave_0 [ 3356.771884] protocol 88fb is buggy, dev hsr_slave_1 [ 3356.777078] protocol 88fb is buggy, dev hsr_slave_0 [ 3356.782127] protocol 88fb is buggy, dev hsr_slave_1 20:59:58 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:59:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 20:59:58 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:59:58 executing program 4: 20:59:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x14a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1f7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:58 executing program 4: 20:59:58 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:59:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1f8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x14b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:59 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 20:59:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x14c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 20:59:59 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440), 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 20:59:59 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) [ 3360.286651] Bluetooth: hci0: command 0x1003 tx timeout [ 3360.292115] Bluetooth: hci0: sending frame failed (-49) [ 3360.926701] net_ratelimit: 16 callbacks suppressed [ 3360.931792] protocol 88fb is buggy, dev hsr_slave_0 [ 3360.937078] protocol 88fb is buggy, dev hsr_slave_1 [ 3360.942441] protocol 88fb is buggy, dev hsr_slave_0 [ 3360.947746] protocol 88fb is buggy, dev hsr_slave_1 [ 3361.966717] protocol 88fb is buggy, dev hsr_slave_0 [ 3361.971821] protocol 88fb is buggy, dev hsr_slave_1 [ 3362.366694] protocol 88fb is buggy, dev hsr_slave_0 [ 3362.371797] protocol 88fb is buggy, dev hsr_slave_1 [ 3362.377039] Bluetooth: hci0: command 0x1001 tx timeout [ 3362.382411] Bluetooth: hci0: sending frame failed (-49) [ 3362.526703] protocol 88fb is buggy, dev hsr_slave_0 [ 3362.531868] protocol 88fb is buggy, dev hsr_slave_1 [ 3364.446868] Bluetooth: hci0: command 0x1009 tx timeout [ 3366.126736] net_ratelimit: 14 callbacks suppressed [ 3366.131745] protocol 88fb is buggy, dev hsr_slave_0 [ 3366.136985] protocol 88fb is buggy, dev hsr_slave_1 [ 3366.526660] protocol 88fb is buggy, dev hsr_slave_0 [ 3366.531773] protocol 88fb is buggy, dev hsr_slave_1 [ 3366.686659] protocol 88fb is buggy, dev hsr_slave_0 [ 3366.691804] protocol 88fb is buggy, dev hsr_slave_1 [ 3367.166738] protocol 88fb is buggy, dev hsr_slave_0 [ 3367.172636] protocol 88fb is buggy, dev hsr_slave_1 [ 3367.177820] protocol 88fb is buggy, dev hsr_slave_0 [ 3367.183026] protocol 88fb is buggy, dev hsr_slave_1 21:00:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:00:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1f9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:08 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:00:08 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:00:08 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440), 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:08 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x14d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:09 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:00:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1fa, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:09 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440), 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:00:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x14e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1fb, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:09 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:00:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:00:09 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:00:09 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{0x0}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x14f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1fc, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:09 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) 21:00:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x150, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:09 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) 21:00:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1fd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:09 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{0x0}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5437, 0x0) 21:00:10 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:00:10 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) 21:00:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x151, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:10 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{0x0}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) [ 3369.633212] Bluetooth: hci0: Frame reassembly failed (-84) 21:00:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1fe, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:00:10 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x152, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:00:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x201, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:10 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) [ 3371.326745] net_ratelimit: 16 callbacks suppressed [ 3371.331763] protocol 88fb is buggy, dev hsr_slave_0 [ 3371.337115] protocol 88fb is buggy, dev hsr_slave_1 [ 3371.342411] protocol 88fb is buggy, dev hsr_slave_0 [ 3371.347925] protocol 88fb is buggy, dev hsr_slave_1 [ 3371.646663] Bluetooth: hci0: command 0x1003 tx timeout [ 3371.652078] Bluetooth: hci0: sending frame failed (-49) [ 3372.366706] protocol 88fb is buggy, dev hsr_slave_0 [ 3372.371846] protocol 88fb is buggy, dev hsr_slave_1 [ 3372.766641] protocol 88fb is buggy, dev hsr_slave_0 [ 3372.771785] protocol 88fb is buggy, dev hsr_slave_1 [ 3372.926715] protocol 88fb is buggy, dev hsr_slave_0 [ 3372.931889] protocol 88fb is buggy, dev hsr_slave_1 [ 3373.726738] Bluetooth: hci0: command 0x1001 tx timeout [ 3373.732149] Bluetooth: hci0: sending frame failed (-49) [ 3375.806729] Bluetooth: hci0: command 0x1009 tx timeout [ 3376.526755] net_ratelimit: 14 callbacks suppressed [ 3376.526765] protocol 88fb is buggy, dev hsr_slave_0 [ 3376.536941] protocol 88fb is buggy, dev hsr_slave_1 [ 3376.926645] protocol 88fb is buggy, dev hsr_slave_0 [ 3376.931822] protocol 88fb is buggy, dev hsr_slave_1 [ 3377.086686] protocol 88fb is buggy, dev hsr_slave_0 [ 3377.091862] protocol 88fb is buggy, dev hsr_slave_1 [ 3377.566773] protocol 88fb is buggy, dev hsr_slave_0 [ 3377.571908] protocol 88fb is buggy, dev hsr_slave_1 [ 3377.577107] protocol 88fb is buggy, dev hsr_slave_0 [ 3377.582425] protocol 88fb is buggy, dev hsr_slave_1 21:00:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 21:00:20 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:00:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x153, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:00:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x202, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:20 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:00:20 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x203, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3380.013996] Bluetooth: hci0: Frame reassembly failed (-84) 21:00:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x154, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:20 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) [ 3381.726718] net_ratelimit: 16 callbacks suppressed [ 3381.731727] protocol 88fb is buggy, dev hsr_slave_0 [ 3381.736836] protocol 88fb is buggy, dev hsr_slave_1 [ 3381.742047] protocol 88fb is buggy, dev hsr_slave_0 [ 3381.747253] protocol 88fb is buggy, dev hsr_slave_1 [ 3382.046664] Bluetooth: hci0: command 0x1003 tx timeout [ 3382.052103] Bluetooth: hci0: sending frame failed (-49) [ 3382.766712] protocol 88fb is buggy, dev hsr_slave_0 [ 3382.771851] protocol 88fb is buggy, dev hsr_slave_1 [ 3383.166667] protocol 88fb is buggy, dev hsr_slave_0 [ 3383.171872] protocol 88fb is buggy, dev hsr_slave_1 [ 3383.326664] protocol 88fb is buggy, dev hsr_slave_0 [ 3383.331826] protocol 88fb is buggy, dev hsr_slave_1 [ 3384.126703] Bluetooth: hci0: command 0x1001 tx timeout [ 3384.132125] Bluetooth: hci0: sending frame failed (-49) [ 3386.206680] Bluetooth: hci0: command 0x1009 tx timeout [ 3386.926722] net_ratelimit: 14 callbacks suppressed [ 3386.931733] protocol 88fb is buggy, dev hsr_slave_0 [ 3386.936834] protocol 88fb is buggy, dev hsr_slave_1 [ 3387.326683] protocol 88fb is buggy, dev hsr_slave_0 [ 3387.331830] protocol 88fb is buggy, dev hsr_slave_1 [ 3387.486716] protocol 88fb is buggy, dev hsr_slave_0 [ 3387.491855] protocol 88fb is buggy, dev hsr_slave_1 [ 3387.966749] protocol 88fb is buggy, dev hsr_slave_0 [ 3387.971882] protocol 88fb is buggy, dev hsr_slave_1 [ 3387.977283] protocol 88fb is buggy, dev hsr_slave_0 [ 3387.982503] protocol 88fb is buggy, dev hsr_slave_1 21:00:30 executing program 4: 21:00:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x204, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:30 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:00:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:00:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x155, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:30 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:00:30 executing program 4: 21:00:30 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:00:30 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x205, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x156, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:00:31 executing program 4: 21:00:31 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:00:31 executing program 4: 21:00:31 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:00:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x206, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:31 executing program 4: 21:00:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x157, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:31 executing program 0: getpid() r0 = gettid() r1 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:00:31 executing program 4: 21:00:31 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:00:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x207, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x158, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3390.914827] ptrace attach of "/root/syz-executor.0"[19906] was attempted by "/root/syz-executor.0"[19911] 21:00:31 executing program 0: getpid() r0 = gettid() r1 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:00:31 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xe0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x208, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:00:31 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x159, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 21:00:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:00:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x209, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:32 executing program 0: getpid() r0 = gettid() r1 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:00:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) 21:00:32 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x15a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3391.597686] Bluetooth: hci0: Frame reassembly failed (-84) [ 3391.659096] ptrace attach of "/root/syz-executor.0"[19957] was attempted by "/root/syz-executor.0"[19959] 21:00:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x20a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) 21:00:32 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = gettid() r1 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:00:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x15b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3392.126649] net_ratelimit: 16 callbacks suppressed [ 3392.126658] protocol 88fb is buggy, dev hsr_slave_0 [ 3392.136751] protocol 88fb is buggy, dev hsr_slave_1 [ 3392.141910] protocol 88fb is buggy, dev hsr_slave_0 [ 3392.147038] protocol 88fb is buggy, dev hsr_slave_1 [ 3393.166693] protocol 88fb is buggy, dev hsr_slave_0 [ 3393.171877] protocol 88fb is buggy, dev hsr_slave_1 [ 3393.566657] protocol 88fb is buggy, dev hsr_slave_0 [ 3393.571820] protocol 88fb is buggy, dev hsr_slave_1 [ 3393.646641] Bluetooth: hci0: command 0x1003 tx timeout [ 3393.652302] Bluetooth: hci0: sending frame failed (-49) [ 3393.726702] protocol 88fb is buggy, dev hsr_slave_0 [ 3393.731928] protocol 88fb is buggy, dev hsr_slave_1 [ 3395.726711] Bluetooth: hci0: command 0x1001 tx timeout [ 3395.732163] Bluetooth: hci0: sending frame failed (-49) [ 3397.326769] net_ratelimit: 14 callbacks suppressed [ 3397.331881] protocol 88fb is buggy, dev hsr_slave_0 [ 3397.337276] protocol 88fb is buggy, dev hsr_slave_1 [ 3397.726831] protocol 88fb is buggy, dev hsr_slave_0 [ 3397.732107] protocol 88fb is buggy, dev hsr_slave_1 [ 3397.806704] Bluetooth: hci0: command 0x1009 tx timeout [ 3397.886729] protocol 88fb is buggy, dev hsr_slave_0 [ 3397.892086] protocol 88fb is buggy, dev hsr_slave_1 [ 3398.366758] protocol 88fb is buggy, dev hsr_slave_0 [ 3398.372097] protocol 88fb is buggy, dev hsr_slave_1 [ 3398.377558] protocol 88fb is buggy, dev hsr_slave_0 [ 3398.382687] protocol 88fb is buggy, dev hsr_slave_1 21:00:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x20b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) 21:00:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x15c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = gettid() r1 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:00:42 executing program 4: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:42 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 21:00:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x20c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x15d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:42 executing program 4: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:42 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) [ 3402.027470] Bluetooth: hci0: Frame reassembly failed (-84) 21:00:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = gettid() r1 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:00:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x20d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x15e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3402.246250] ptrace attach of "/root/syz-executor.0"[20028] was attempted by "/root/syz-executor.0"[20035] 21:00:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x20e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:42 executing program 4: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:42 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:43 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x20f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3402.526666] net_ratelimit: 16 callbacks suppressed [ 3402.526675] protocol 88fb is buggy, dev hsr_slave_0 [ 3402.536828] protocol 88fb is buggy, dev hsr_slave_1 [ 3402.541974] protocol 88fb is buggy, dev hsr_slave_0 [ 3402.547116] protocol 88fb is buggy, dev hsr_slave_1 [ 3403.566775] protocol 88fb is buggy, dev hsr_slave_0 [ 3403.571897] protocol 88fb is buggy, dev hsr_slave_1 [ 3403.966612] protocol 88fb is buggy, dev hsr_slave_0 [ 3403.972731] protocol 88fb is buggy, dev hsr_slave_1 [ 3404.046627] Bluetooth: hci0: command 0x1003 tx timeout [ 3404.052089] Bluetooth: hci0: sending frame failed (-49) [ 3404.126620] protocol 88fb is buggy, dev hsr_slave_0 [ 3404.131797] protocol 88fb is buggy, dev hsr_slave_1 [ 3406.126741] Bluetooth: hci0: command 0x1001 tx timeout [ 3406.132205] Bluetooth: hci0: sending frame failed (-49) [ 3407.726746] net_ratelimit: 14 callbacks suppressed [ 3407.731822] protocol 88fb is buggy, dev hsr_slave_0 [ 3407.737071] protocol 88fb is buggy, dev hsr_slave_1 [ 3408.126676] protocol 88fb is buggy, dev hsr_slave_0 [ 3408.131768] protocol 88fb is buggy, dev hsr_slave_1 [ 3408.206708] Bluetooth: hci0: command 0x1009 tx timeout [ 3408.286711] protocol 88fb is buggy, dev hsr_slave_0 [ 3408.291810] protocol 88fb is buggy, dev hsr_slave_1 [ 3408.766741] protocol 88fb is buggy, dev hsr_slave_0 [ 3408.772035] protocol 88fb is buggy, dev hsr_slave_1 [ 3408.777234] protocol 88fb is buggy, dev hsr_slave_0 [ 3408.782452] protocol 88fb is buggy, dev hsr_slave_1 21:00:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4743b5e8dcfb8c1c) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000080)=0x8) ioctl$TIOCSETD(r0, 0x5437, 0x0) 21:00:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x15f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 21:00:53 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:00:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x210, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:53 executing program 0: getpid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = gettid() r1 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:00:53 executing program 0: getpid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = gettid() r1 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:00:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x160, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:00:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x211, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3412.652855] Bluetooth: hci0: Frame reassembly failed (-84) [ 3412.673973] Bluetooth: hci1: Frame reassembly failed (-84) 21:00:53 executing program 0: getpid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = gettid() r1 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:00:53 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) [ 3412.744666] ptrace attach of "/root/syz-executor.0"[20078] was attempted by "/root/syz-executor.0"[20082] 21:00:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x161, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3412.926687] net_ratelimit: 16 callbacks suppressed [ 3412.926696] protocol 88fb is buggy, dev hsr_slave_0 [ 3412.936822] protocol 88fb is buggy, dev hsr_slave_1 [ 3412.941995] protocol 88fb is buggy, dev hsr_slave_0 [ 3412.948079] protocol 88fb is buggy, dev hsr_slave_1 [ 3413.966692] protocol 88fb is buggy, dev hsr_slave_0 [ 3413.971832] protocol 88fb is buggy, dev hsr_slave_1 [ 3414.366611] protocol 88fb is buggy, dev hsr_slave_0 [ 3414.371739] protocol 88fb is buggy, dev hsr_slave_1 [ 3414.526658] protocol 88fb is buggy, dev hsr_slave_0 [ 3414.531778] protocol 88fb is buggy, dev hsr_slave_1 [ 3414.686648] Bluetooth: hci0: command 0x1003 tx timeout [ 3414.686654] Bluetooth: hci1: command 0x1003 tx timeout [ 3414.686743] Bluetooth: hci1: sending frame failed (-49) [ 3414.692302] Bluetooth: hci0: sending frame failed (-49) [ 3416.766679] Bluetooth: hci1: command 0x1001 tx timeout [ 3416.766684] Bluetooth: hci0: command 0x1001 tx timeout [ 3416.766766] Bluetooth: hci0: sending frame failed (-49) [ 3416.772070] Bluetooth: hci1: sending frame failed (-49) [ 3418.126719] net_ratelimit: 14 callbacks suppressed [ 3418.131738] protocol 88fb is buggy, dev hsr_slave_0 [ 3418.136849] protocol 88fb is buggy, dev hsr_slave_1 [ 3418.526679] protocol 88fb is buggy, dev hsr_slave_0 [ 3418.531778] protocol 88fb is buggy, dev hsr_slave_1 [ 3418.686683] protocol 88fb is buggy, dev hsr_slave_0 [ 3418.691800] protocol 88fb is buggy, dev hsr_slave_1 [ 3418.846642] Bluetooth: hci0: command 0x1009 tx timeout [ 3418.846649] Bluetooth: hci1: command 0x1009 tx timeout [ 3419.166740] protocol 88fb is buggy, dev hsr_slave_0 [ 3419.171848] protocol 88fb is buggy, dev hsr_slave_1 [ 3419.177048] protocol 88fb is buggy, dev hsr_slave_0 [ 3419.182373] protocol 88fb is buggy, dev hsr_slave_1 21:01:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x162, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = gettid() r1 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:01:03 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:03 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 21:01:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x212, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:03 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x163, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:03 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) [ 3422.937602] Bluetooth: hci0: Frame reassembly failed (-84) 21:01:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x213, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:03 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x164, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:03 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = gettid() r1 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:01:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x214, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:03 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) [ 3423.326638] net_ratelimit: 16 callbacks suppressed [ 3423.326647] protocol 88fb is buggy, dev hsr_slave_0 [ 3423.336757] protocol 88fb is buggy, dev hsr_slave_1 [ 3423.342728] protocol 88fb is buggy, dev hsr_slave_0 [ 3423.347858] protocol 88fb is buggy, dev hsr_slave_1 [ 3424.366667] protocol 88fb is buggy, dev hsr_slave_0 [ 3424.371816] protocol 88fb is buggy, dev hsr_slave_1 [ 3424.766661] protocol 88fb is buggy, dev hsr_slave_0 [ 3424.771838] protocol 88fb is buggy, dev hsr_slave_1 [ 3424.926649] protocol 88fb is buggy, dev hsr_slave_0 [ 3424.931837] protocol 88fb is buggy, dev hsr_slave_1 [ 3425.006620] Bluetooth: hci0: command 0x1003 tx timeout [ 3425.012075] Bluetooth: hci0: sending frame failed (-49) [ 3427.086727] Bluetooth: hci0: command 0x1001 tx timeout [ 3427.092155] Bluetooth: hci0: sending frame failed (-49) [ 3428.526720] net_ratelimit: 14 callbacks suppressed [ 3428.526729] protocol 88fb is buggy, dev hsr_slave_0 [ 3428.536870] protocol 88fb is buggy, dev hsr_slave_1 [ 3428.926696] protocol 88fb is buggy, dev hsr_slave_0 [ 3428.931794] protocol 88fb is buggy, dev hsr_slave_1 [ 3429.086653] protocol 88fb is buggy, dev hsr_slave_0 [ 3429.091819] protocol 88fb is buggy, dev hsr_slave_1 [ 3429.166650] Bluetooth: hci0: command 0x1009 tx timeout [ 3429.566727] protocol 88fb is buggy, dev hsr_slave_0 [ 3429.571868] protocol 88fb is buggy, dev hsr_slave_1 [ 3429.577065] protocol 88fb is buggy, dev hsr_slave_0 [ 3429.582280] protocol 88fb is buggy, dev hsr_slave_1 21:01:13 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:13 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x215, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x165, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:13 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = gettid() r1 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:01:13 executing program 5 (fault-call:2 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:01:13 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) [ 3433.159017] FAULT_INJECTION: forcing a failure. [ 3433.159017] name failslab, interval 1, probability 0, space 0, times 0 [ 3433.206330] CPU: 1 PID: 20184 Comm: syz-executor.5 Not tainted 4.19.84 #0 [ 3433.213320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3433.222679] Call Trace: [ 3433.225285] dump_stack+0x197/0x210 [ 3433.228934] should_fail.cold+0xa/0x1b [ 3433.232845] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3433.237974] ? lock_downgrade+0x880/0x880 [ 3433.242169] __should_failslab+0x121/0x190 [ 3433.246418] should_failslab+0x9/0x14 [ 3433.250228] kmem_cache_alloc_trace+0x2cc/0x760 [ 3433.255095] hci_alloc_dev+0x43/0x1d00 [ 3433.259033] hci_uart_tty_ioctl+0x2d7/0xaf0 [ 3433.263387] tty_ioctl+0x8b5/0x1510 [ 3433.267049] ? hci_uart_init_work+0x140/0x140 [ 3433.271552] ? tty_vhangup+0x30/0x30 [ 3433.275270] ? mark_held_locks+0x100/0x100 [ 3433.279521] ? debug_smp_processor_id+0x1c/0x20 [ 3433.284198] ? __fget+0x340/0x540 [ 3433.287664] ? __might_sleep+0x95/0x190 [ 3433.291653] ? tty_vhangup+0x30/0x30 [ 3433.295377] do_vfs_ioctl+0xd5f/0x1380 [ 3433.299277] ? selinux_file_ioctl+0x46f/0x5e0 [ 3433.303801] ? selinux_file_ioctl+0x125/0x5e0 [ 3433.308303] ? ioctl_preallocate+0x210/0x210 [ 3433.312717] ? selinux_file_mprotect+0x620/0x620 [ 3433.317487] ? iterate_fd+0x360/0x360 [ 3433.321305] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3433.326848] ? fput+0x128/0x1a0 [ 3433.330158] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3433.335708] ? security_file_ioctl+0x8d/0xc0 [ 3433.340140] ksys_ioctl+0xab/0xd0 [ 3433.343608] __x64_sys_ioctl+0x73/0xb0 [ 3433.347515] do_syscall_64+0xfd/0x620 [ 3433.351332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3433.356528] RIP: 0033:0x45a639 [ 3433.359729] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3433.378748] RSP: 002b:00007fb43243cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3433.386477] RAX: ffffffffffffffda RBX: 00007fb43243cc90 RCX: 000000000045a639 [ 3433.393773] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003 21:01:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x166, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x216, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3433.401062] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3433.408336] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb43243d6d4 [ 3433.415609] R13: 00000000004c3634 R14: 00000000004d77e8 R15: 0000000000000004 [ 3433.438484] Bluetooth: Can't allocate HCI device 21:01:14 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:14 executing program 5 (fault-call:2 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:01:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x167, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:14 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 21:01:14 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) [ 3433.726662] net_ratelimit: 16 callbacks suppressed [ 3433.726671] protocol 88fb is buggy, dev hsr_slave_0 [ 3433.737180] protocol 88fb is buggy, dev hsr_slave_1 [ 3433.742344] protocol 88fb is buggy, dev hsr_slave_0 [ 3433.747574] protocol 88fb is buggy, dev hsr_slave_1 21:01:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x217, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:14 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) [ 3433.802882] FAULT_INJECTION: forcing a failure. [ 3433.802882] name failslab, interval 1, probability 0, space 0, times 0 [ 3433.885332] CPU: 1 PID: 20205 Comm: syz-executor.5 Not tainted 4.19.84 #0 [ 3433.892329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3433.901705] Call Trace: [ 3433.904325] dump_stack+0x197/0x210 [ 3433.907991] should_fail.cold+0xa/0x1b [ 3433.911909] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3433.917039] ? lock_downgrade+0x880/0x880 [ 3433.921231] __should_failslab+0x121/0x190 [ 3433.925495] should_failslab+0x9/0x14 [ 3433.929328] kmem_cache_alloc_trace+0x2cc/0x760 [ 3433.934290] ? pm_runtime_init+0x347/0x400 [ 3433.938666] ? device_initialize+0x1a1/0x440 [ 3433.943107] bcsp_open+0x46/0x3b0 [ 3433.946589] hci_uart_tty_ioctl+0x704/0xaf0 [ 3433.950942] tty_ioctl+0x8b5/0x1510 [ 3433.954594] ? hci_uart_init_work+0x140/0x140 [ 3433.959114] ? tty_vhangup+0x30/0x30 [ 3433.962847] ? mark_held_locks+0x100/0x100 [ 3433.967108] ? debug_smp_processor_id+0x1c/0x20 [ 3433.971804] ? __fget+0x340/0x540 [ 3433.975288] ? __might_sleep+0x95/0x190 [ 3433.980412] ? tty_vhangup+0x30/0x30 [ 3433.984149] do_vfs_ioctl+0xd5f/0x1380 [ 3433.988054] ? selinux_file_ioctl+0x46f/0x5e0 [ 3433.988071] ? selinux_file_ioctl+0x125/0x5e0 [ 3433.988089] ? ioctl_preallocate+0x210/0x210 [ 3433.988103] ? selinux_file_mprotect+0x620/0x620 [ 3433.988124] ? iterate_fd+0x360/0x360 [ 3433.988138] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3433.988154] ? fput+0x128/0x1a0 [ 3433.997175] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3433.997191] ? security_file_ioctl+0x8d/0xc0 [ 3433.997209] ksys_ioctl+0xab/0xd0 [ 3433.997228] __x64_sys_ioctl+0x73/0xb0 [ 3434.036798] do_syscall_64+0xfd/0x620 [ 3434.040597] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3434.045780] RIP: 0033:0x45a639 [ 3434.048966] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3434.067861] RSP: 002b:00007fb43243cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3434.075833] RAX: ffffffffffffffda RBX: 00007fb43243cc90 RCX: 000000000045a639 21:01:14 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 21:01:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x168, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3434.083109] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3434.090379] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3434.097648] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb43243d6d4 [ 3434.104910] R13: 00000000004c3634 R14: 00000000004d77e8 R15: 0000000000000004 21:01:14 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:14 executing program 5 (fault-call:2 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) [ 3434.232625] FAULT_INJECTION: forcing a failure. [ 3434.232625] name failslab, interval 1, probability 0, space 0, times 0 [ 3434.246415] CPU: 1 PID: 20256 Comm: syz-executor.5 Not tainted 4.19.84 #0 [ 3434.253401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3434.262778] Call Trace: [ 3434.265386] dump_stack+0x197/0x210 [ 3434.269053] should_fail.cold+0xa/0x1b [ 3434.273009] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3434.278151] ? lock_downgrade+0x880/0x880 [ 3434.282351] __should_failslab+0x121/0x190 [ 3434.286620] should_failslab+0x9/0x14 [ 3434.290446] __kmalloc+0x2e2/0x750 [ 3434.294022] ? __alloc_workqueue_key+0x139/0xee0 [ 3434.298827] __alloc_workqueue_key+0x139/0xee0 [ 3434.303443] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 3434.308495] ? scnprintf+0x140/0x140 [ 3434.312237] ? __lock_is_held+0xb6/0x140 [ 3434.316955] hci_register_dev+0x1c6/0x880 [ 3434.321144] hci_uart_tty_ioctl+0x761/0xaf0 [ 3434.325507] tty_ioctl+0x8b5/0x1510 [ 3434.329156] ? hci_uart_init_work+0x140/0x140 [ 3434.333672] ? tty_vhangup+0x30/0x30 [ 3434.337407] ? mark_held_locks+0x100/0x100 [ 3434.341684] ? debug_smp_processor_id+0x1c/0x20 [ 3434.346482] ? __fget+0x340/0x540 [ 3434.346508] ? __might_sleep+0x95/0x190 [ 3434.354024] ? tty_vhangup+0x30/0x30 [ 3434.357757] do_vfs_ioctl+0xd5f/0x1380 [ 3434.357775] ? selinux_file_ioctl+0x46f/0x5e0 [ 3434.357790] ? selinux_file_ioctl+0x125/0x5e0 [ 3434.357807] ? ioctl_preallocate+0x210/0x210 [ 3434.357823] ? selinux_file_mprotect+0x620/0x620 [ 3434.357844] ? iterate_fd+0x360/0x360 [ 3434.366228] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3434.366243] ? fput+0x128/0x1a0 [ 3434.366262] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3434.393169] ? security_file_ioctl+0x8d/0xc0 [ 3434.393191] ksys_ioctl+0xab/0xd0 [ 3434.393210] __x64_sys_ioctl+0x73/0xb0 [ 3434.410558] do_syscall_64+0xfd/0x620 [ 3434.414402] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3434.419606] RIP: 0033:0x45a639 21:01:14 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x218, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/de\xee[Loop#\x00', 0x83cf, 0x830bc0) fadvise64(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x40000) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000240)={0xfe, 0x2}) setsockopt(r1, 0x6, 0xfffff08c, &(0x7f0000000280)="de84ffebcb48b20f4291512c908eeb4d80b4588a10962458349f0a13e5af5cc4d01a98b4a6ad4b29", 0x28) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002000e58800000000100000000a7c000000000000002578000400000001040102000000000000000000000000aa22afa92581000000a68136bf453d14bc6e135e4ecd8d9dc5fb43005419bbcf5ed0fcf10000003c0f32c5e534714000000000000000ceee9f121a631042b25ea8faa48b6f7fe773eb90694ec9b8264934f219f0f13bb700e3470f613d88bf51b15759fcee2126e94ed1e2ef0d7cf8d0248e12c36efb43bb68a862ce0a13d1dfeecdc3d4b31bce9168c67aadd432017d6586698bbb5cd2adbb0a50589eb4e1801448a71b4bbb20787b0190d86bc280309899a45b6e81a64fcf"], 0x34}}, 0x0) fsetxattr(r2, &(0x7f0000000300)=@random={'btrfs.!\x86\xf2\xf2-Z\xb0\xd6\xc1\xb1ij\r\x81\x90u\xc9\xe8q%\x80\x16\x1f\xc3:\xc6K0#)X\xe9{\x83+=\xa4\xe7\xc3\x18\xe4\xdb~\x03vOki\a,5x\xf7-\x8c\xe0e\f\xcc\x1c[\xcbl\xcc\x0e\x04\xcc\x89\xc1\r\x9e\x03nk\xda\xcd`\xe3\x9f\xdc\xaa9\xa0\xfcw\x9e\xcec\x92N$\x82]\x0fyc\xf9y \xfe\xaaD[\xcb\xd9A\xd1?\xa2j\xe5\x96\b\x92y:\xb3\x93_\xb0\x00\b\x00\x00\x00\x00\x00\x006\x9b\x8e\xa1\x82\x7f\x12)\xa7R?\xbfah\xe4m\xe4X\xe1\xfcZ)\x9fcr\a3B\x94r+\x1a\a*\xf9Dv`Kb\x93\x1cn2/=H\xd7.\xc3\xf6T\xd6\x95\x01\xcb}\x99k\xa1\xf9qP\xbc.\xb5k\xf7^\x91\xc75W\xe2 \x05\xae\x9c\xfc\xea\x99\xccA\\3\xb0s\xe0\x97\xca\xb2\xcb\x98\xcaV\x03\x86\xc7)x\xad\xc0\x1a\xeae\xf3\x89>\x92F\x15!{\xf6\xb0\xab\x7f1\xbbU\xef4P\xd9\x8c\xcf\xf0E\xce\xbd[.<\x8cu\xbb\xf5\"5\x94\x96\"\x13~f\xc9@\x13 (9\'K\t\xfe%\xd4/Rk\xcc\xa8z\xbe)C-\x14\xa7\xea\x02#E\xdd\x9c\xf0M\x1a\x96\xc3)\xaaG\'\x98\xc1\xaeE\x1b\xb5\xf3c%\xbd\xe9\x85\xdb\x1e\xe1\xe90\xa3\x90,e\xff\x8d\xf5(c`\x8a\xd5G\xc8\b\x1e\xbe\xa4i\xd0\xfa\t\xcc', '\x00'}, &(0x7f00000002c0)='-eth1\x00', 0x15f, 0x1) [ 3434.419623] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3434.419631] RSP: 002b:00007fb43243cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3434.419648] RAX: ffffffffffffffda RBX: 00007fb43243cc90 RCX: 000000000045a639 [ 3434.419660] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3434.432004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3434.441760] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3434.441770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb43243d6d4 [ 3434.441779] R13: 00000000004c3634 R14: 00000000004d77e8 R15: 0000000000000004 [ 3434.497341] Bluetooth: Can't register HCI device 21:01:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x169, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:15 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:15 executing program 5 (fault-call:2 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:01:15 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x219, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x16a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3434.718731] FAULT_INJECTION: forcing a failure. [ 3434.718731] name failslab, interval 1, probability 0, space 0, times 0 21:01:15 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x7530}, 0x10) [ 3434.762010] CPU: 1 PID: 20431 Comm: syz-executor.5 Not tainted 4.19.84 #0 [ 3434.768993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3434.769001] Call Trace: [ 3434.769027] dump_stack+0x197/0x210 [ 3434.769051] should_fail.cold+0xa/0x1b [ 3434.769072] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3434.769087] ? lock_downgrade+0x880/0x880 [ 3434.769112] __should_failslab+0x121/0x190 [ 3434.769129] should_failslab+0x9/0x14 [ 3434.769144] kmem_cache_alloc_trace+0x2cc/0x760 [ 3434.769166] ? __alloc_workqueue_key+0x139/0xee0 [ 3434.769188] __alloc_workqueue_key+0x18e/0xee0 [ 3434.769213] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 3434.769225] ? scnprintf+0x140/0x140 [ 3434.769238] ? __lock_is_held+0xb6/0x140 [ 3434.769271] hci_register_dev+0x1c6/0x880 [ 3434.769295] hci_uart_tty_ioctl+0x761/0xaf0 [ 3434.769315] tty_ioctl+0x8b5/0x1510 [ 3434.769329] ? hci_uart_init_work+0x140/0x140 [ 3434.769344] ? tty_vhangup+0x30/0x30 [ 3434.769369] ? mark_held_locks+0x100/0x100 [ 3434.793941] ? debug_smp_processor_id+0x1c/0x20 21:01:15 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) [ 3434.793963] ? __fget+0x340/0x540 [ 3434.793986] ? __might_sleep+0x95/0x190 [ 3434.794001] ? tty_vhangup+0x30/0x30 [ 3434.794016] do_vfs_ioctl+0xd5f/0x1380 [ 3434.794032] ? selinux_file_ioctl+0x46f/0x5e0 [ 3434.794045] ? selinux_file_ioctl+0x125/0x5e0 [ 3434.794058] ? ioctl_preallocate+0x210/0x210 [ 3434.794072] ? selinux_file_mprotect+0x620/0x620 [ 3434.794092] ? iterate_fd+0x360/0x360 [ 3434.815684] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3434.825270] ? fput+0x128/0x1a0 [ 3434.825296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3434.825316] ? security_file_ioctl+0x8d/0xc0 [ 3434.918383] ksys_ioctl+0xab/0xd0 [ 3434.921831] __x64_sys_ioctl+0x73/0xb0 [ 3434.925723] do_syscall_64+0xfd/0x620 [ 3434.929524] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3434.934711] RIP: 0033:0x45a639 [ 3434.937909] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3434.956798] RSP: 002b:00007fb43243cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3434.964500] RAX: ffffffffffffffda RBX: 00007fb43243cc90 RCX: 000000000045a639 [ 3434.971762] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3434.979037] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3434.986299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb43243d6d4 [ 3434.993559] R13: 00000000004c3634 R14: 00000000004d77e8 R15: 0000000000000004 [ 3435.006634] protocol 88fb is buggy, dev hsr_slave_0 21:01:15 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x68a56621996aa85d) syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x23a400, 0x0) [ 3435.011763] protocol 88fb is buggy, dev hsr_slave_1 [ 3435.019820] Bluetooth: Can't register HCI device 21:01:15 executing program 5 (fault-call:2 fault-nth:4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:01:15 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x21a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3435.166616] protocol 88fb is buggy, dev hsr_slave_0 [ 3435.171803] protocol 88fb is buggy, dev hsr_slave_1 21:01:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x16b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:15 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) [ 3435.261844] FAULT_INJECTION: forcing a failure. [ 3435.261844] name failslab, interval 1, probability 0, space 0, times 0 [ 3435.325752] CPU: 1 PID: 20515 Comm: syz-executor.5 Not tainted 4.19.84 #0 [ 3435.332736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3435.342111] Call Trace: [ 3435.344722] dump_stack+0x197/0x210 [ 3435.348385] should_fail.cold+0xa/0x1b [ 3435.352303] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3435.357446] ? lock_downgrade+0x880/0x880 [ 3435.361640] __should_failslab+0x121/0x190 [ 3435.365895] should_failslab+0x9/0x14 [ 3435.369725] __kmalloc+0x2e2/0x750 21:01:15 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) [ 3435.373351] ? __lock_is_held+0xb6/0x140 [ 3435.377432] ? apply_wqattrs_prepare+0xfb/0xa30 [ 3435.382123] apply_wqattrs_prepare+0xfb/0xa30 [ 3435.386644] apply_workqueue_attrs_locked+0xcf/0x120 [ 3435.391777] apply_workqueue_attrs+0x31/0x50 [ 3435.396221] __alloc_workqueue_key+0x8b8/0xee0 [ 3435.400849] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 3435.405901] hci_register_dev+0x1c6/0x880 [ 3435.410092] hci_uart_tty_ioctl+0x761/0xaf0 [ 3435.414445] tty_ioctl+0x8b5/0x1510 [ 3435.419054] ? hci_uart_init_work+0x140/0x140 [ 3435.423578] ? tty_vhangup+0x30/0x30 [ 3435.427316] ? mark_held_locks+0x100/0x100 [ 3435.427899] cgroup: fork rejected by pids controller in [ 3435.431580] ? debug_smp_processor_id+0x1c/0x20 [ 3435.431659] ? __fget+0x340/0x540 [ 3435.431687] ? __might_sleep+0x95/0x190 [ 3435.437617] /syz0 [ 3435.441950] ? tty_vhangup+0x30/0x30 [ 3435.441965] do_vfs_ioctl+0xd5f/0x1380 [ 3435.441980] ? selinux_file_ioctl+0x46f/0x5e0 [ 3435.441992] ? selinux_file_ioctl+0x125/0x5e0 [ 3435.442007] ? ioctl_preallocate+0x210/0x210 [ 3435.442020] ? selinux_file_mprotect+0x620/0x620 [ 3435.449646] ? iterate_fd+0x360/0x360 [ 3435.449666] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3435.449680] ? fput+0x128/0x1a0 [ 3435.449704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3435.449721] ? security_file_ioctl+0x8d/0xc0 [ 3435.449737] ksys_ioctl+0xab/0xd0 [ 3435.449753] __x64_sys_ioctl+0x73/0xb0 [ 3435.449777] do_syscall_64+0xfd/0x620 [ 3435.449803] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3435.449814] RIP: 0033:0x45a639 21:01:16 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) [ 3435.449828] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3435.449836] RSP: 002b:00007fb43243cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3435.449854] RAX: ffffffffffffffda RBX: 00007fb43243cc90 RCX: 000000000045a639 [ 3435.449864] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3435.449876] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3435.449890] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb43243d6d4 21:01:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) [ 3435.553615] R13: 00000000004c3634 R14: 00000000004d77e8 R15: 0000000000000004 [ 3435.553959] protocol 88fb is buggy, dev hsr_slave_0 [ 3435.568404] protocol 88fb is buggy, dev hsr_slave_1 [ 3435.586192] Bluetooth: Can't register HCI device 21:01:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x21b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x16c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:16 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:16 executing program 5 (fault-call:2 fault-nth:5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:01:16 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x21c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3435.844485] FAULT_INJECTION: forcing a failure. [ 3435.844485] name failslab, interval 1, probability 0, space 0, times 0 21:01:16 executing program 4: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) fadvise64(r0, 0x0, 0x1, 0x0) [ 3435.916107] CPU: 1 PID: 20698 Comm: syz-executor.5 Not tainted 4.19.84 #0 [ 3435.923107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3435.932472] Call Trace: [ 3435.932499] dump_stack+0x197/0x210 [ 3435.932524] should_fail.cold+0xa/0x1b [ 3435.932549] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3435.942680] ? lock_downgrade+0x880/0x880 [ 3435.942708] __should_failslab+0x121/0x190 [ 3435.956262] should_failslab+0x9/0x14 [ 3435.960108] kmem_cache_alloc_trace+0x2cc/0x760 [ 3435.964815] ? apply_wqattrs_prepare+0xfb/0xa30 [ 3435.969692] apply_wqattrs_prepare+0x13b/0xa30 [ 3435.974324] apply_workqueue_attrs_locked+0xcf/0x120 [ 3435.979472] apply_workqueue_attrs+0x31/0x50 [ 3435.983942] __alloc_workqueue_key+0x8b8/0xee0 [ 3435.988568] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 3435.993635] hci_register_dev+0x1c6/0x880 [ 3435.997855] hci_uart_tty_ioctl+0x761/0xaf0 [ 3436.002232] tty_ioctl+0x8b5/0x1510 [ 3436.005879] ? hci_uart_init_work+0x140/0x140 [ 3436.010661] ? tty_vhangup+0x30/0x30 [ 3436.014400] ? mark_held_locks+0x100/0x100 [ 3436.018662] ? debug_smp_processor_id+0x1c/0x20 [ 3436.023553] ? __fget+0x340/0x540 [ 3436.027039] ? __might_sleep+0x95/0x190 [ 3436.031025] ? tty_vhangup+0x30/0x30 [ 3436.034747] do_vfs_ioctl+0xd5f/0x1380 [ 3436.038642] ? selinux_file_ioctl+0x46f/0x5e0 [ 3436.043148] ? selinux_file_ioctl+0x125/0x5e0 [ 3436.047665] ? ioctl_preallocate+0x210/0x210 [ 3436.052094] ? selinux_file_mprotect+0x620/0x620 [ 3436.056878] ? iterate_fd+0x360/0x360 [ 3436.060697] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3436.066254] ? fput+0x128/0x1a0 [ 3436.069552] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3436.075119] ? security_file_ioctl+0x8d/0xc0 [ 3436.079556] ksys_ioctl+0xab/0xd0 [ 3436.083033] __x64_sys_ioctl+0x73/0xb0 [ 3436.086944] do_syscall_64+0xfd/0x620 [ 3436.090773] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3436.095971] RIP: 0033:0x45a639 [ 3436.099170] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3436.118080] RSP: 002b:00007fb43243cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3436.125800] RAX: ffffffffffffffda RBX: 00007fb43243cc90 RCX: 000000000045a639 [ 3436.133072] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3436.140349] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3436.147647] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb43243d6d4 [ 3436.154926] R13: 00000000004c3634 R14: 00000000004d77e8 R15: 0000000000000004 21:01:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x16d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:16 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) [ 3436.275573] Bluetooth: Can't register HCI device 21:01:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x21d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:16 executing program 4: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x800}) syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x9, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xe2, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000100)={0x3, r3}) 21:01:16 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:16 executing program 5 (fault-call:2 fault-nth:6): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:01:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x16e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:17 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:17 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) [ 3436.537588] FAULT_INJECTION: forcing a failure. [ 3436.537588] name failslab, interval 1, probability 0, space 0, times 0 21:01:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x21e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3436.600237] CPU: 1 PID: 20856 Comm: syz-executor.5 Not tainted 4.19.84 #0 [ 3436.607227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3436.616643] Call Trace: [ 3436.619527] dump_stack+0x197/0x210 [ 3436.623157] should_fail.cold+0xa/0x1b [ 3436.627151] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3436.632269] ? lock_downgrade+0x880/0x880 [ 3436.636422] __should_failslab+0x121/0x190 [ 3436.640677] should_failslab+0x9/0x14 [ 3436.644474] kmem_cache_alloc_trace+0x2cc/0x760 [ 3436.649190] apply_wqattrs_prepare+0x1c7/0xa30 [ 3436.653790] apply_workqueue_attrs_locked+0xcf/0x120 [ 3436.658991] apply_workqueue_attrs+0x31/0x50 [ 3436.663409] __alloc_workqueue_key+0x8b8/0xee0 [ 3436.668007] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 3436.673610] hci_register_dev+0x1c6/0x880 [ 3436.677763] hci_uart_tty_ioctl+0x761/0xaf0 [ 3436.682108] tty_ioctl+0x8b5/0x1510 [ 3436.685750] ? hci_uart_init_work+0x140/0x140 [ 3436.690242] ? tty_vhangup+0x30/0x30 [ 3436.693947] ? mark_held_locks+0x100/0x100 [ 3436.698178] ? debug_smp_processor_id+0x1c/0x20 [ 3436.702841] ? __fget+0x340/0x540 [ 3436.706290] ? __might_sleep+0x95/0x190 [ 3436.710262] ? tty_vhangup+0x30/0x30 [ 3436.713978] do_vfs_ioctl+0xd5f/0x1380 [ 3436.717859] ? selinux_file_ioctl+0x46f/0x5e0 [ 3436.722344] ? selinux_file_ioctl+0x125/0x5e0 [ 3436.726832] ? ioctl_preallocate+0x210/0x210 [ 3436.731245] ? selinux_file_mprotect+0x620/0x620 [ 3436.736018] ? iterate_fd+0x360/0x360 [ 3436.739829] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3436.745395] ? fput+0x128/0x1a0 [ 3436.748715] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3436.754302] ? security_file_ioctl+0x8d/0xc0 [ 3436.758755] ksys_ioctl+0xab/0xd0 [ 3436.762216] __x64_sys_ioctl+0x73/0xb0 [ 3436.766095] do_syscall_64+0xfd/0x620 [ 3436.770003] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3436.775226] RIP: 0033:0x45a639 [ 3436.778411] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3436.797310] RSP: 002b:00007fb43243cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3436.805023] RAX: ffffffffffffffda RBX: 00007fb43243cc90 RCX: 000000000045a639 [ 3436.812314] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3436.819574] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3436.826842] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb43243d6d4 [ 3436.834104] R13: 00000000004c3634 R14: 00000000004d77e8 R15: 0000000000000004 21:01:17 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xffffffffffffffff, 0x200000) fadvise64(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mlockall(0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x1, 0x3f, 0x4, 0x9d3b}, 0x8) [ 3436.847096] Bluetooth: Can't register HCI device 21:01:17 executing program 5 (fault-call:2 fault-nth:7): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:01:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x16f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x21f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:17 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x80, 0x2, 0xe, 0x526686c39545b075, "f5d85cf6b34c72c515aa43a23fb8108e4ce86db7914a26a22d26d9e32256b4588bade7c89b9b301d4d311d34c2f00740a9537728f4fbe4bfc9c17fa2fa532b79", "dc9a0fbe1d2d7f37c599e32f0bc4e03ebf31d9c72128e299849fee0ca81b0568", [0x6, 0x4]}) fadvise64(r0, 0x0, 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10) 21:01:17 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:01:17 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:01:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x170, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:18 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x220, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:18 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000780)={0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB='\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB], 0x50}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000001000)="1aafdb517ccb933795b89218e7709e", 0xf}], 0x1, &(0x7f00000010c0)}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x29, 0x37, 0x1, {0x2, 0x1, 0x4, r2, 0xb, '/dev/loop#\x00'}}, 0x29) 21:01:18 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x171, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:18 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:18 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x221, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:18 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:01:18 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x172, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:18 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) r3 = dup3(r1, r2, 0x80000) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000000)={0x0, 0x0, {0x3, 0x3ff, 0x1007, 0x5, 0x15, 0x4, 0x3, 0x3}}) 21:01:18 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:18 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x222, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3439.166666] net_ratelimit: 14 callbacks suppressed [ 3439.166673] protocol 88fb is buggy, dev hsr_slave_0 [ 3439.176741] protocol 88fb is buggy, dev hsr_slave_1 [ 3439.326623] protocol 88fb is buggy, dev hsr_slave_0 [ 3439.331741] protocol 88fb is buggy, dev hsr_slave_1 [ 3439.646717] Bluetooth: hci0: command 0x1003 tx timeout [ 3439.652156] Bluetooth: hci0: sending frame failed (-49) [ 3439.726625] protocol 88fb is buggy, dev hsr_slave_0 [ 3439.731751] protocol 88fb is buggy, dev hsr_slave_1 [ 3439.966648] protocol 88fb is buggy, dev hsr_slave_0 [ 3439.971835] protocol 88fb is buggy, dev hsr_slave_1 [ 3439.977058] protocol 88fb is buggy, dev hsr_slave_0 [ 3439.982271] protocol 88fb is buggy, dev hsr_slave_1 [ 3441.726702] Bluetooth: hci0: command 0x1001 tx timeout [ 3441.732137] Bluetooth: hci0: sending frame failed (-49) [ 3443.806685] Bluetooth: hci0: command 0x1009 tx timeout [ 3445.406693] net_ratelimit: 20 callbacks suppressed [ 3445.411726] protocol 88fb is buggy, dev hsr_slave_0 [ 3445.416893] protocol 88fb is buggy, dev hsr_slave_1 [ 3445.566739] protocol 88fb is buggy, dev hsr_slave_0 [ 3445.571902] protocol 88fb is buggy, dev hsr_slave_1 [ 3445.966675] protocol 88fb is buggy, dev hsr_slave_0 [ 3445.971814] protocol 88fb is buggy, dev hsr_slave_1 [ 3446.206704] protocol 88fb is buggy, dev hsr_slave_0 [ 3446.211826] protocol 88fb is buggy, dev hsr_slave_1 [ 3446.216956] protocol 88fb is buggy, dev hsr_slave_0 [ 3446.222024] protocol 88fb is buggy, dev hsr_slave_1 21:01:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x2, 0x1) 21:01:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x173, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:28 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4400, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 21:01:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x223, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:28 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x174, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:28 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x224, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x4b47, 0x1) 21:01:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r2, r1) r3 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\\1keyring\x00', r1) r4 = add_key$keyring(&(0x7f0000000400)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r5, r4) keyctl$reject(0x13, r3, 0x3, 0x4, r5) r6 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="e89d3c103260746f0806e8db37492843f92f485647f511ba0becd2ce65024d226436b179c606e941ed918a0a9bb56e7437c41e4a3e6f4983f7fbee401777992edcc8112709138d31c7fc22714d9d8b7d85d4ee9a82d623cca34830da319ec49f7455af50ba83e5929ab725a83ad8efe2fdca51ed061ad972ec373e199677de50bc81fc1fd5111ad616ee03a338673d8d830da94561ea16499e09ec6636213f2e5eaeffce80dad5cdb95388b18d94dee3f7ad311eaf96855063955f8518ca326b0599f20dbe45bbe0ebfc483b771da23c2565dbf04bc739db85aa38b04a29a9d52ec5c466d75586861f10fbcd2f", 0xed, r5) keyctl$KEYCTL_PKEY_QUERY(0x18, r6, 0x0, &(0x7f0000000180)='/dev/loop#\x00', &(0x7f00000001c0)) fadvise64(r0, 0x0, 0x0, 0x0) 21:01:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x175, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x4b49, 0x1) 21:01:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x225, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:29 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:29 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:29 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x3b3840, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000001c0)=""/68) splice(r0, &(0x7f0000000000)=0x18, r1, &(0x7f0000000080)=0x3f, 0x8001, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r3, &(0x7f0000000380)="29999a4660d87ece878ed65e2b15283b429a84bc035f46d73d05c779d6f09022f87a080127675dcedcf92b4424a19204638d23ccaede6ffed80e127331c7e7c952e68310101c50378dcc031b3da608aa2240de215c6c10604913d6a459081a3fb2dfb8e7c389c5a4475e02c3584b381ebfa827551309148789d71819add1f92649f617457f243c8bab092feaae52c187ed4c6d009ae40155064dfc5f9ae0ef11e9d99f7d96a545cb7d7202b9c565f0a9959837a9c35d89678fa8f758934bed90cb9215dd9593ca886b1734ff579e42ffd87cf18f74b31f4b0d70c8ffba5fcf3debfc6e9441f7a636e73b543947df4d61067d84", &(0x7f0000000480)=""/59}, 0x20) r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r4, 0x0, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000240), &(0x7f0000000500)=0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x200, 0x16800) ioctl$VIDIOC_G_INPUT(r9, 0x80045626, &(0x7f0000000340)) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f00000000c0)="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") 21:01:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x226, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x176, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5409, 0x1) 21:01:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540b, 0x1) 21:01:29 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x2}, &(0x7f0000000180)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x5, 0x200, 0x820c, 0x2, 0x3, 0x400, 0x2, 0x7, r3}, &(0x7f0000000200)=0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f00000002c0)={0x330dfdcd, 0x0, 0xfff, 0x3}, 0x10) r8 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) fadvise64(r0, 0x0, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) symlinkat(&(0x7f0000000000)='./file0\x00', r10, &(0x7f0000000040)='./file0\x00') 21:01:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x177, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x227, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:29 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540c, 0x1) 21:01:30 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:30 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x2, r1}) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r2, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [], 0x5, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) 21:01:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x228, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x178, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:30 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff) 21:01:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540d, 0x1) 21:01:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540e, 0x1) 21:01:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$UHID_CREATE2(r1, &(0x7f0000000000)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x2a, 0x0, 0xec, 0x4, 0x80, 0x9, "fef1af472cd783f17e05b6e4e98b7de1e8a2dbf8ade3e7202251ac977c176aa005d587f952d34db9e359"}, 0x142) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x762003) fadvise64(r2, 0x0, 0x0, 0x0) 21:01:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540f, 0x1) 21:01:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x179, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x229, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:31 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff) 21:01:31 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x80, 0x1, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80800, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x7, 0x80000000, 0xa30da36ae96e58c8, 0x2, 0x7, 0x5, 0x2, 0x9, 0xffffffff, 0x31a4, 0x81, 0x5, 0xfffffff7, 0x20, 0x4, 0x20}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x5, 0x1, 0x3, 0x3}, {0x1, 0x7, 0x3f, 0x2000000}, {0x3, 0xfb, 0x3f, 0x5}, {0x200, 0x0, 0x8, 0x1}]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) 21:01:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5410, 0x1) 21:01:31 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff) 21:01:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x22a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x17a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5412, 0x1) 21:01:31 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffff) 21:01:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x17b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x22b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:32 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000000)=0x9) fadvise64(r0, 0x0, 0x0, 0x0) 21:01:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5413, 0x1) 21:01:32 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:32 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffff) [ 3451.646638] net_ratelimit: 20 callbacks suppressed [ 3451.646647] protocol 88fb is buggy, dev hsr_slave_0 [ 3451.656769] protocol 88fb is buggy, dev hsr_slave_1 21:01:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x22c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:32 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000000)={r2, 0x800}) prctl$PR_SET_DUMPABLE(0x4, 0x2) fadvise64(r0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x1, 0xfe) r4 = accept(0xffffffffffffffff, &(0x7f0000000180)=@x25={0x9, @remote}, &(0x7f0000000200)=0x80) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'ifb0\x00', 0x1}, 0x18) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x3, 0xa7}, {0x1579, 0x1}], r5}, 0x18, 0x1) [ 3451.806625] protocol 88fb is buggy, dev hsr_slave_0 [ 3451.811827] protocol 88fb is buggy, dev hsr_slave_1 21:01:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x17c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5414, 0x1) 21:01:32 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffff) 21:01:32 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x22d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:32 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x0) [ 3452.208384] protocol 88fb is buggy, dev hsr_slave_0 [ 3452.214842] protocol 88fb is buggy, dev hsr_slave_1 21:01:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000000)) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000040)={0xb7, 0x6}) fadvise64(r2, 0x0, 0x0, 0x0) 21:01:32 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x22e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5415, 0x1) 21:01:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x17d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3452.446637] protocol 88fb is buggy, dev hsr_slave_0 [ 3452.451844] protocol 88fb is buggy, dev hsr_slave_1 [ 3452.457052] protocol 88fb is buggy, dev hsr_slave_0 [ 3452.462113] protocol 88fb is buggy, dev hsr_slave_1 21:01:33 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r1, 0x4) fadvise64(r0, 0x0, 0x0, 0x0) 21:01:33 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x0) 21:01:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x22f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x17e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5416, 0x1) 21:01:33 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x0) 21:01:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x230, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:33 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x17f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:33 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000ac000000ac0000000b000000030000000000000100000000380071010000000000000003000000000100000004000000010000000d000000080000060400000007000000060000000f000000b393000007020f000040000000030000000500000003000000010100000e0000000300000009000000040000060400000402000000000000000c000000070000000f000000fbffffff080000ff000000800e0000000000000b03000000005f5f00005f61db5f6100"/207], &(0x7f0000000100)=""/75, 0xcf, 0x4b, 0x3}, 0x20) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/67}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) 21:01:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x231, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5418, 0x1) 21:01:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x180, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:33 executing program 3 (fault-call:11 fault-nth:0): r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:34 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) [ 3453.400368] FAULT_INJECTION: forcing a failure. [ 3453.400368] name failslab, interval 1, probability 0, space 0, times 0 [ 3453.500641] CPU: 1 PID: 22421 Comm: syz-executor.3 Not tainted 4.19.84 #0 [ 3453.507641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3453.517012] Call Trace: [ 3453.519627] dump_stack+0x197/0x210 [ 3453.523292] should_fail.cold+0xa/0x1b [ 3453.527201] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3453.532330] ? lock_downgrade+0x880/0x880 [ 3453.536501] __should_failslab+0x121/0x190 [ 3453.540752] should_failslab+0x9/0x14 [ 3453.544561] kmem_cache_alloc_trace+0x2cc/0x760 [ 3453.549277] alloc_pipe_info+0xb9/0x430 [ 3453.553264] ? __might_sleep+0x95/0x190 [ 3453.557284] splice_direct_to_actor+0x6bb/0x890 [ 3453.562052] ? avc_policy_seqno+0xd/0x70 [ 3453.566134] ? generic_pipe_buf_nosteal+0x10/0x10 [ 3453.570988] ? selinux_file_permission+0x92/0x550 [ 3453.575842] ? do_splice_to+0x180/0x180 [ 3453.579834] ? security_file_permission+0x89/0x230 [ 3453.584779] ? rw_verify_area+0x118/0x360 [ 3453.588946] do_splice_direct+0x1da/0x2a0 [ 3453.593119] ? splice_direct_to_actor+0x890/0x890 [ 3453.597976] ? security_file_permission+0x89/0x230 [ 3453.602928] ? rw_verify_area+0x118/0x360 [ 3453.607091] do_sendfile+0x597/0xce0 [ 3453.610825] ? do_compat_pwritev64+0x1c0/0x1c0 [ 3453.615506] ? fput+0x128/0x1a0 [ 3453.618799] __x64_sys_sendfile64+0x1dd/0x220 [ 3453.623303] ? __ia32_sys_sendfile+0x230/0x230 [ 3453.628220] ? do_syscall_64+0x26/0x620 [ 3453.632342] ? lockdep_hardirqs_on+0x415/0x5d0 [ 3453.636943] ? trace_hardirqs_on+0x67/0x220 [ 3453.641285] do_syscall_64+0xfd/0x620 [ 3453.645110] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3453.650311] RIP: 0033:0x45a639 [ 3453.653517] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3453.672514] RSP: 002b:00007f9c7efcec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3453.680235] RAX: ffffffffffffffda RBX: 00007f9c7efcec90 RCX: 000000000045a639 [ 3453.687507] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 21:01:34 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop4\x00', 0x4, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) [ 3453.694784] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3453.702072] R10: 000000000007ffff R11: 0000000000000246 R12: 00007f9c7efcf6d4 [ 3453.709435] R13: 00000000004c83bf R14: 00000000004de7f0 R15: 0000000000000008 21:01:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x232, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:34 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x181, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x541b, 0x1) 21:01:34 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) gettid() r1 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:01:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/240) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000080)=0x9) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='\x0f\xbb=d_\xd0\xc0\x9739\xd6\x00', 0x105800, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x5) fadvise64(r2, 0x0, 0x0, 0x0) 21:01:34 executing program 3 (fault-call:11 fault-nth:1): r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x541d, 0x1) 21:01:34 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x182, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x233, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x541f, 0x1) 21:01:34 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x183, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:34 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/devL\x00', 0x8, 0x2000) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0xd}, 0x200}}, 0x4, 0x4, 0x9, 0x4, 0xfffff801}, &(0x7f0000001480)=0x98) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000014c0)=@assoc_id=0x0, &(0x7f0000001500)=0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000001540)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xffffff38, 0xbc3, 0x6, 0x8, 0x3}, &(0x7f0000001600)=0x98) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000000c0)={r8, @in={{0x2, 0x0, @empty}}, 0x699}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000003e40)=@assoc_value={0x0}, &(0x7f0000003e80)=0x8) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) r13 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r13, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x1f, &(0x7f00000000c0)={r14, @in={{0x2, 0x0, @empty}}, 0x699}, 0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000004500)={r14, 0x7ff}, &(0x7f0000004540)=0x8) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) r17 = fcntl$dupfd(r16, 0x0, r16) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r18) r19 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r19, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r19, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="01001000", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r18, 0x84, 0x1f, &(0x7f00000000c0)={r20, @in={{0x2, 0x0, @empty}}, 0x699}, 0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r17, 0x84, 0x9, &(0x7f0000004580)={r20, @in6={{0xa, 0x4e20, 0xc6, @loopback, 0x5}}, 0x5, 0x1f, 0xfffffffa, 0x0, 0x4}, &(0x7f0000004640)=0x98) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r22) r23 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r23, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r23, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r22, 0x84, 0x1f, &(0x7f00000000c0)={r24, @in={{0x2, 0x0, @empty}}, 0x699}, 0x90) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r25) r26 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r26, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r26, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r25, 0x84, 0x1f, &(0x7f00000000c0)={r27, @in={{0x2, 0x0, @empty}}, 0x699}, 0x90) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r28) r29 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r29, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r29, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r28, 0x84, 0x1f, &(0x7f00000000c0)={r30, @in={{0x2, 0x0, @empty}}, 0x699}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000004f80)={r30, @in6={{0xa, 0x4e22, 0x7, @ipv4={[], [], @empty}, 0x8}}, 0x80, 0x6, 0x4, 0x3, 0x48}, &(0x7f0000005040)=0x98) sendmmsg$inet_sctp(r2, &(0x7f0000005140)=[{&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000180)="4280aca377edbfac85db7d5e28a32f461084ca91481ff959cbe8cd7ffedb4059645906ffebd9008b4560468445a2de0f06e7fa7c801db6701c18359d6bf8e1b23e28e85846949781b6d587c55ffb488c5a", 0x51}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="4f9c693c91a801a097f6805ca6e841b88de746c2de0018975d007aa82789cfb8137be9a7a55937c25f8d044becf9b7c02795cf0d01d776b7c28baea001a8ad60b9f8f9627a547efb31ae61525f367e03b1447ccdc9e761d789f4abff94813a8041970b59dad207ba572c7dd6033fd074d7d9a3add34690b9dae7c99a6f821df3a3ed7e480b8e0a19dc9df46b1d963d09afff0a1d2356d12dfd35d9c4145df8d5627bb93a47eaa71c9cf2bb926f91fcb2baf6bb5be611b91efa3d564600dcce5e8a366b3371d3", 0xc6}, {&(0x7f0000000200)="f18e21c28025ca0cdb0da2b55d53f2d43e643b5f23ae", 0x16}], 0x4, &(0x7f0000001640)=[@sndinfo={0x20, 0x84, 0x2, {0x8, 0x1, 0x3f, 0x6, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x10, 0xb61a, 0x4, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @sndrcv={0x30, 0x84, 0x1, {0x8001, 0x2, 0x8000, 0x0, 0x8040000, 0x2, 0xc36, 0xa0, r5}}], 0xb0, 0x1}, {&(0x7f0000001700)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000001740)="6459dab6292a4675837efa475d4befa6bdf8c1c01e952d605d2de3b83b70286b9fdd8afa5d9ecd2a19a51ed4e834a07227ae8b4aa8e69f8e802fa42157fbcb5bde2ea2e694c35449f7dc35d1b7bff5bcd7190031223abc58f05980f14c937b5e6e0516a9f1340e7b268588b6b4a5c2ce3a58c062e60acb1458f1c0f69ed5f36786987d9f89a5bb85f38bb1030d062338ae3e2b75d2e3cf7e3c80809f18a4b6c79aca34245378ffbb", 0xa8}, {&(0x7f0000001800)="0de29ee48fade918a4523d19db84f98089dea6bbc012ff9466d53a03bc525d8eff139ddb7a3deb9771307009936ae8ae12fea6ab16fffb1ef453de9439f62b55acf3e3e75b22623057d27660d3c591f1258f737170fa3cdcc88408", 0x5b}, {&(0x7f0000001880)="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", 0xfb}], 0x3, &(0x7f00000019c0)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x5}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0xc}}, @init={0x18, 0x84, 0x0, {0x400, 0x8, 0x4, 0x8001}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xfffffffb}}], 0x80, 0x40000}, {&(0x7f0000001a40)=@in6={0xa, 0x4e21, 0x9, @empty, 0x3}, 0x1c, &(0x7f0000003dc0)=[{&(0x7f0000001a80)="845a43d1011133108cf1de9fbc1384db1c68fe76550bf474424a9f17985fe8c614499dc976bae73d4d23957168425e2c250945d3e940d085dfaa5fcd37d65948917d0d8a2a829ec7eec10f58876da5f652ef3e3e2efecb2627801d75e863761f96cbc0c5e01fc4d1024cf652380cacae114a2319c4ffea46fbbcda3faa1306c9aa02c229991b02200288fc78209e5c6f8818141576678790d2d248", 0x9b}, {&(0x7f0000001b40)="a0e289be200c3fe6c8a8d9384f65e3d511960c2bb30db1270f2bd4d9a79edc4ab062f29615a3d50233c501cc717ad575fce75e3f", 0x34}, {&(0x7f0000001b80)="f67ee4", 0x3}, {&(0x7f0000001bc0)="fc6b1564d904264888c4f7567fb705ef1749113d565c965425a98cccc6e9086c3690ad8ad49112d5557fc91056", 0x2d}, {&(0x7f0000001c00)="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", 0x1000}, {&(0x7f0000002c00)="469a2834951a9e35de363375f5ab43f2feefd7af71bea7f6ceb0d05598dbee32310912195847b901a79dde4bcc0b88a4a56e83d4fe4b7cc96e2290c51a0fd1be2f5296e0a4f571ce3c41cc29bf64023d334b36f5582c636622f5d0a65bcd2cd5a27e56f3136b4c2151077b4566f3d2e53291ce50da6597221c850b1da838246fa0983205a640e7c8101452020f9ea3ddd6bb99b66b13ad47db161ec4989f178fb1af33c2b1b34b9b3b3815f3a80eefa74d0cae13bfefc8b72e9359", 0xbb}, {&(0x7f0000002cc0)="5ee21efb54a14a70e65a63f6d57f6980ca6db1cc48d4fb3d4563982b57a20eae2b880e58a313eb955a1a468a30c22cb69e0ec37e7b8dcffa879058c39c8bf9d1c03321562ec119ee025075760226899e04107f885843f5a69f07880a3d3d41fafcf78740361a8cc6350b9e37dcd348bfe312807cf82ab7067323cd5b63f79e6568de69777f212451960d436bbfad2f62ce06aed49ae9f308e0c121d4ba3a044c424f8039a49563353dd299bfd598d7a4cf853cd583e841229e11124c07c9e05ff0b09a6120511e9c34b2eb6cc18efb84f182aa5ebd73cca1782d38a4ccd21174cf18a25b7b4dd0edac3c889f8015e68e1d5de0403e30d815b5bf58d061df2c56ef00ecec6ffdd3991dc0956d364466fcab95568878f25021d4e80a3d3844701ea8fdf0046fd1cee28caf2a0e22f0843d31bb1d67e94c2c1159a758fe905000f0519cc80388230d7e83de013bc0563738952e47ed4426de6901b77fa9e83d185a0049209499eb8dab50dfb3098d88f0413e25354a9fdd2c1ec729f31589936bd5f7d8e992451dd1c8c3184faa874da22d3b144d11d2cf1ce64ef5ff6711a83cc41e15a1d7092f03913dbef85549afe6473f413f58e916540a2c0c826a156d74c5d6008f4feedc2ffa2446aff098d4d46903961f1d351f9c9a65a2d57c32dc9dcd4321d4413e61693e70b56f05ce8b3613b10263d950d47a3454cf315845dbe21363c0dc3734519c253607c7d415c8d2fe3b2292ba3d49636abc3945a08ade7c8b6c4c2e888d1e3338eae5fd5c4047e213fc7fb989badbe57c2a68c649d3ba8f9ccce36a51299bff77ac95e06df1395eef979fa877174712d535b1715bf2fc62951ab4299c8e8f96c5c365ae542852bde3c8b21568699429d30ee90b0aac9c361cc94d7ed95e8b7386380db323d8b5490ae4bb57651f151858581bdcec35801f63615d6a7bd3ebbd1e36c36c018e9a4740d59d9df91affd5a398c6c935928aa9e23fc681767275dc8915ca435f3e5e2d58d8577d8779a6e2a21ef2a112e836393d476d0d9e3f5a7133a8a80e9529613f6cd3f2f66e2a326a4900918a293fd2d87963323c086fb309b706ed8f06f11d80b298a0955f1f75733a364953ce9df627c3afd583b20b5be5981da7a5072f86636e0d17abecfc5ac0ac662289ca2e51bbb22b9fdb34d78bc891b8b207465eb948adf9ad24a88102b0b5360566424c1e8f4eef848c1875eae03095ca1ea89f59f90e2a713ca18fdfb06baecea3e699987165e0b8b7853a3877b68339f82dfa30d968d7e7b467258a9ccd2d900b4473d9a59ba6acbedf882d939b3659579c426cb9b492a94aafa1b255bfd6b56c553ea7f4488af53137e5a8aa26824cd056bd83cbe808741021539e94a3b309e0ccf2a9332530c2e9c2a54b6ea5bb6d9c28608b647551947fe06d5b41bf29a7101f3d65265d8174c9ff9d2ec4a808f8e7d3d9251a17baa28b261ec3be35c38858a47465e357b228ef843c4e709881e539eba3725f2b59cff3b9d2a8f64b3af323d8e3cc53a68fe158ea4d65983061d527575565656db58f782b0852bf1d61ea0b4c2241ccac6ed5e458fa1d27e7bcfdd97c0a1f1ccb70813ec962d9559c69db6ba9871ce5655a58f9c9c0c2189a50ac2ae32d7bab6de59a4271601fb4a11e4a83cbe88acda64c4238de03240249620dfefd7dd2c83d3b4f24d6279a02c84da8b44a99a402d368bc45d93e38771824840a95a7fc8bbcfba05e9bcb0e7bb90f8d567cf2f49f9536874e6facc724ccb1662db9823cb417e0882709d7bda3c6c19859d2a980efc5d2bc1052cb2b7a778295a99fba85a6fbfa1f6de4fe73d15d6ed22d795e820859dd3c19fd9bfb4dd30007e89602a2bdbbae30af692a1ef18e8a22f82222dcafa799676d331343db9ff449884d3922392698854f831cb8af98c2ebff662a2edec8a0f298e8df1209c50af1f1fc6aa2f3654c043504ce6e585d300fcc777232e3cca0f3344924477173440fe29a2fea8af27d0644f523816e7ebdd9765934e92ed70dc0ce1afc29b06d542590e2843138c75370ebbae0b3d9394ec9504b1b0d21b8c1c76899c007ca98936b5054a493b22c44a55ed4b9efa326e6c76aa32d18626c75b22598d343c5fff307bb51adcc5d777deaef73fa4994525dbcaba19228d85bc49f67af366b59da2019349b3f6235816f1d6bb20420ea502defeae846aecd30f12c56538ca99954a93f28ebfd2a6b10ceee5d6c9c309f00dce1d4da3f36c7ee7e97f354b498c4acfb264b59ad8651013c1847db8e540205470468c6b35f80ba9b6285edb2e160b891a9bfd88c4445996b2b18b7ab9d48cd4e629565624df9a68d3b8871533e06d9436afb6fe9d25e3c9b94ac06f21b93ac6768e7c667829119d4d6f0925bbcb1d054e431ccbf9956e46785ecd76cbb4612575f72b32351dda69c38c9e5d8089a953628455a6a38d8913a0090ca7316a43474fe14d77089f90d853e6e1e97d18af4d211aa981fd9864706b82486b788e5e34976d2a3db7a72a9b9b6c9f297fc92f7605bba28735b6513abe8758e4a3933a683d563ce4041369d3db4f7a9ea7c390ed4378492e4d16bc9d14fc722610863a9e200bb1bdf9dc0a1971c5d0a34c1fc5167099a5617f44da876a5a1cb12575f864455f8f4d99d4c24be4c6a130609cc859af0a3224b5a5a7ada09468460843ecf8abf231d5b949d22d58429b4b3f87148d436f898082008a8d63da4b39044cc90fc3c8c1d4c997af7a409c7c04aceba87f5efb521e9a0a92a9f24590d4b0a5574bb544b5bfa9d62f7d6006ecce975815103495cdc5617b72aaad23c97533166cba503a0b88d4d0478856f4ab512e48ae944579944c2fa7c7613ca3492a0065047ce486bdf824db19308d4d221b068f63909da5857d41441c61aa470aaa57135e1c0b0a6d535951427da1382369615d2c612d3290861f26e7a439b89b0998ea220d63fdbb2ab463ee17bf6e79b65270756b19d5268e73d143d8c868f5754c9145a0d12aa2c7eef4f1148de55d8366c327f9f79f037570f1ebb4229fe6e34f15afa7485d9ead1198b4ba7305cd32dfad8e80eb2aa2148c6a56c1132f1c5e453f94e29a81138cecf0e873fc992594c54f1c8b647953aa39e9bb60febe456154cd3018b5eb66980695b458c24110ceeabc2e61d7a2dd7a03f36ce22eeb7196a3143cfb499aebe2950bd4465334390d6590aa936a073898beb8a9f0d32763cd0a591f1522b1d00c65414504c035d8f4f51d6a52cff142a79d8321919f4ac3fddf77a4e997b8d7ca9b2badefee48949b340076c0a050b110d0d264e276bddf64d3b4946c527ab99915a00f4b9b2ba20822382743281d7fa8c318e449a9f7d9e234a0b50cd84412ee25ae6cdf456782754e6c074b6c73a1e87e403fafabd6d9f116912b555034831798dad5c6f39d3e9eb6dff2f32f917bebc3de25c9b6e52bedc91a4bbe8c9ce8abe08683d886e3d2686e1a46058c3fe282c1c78852ce194a4b0abda361daf3c6fd7efc3590379ffeb5fe2d26ef22f8102c3dbe4354ed3a872902c7b4ca54198886c3e620c534ba26b12db7a1705ad31b7de32f894820ae7d4d4a3e907e5c2bdbf2305e32fa8d4f3c00a8b2c86e1074d06a1707eb474a610a999a4c692f9775b0fc8dcd0081987c095b55e497e97f558e49360dc65b13b7cdd7a190cac6faabd985f1186acbe7221efdad7258e9d5e6b6e940dd013bfed445a27d36a50bd9d6059483ec596196cc12e071a84142a25dc16422420017265001e9889c880255d9d70b39b0cdd0d7df404b4e33025897e0baa23e708f0f7f9ea6c778d8dd66e0dacc305fa1f5e53820ab8e5e3e756583a32b5c7d246f4c317c691ef9a3bb27203f07d187c2ec06482b9ca10e32b7ab00ee7937ef6aa058302e833dcbadc47f3cc1a521b4e278b65aba7d66c691489ff5062e14f11aa733f441187be0c29a3c017e60086edb9385e14633329c66ba04e7bfd615dbebcf21b8d2a080dde8cb8e49771cd70fdb50bd885b2ff555c8be30d264ffb4effaaf2f7d1a12ac7f82dfd1846b3823450a54299f4cb523685c3424de2344884eab194df34aef2956bc977babb5f32c2a95e1d171d7c94acfd79964fd2c8da327a57de8ac5ab9e2682681d90b8a285c8fd031fe5fcaeb35f9ff6d286316faa7edaea3449eb73413ffe2af64c34189d0424dbc1a2b21a6c90f902c057460838f4933eb9fed0212e03f034b5da9a681510aea03b4b3c3e1a78af0ff27aad2177611b77287ed121cb342399807df83f60212c521a3f57ebd3a0dce90f400b8ad690feaac2fab86983681124fd53cdda20eab74e32e17c6b9768636c8267bf40131cff72e619f2b814df04fc894f8bead4502018bf6c1a798aebdf4c7fe8669934a8543204df81f8432bd0a93024a6afbb3ab00bfd3e9a3cb406411033ab4afd92b52ce5274c80c9a0f5208ca8050ba2574e67195a68d2f5b97dc2f2aa7f07c201a2415dd2c328c61638728f730eabe191b6038270664b5b61fc6f00ff13e99c35e5a562b45b62d928cd6b4c657d44cacebc0587a9a66bdb4e19648cc854b8a2adabd5389aafe70d4140fa49bf5db8a05076b92a5726bfff284887055fdbb6b0ab3a30b012a04b5bd7a44030354f171dd5136df985a673d5d6ae654822ff88a263472a1c4a1329c463612eb2571decce8fd1b05cfd4404714e6650677d378683a2f231ac124aa80d5a32a415de85573c588f4ac0d668d3bdc9f80a7eac97361f69cafb269cc2554d5644c827404b02b8b582cfdf98af865864ad3f5aa8818787ffcde4234b424f21fbc030e5d04b914a847f6e65433bb0b3f26661c0db24026c00160a5a35e793db02970a7bd742f0d432fe584c365876271b72c4569d9a5da72f9061f57942077622592a6d1945c76bd1868ae7fca927b410ae90ad9a48b18d4eb96e9966dd545d70bae3dc4783b4ea655609f350b82b7bb93eb99199922692d3cace98b51dd25d25aab0a595177d3b79a83d4f950f4fffba779a13b766bec29cb0fea2437019b415d5d95b95571726a78723ecbefc2d96545c64ee099d2525c3230f695bce6632743f9b054117a09b9351936cf74f89c386094296908ba6cf9e7406733ea88a9ef2ed918bfba5d79640951d1665f4ae29ee322dd7674bd5d949b32d92d9511809c076d23dae765ca771b61b1705c7ade7895e2cb24d8f8ba46783f1557e36f4c492f663ea0f660fd7bc212fcac74f601ec6e1e48a633ddc247d87305c2cb750ba53ec1bf57b434919e1e09c5f33137ebc7c64695d1863425920fd6bb2347c72c7aa303a39b3a5eb09dbb6d3c80238d20eda33ac8e5b4e46b58da6b3dbb6787e41b42cce2c9f4473b749d64d3ffe0078335994abafb97eb4b2211e0bf1aaf8e977cd26c40091fb308d7fa137a748ae4b68ce7a62a1b04dfac4d17dc0be9ba6096ed64fa6244cc23e769c7d4d678f1acd8f7bfc44fae0f8c84bd5c401a60d43ab6167c73a77e5a7a97ce30c6e8b1ab17d614d5735b38a84483ade6bb2672a8eb8118b1ce585f4541a65aaf9102bd6dec2677010dd4f7534fafe9aa3632e62aed508192d740b37a5cbe433b243c8bd51f4bebd9d741082468578a2b847cb8d1c9cb6628e0824d566f691a74d66c90bb210b5679346c47602ca48e6c604e7a28235797dac4a39a8a9adc6d88f63aeeee430642e0bf0165db511eb20e61108af9514d5a6e5ae84d04b2278b3e5f3ea332da099b478836bc6fdeca347abcbc78106769b8c8301c4f580ea8539ac05079a", 0x1000}, {&(0x7f0000003cc0)="255dd45e4943887f47ed3b9e859c0bbc22b156a92564385f1bda701076c721c3ad90e13fb6725411406a1502856277f33a2ba1da125d3341f4131397b55c4366d802dbf1dea46a462ce1aeb1fc3366933626b3cb0ba1aaefc20157706457250d6eef0bef231a7add88ba636bf93d1136a60b151f6715d08d4f2d0f5b7eeb715b125cc30497de7469583a26817048efe6ab4e2870b559dcc60ebfceadc03b468be990667070ab3f4045d5df401a23bcd12b39d0f43ad2aa3cff02de0aaf506abed8aa5f97c9344e1549cae4e1e4e3a9c35a91f6007c6d8dce0d4fb0d85810b3dab78a6f11c2ac70a0ffe4411fa283e7f385cf6dfeae1016cd83", 0xf9}], 0x8, &(0x7f0000003ec0)=[@sndinfo={0x20, 0x84, 0x2, {0x200, 0x200, 0x0, 0x80000001, r8}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0xa}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0xa, 0x0, 0x1000, r9}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr="64118590893316b3de9dfcd33b38f981"}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @init={0x18, 0x84, 0x0, {0x2, 0x1, 0x3ff, 0x4}}], 0xf0}, {&(0x7f0000003fc0)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000040c0)=[{&(0x7f0000004000)="0a7e346c4011df486bb8ec39c23398c3fc84a63542ce52fe937d9224eb7179ab3667bbe22c7594e3f6f9b0a3e6ce30978af372d9b58bb4d6f990e3221aa26f9fa91b606bc359e62e975ca9938f1cd1cf0879586a1aecc6d05451e040a2d206e78e5f7a5cae0ee986029bdbf77a2c2847fc7b5564b7caa29c00b7dbeab278c86679d1fd1a", 0x84}], 0x1, &(0x7f0000004100)=[@prinfo={0x18, 0x84, 0x5, {0x48, 0xff}}, @init={0x18, 0x84, 0x0, {0x4, 0xfff, 0x0, 0x3}}, @authinfo={0x18, 0x84, 0x6, {0x41c}}], 0x48, 0x10}, {&(0x7f0000004180)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000044c0)=[{&(0x7f00000041c0)="15db72871126460b2a92d0eadfed24a5ac6c8e85e78228e70cd5eaa9e3fb59da09ee112467f3d1a689616729c05ce941362f0d616c311018655cbac100850796d5ad067a3692045638fd9e23121a2cf5fa3bf9916b07cb065424cd0a29856f43dd49293d68c6321d32349d26040302f14d08026cec8109c1ed44fd573eb810651e5ef3", 0x83}, {&(0x7f0000004280)="aac6ca6d8048bb1af34a736804fd8043b2f6dce81892a5e3a555f6a0873101b6d8c72a79bb677491556b51c9fc72e10f8a0d6221247d07674687aaf50ada7ce79983bdc03a2aa484d8d9cf8ee5e855957b92fdf97cce90bca1a5e863d9aacd3f51fd2c089d846b5634e003b2d3b9d21c956c2df7aa2f3f6d61f6f5d539fd989217946422df5290a6e4e42ac418a02427f54aee383230ab6f3eb366edf7ba2a046591ac246f1746da2110dc6528c77c18375e6b5cb3a2c69631490b849345748a4159faca412615b0e46ca75b3e90ae4c45e3f434d1d95b0c9cf849", 0xdb}, {&(0x7f0000004380)="d159073cc2d21851f061207b6ae992818363512b1edfcb51f47339e332368fabae6fab5de5724e7b8cabf8214466c9ab8fc09ede5e8e6a05eef05cc19c72fc8190a42f", 0x43}, {&(0x7f0000004400)="1f7f4e87101aeada9781e1a59ca7f7c204afda4e46e02028c28c55032a2d7c02ca40dd722b9f6dd88d66840f76b5558dc8b3830e9fc5a0a0e336c995384d99e587db49ec6baf8e6f657485c4b97d26730519d9d00efe829fb38a95bccf0d3494717b2c591e829f8dbff1e36d5bd501755ee8de8c2fca5062ecff516f86d4e4648b3b129e720a5c2a", 0x88}], 0x4, &(0x7f0000004680)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x7fff}}, @init={0x18, 0x84, 0x0, {0x5, 0xffff, 0x40, 0xfff}}, @authinfo={0x18, 0x84, 0x6, {0x8001}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0xfff9, 0x200, 0x6, 0x2, 0x1, 0x1000, 0xffff, r15}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x18c}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x81, 0x8, 0x1, 0x7fff, 0x20, 0x5, 0x2, r21}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xe10}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x3, 0xf70b, 0xd8, r24}}], 0xf8, 0x4008080}, {&(0x7f0000004780)=@in6={0xa, 0x4e24, 0xf368, @mcast1, 0x2}, 0x1c, &(0x7f0000004ec0)=[{&(0x7f00000047c0)="4d444c564aa4a049781c8ccbb298ad01597ee92ba4311e76b8bb7dc42886ea792d6f55d8da47c6926cf011e186caaa897ab4e37989014ec1d800dd50d2e78590b57d0e82bc6c078a6afa2b47609d163289030261483f0c64e421ba020c4b4a87fd18f9aee58ca757010b0e160f2f10311dc4a1596e6aa83d691cfc0697", 0x7d}, {&(0x7f0000004840)="e660766a952f521683d08a0fbd788f9ab67e789df1d782cd0216fdd1b4660dcd", 0x20}, {&(0x7f0000004880)="00d0a424a38e08f3f176a47b51806b64438d7d8ef6217f320255c69d0bf2fe065d92c5c0f2acf4d0b23258e26a3399ab54f4ff1b81e4291ea5f43c6e7f39505f4e66718f5dab414d1ded3da82eada739869eb2df0377ab94217140f07d6fa2e2cfde7183adab0c04ddbaad79da16e1be6ac3eefac9afa965743eeb58712d4168a8d5827a6c687dd43c6462f95814905b647c5b828b684d514b428271f8c6ab44b6d0b37ad0cb79eff00ec7be8d4e20d0cf3d65fce8675af43a3e7113f1e8a0d7148c4edb0e8f69123f13ab289179ac1a38b8097cab67", 0xd6}, {&(0x7f0000004980)="0e26f14548a2c2d36b1bc9036159a0976311416265ef39065d09d781c7f4b599880c77182ce8134900584219353526c2039df4913d16177677fffea7f94d7dab352dd535c10eb31fe344412c1f44e498e61250094bfbe3105320fd73a9a05607a61df4437f62041a6b83305b7c929c2c6b0014202117560d2be9a84099ca146db4d00088412c9044afe06b636c7ae4df4cd78692f6831150616a1379c8cbe1017b56eca4a5051eb458395360d9daa79acab427ea569c5a9604d9cede89a91ab03cefd9977c1a7349f328885d90068569", 0xd0}, {&(0x7f0000004a80)="797741c29b11ba713774e55a7b9c5a450bd19b771a74deaf7504f326a7d2ec726c6fd1cc7c45aac593c90c2e3bc5fe245601ce84f57f7f9be89b79ab199ab9b06bf92c1c4cd4b9dca1043faa737ee8a2f7df7371f6736594417cf33b15369e3f001b2e4a5c890cbd263aef38320e4e24f1aa37c5fd021e5700b208648cdb455ff2fa6268218a8b82aa481b4a7bb2b233366ac166783fa536814433b0138036b7abc1f7", 0xa3}, {&(0x7f0000004b40)="ee5032727964519378cedf7ef81726b24f8d36488dbb8a122f2281f3a5701ec13ed78ce39e7c39a5eae27991fde1a415225cc06e987d145a5ec0203d505a12b473bb3889f87f9bd63933603bb6ebc00893377a20d7c607ede51e863eb6a111fbd32c00082527f6aa364d121c5a11a00d95671d4479c2152915355bed90053a096fa85e1e6a6865932a5ea0add87aa1fec0172d119d49929dbe5638e65d330150010a0336ecc4ee9c0cb176173ee3ec004f8aa81bf32fb93a3d76f017b043af5b6f4dfb9c712d7a874a9027a1f343d6aa641a4c904c2e4bdd36e09e9dc46f7d067fc9bfca44d872b2cc8ba895bd35d33d538f", 0xf2}, {&(0x7f0000004c40)="b2ad8df4159825a4c8c4821627fe75f9cd3820f74ee494d541014e34078568983c67ee87090bf6956f8e26b1f78784c538f1b8e765e38fa7c55363036af6d0c737634cf5f42d75740e34c413950660c4a024314fa14083416ac595e4cf37cb2625ea9cea5a547791c316aab0d4d14434447bd8ed6e5fb2cffa50f26637987aed0474cd31c944962daa720a210f30e8267b3e6b16bada610c445d745ccf8239c6053319ba15b43c086e7e7bcc9fa0d62b4e85827656d35359a6272ad95f9b09bb560abf3f8529b8d9daf5a67187fe8d766fcc138049488b8ecbb88e0be552efc318ff66f9b6fff96d", 0xe8}, {&(0x7f0000004d40)="70f8e458be87f44a028de16d22baeffca2686538765e722c633884d4b1090a8c19f59423af5b31962febf50c979a3b291658a3f1b10f04d75ff86913df32ca0d0b5b4174a0ca4ab61379b442bc9372ad7db1a98fe952143717da5f46f7c950dfe5adb3111b42e9157f2c5fefdbed4dd9fa94d93a11d8205ae9fb633884375cb3e6", 0x81}, {&(0x7f0000004e00)="2f78b8636bcad84d8fb7766637e71d5effbe57aafb6e620522edbc8fc9f31a36f727aa5eafab5a4277d1c09567e17dc8653ad69c2c36f82abb1ff8d12f94597ab862dc6d4c1a506b28c97612b246bf789d333b6ba1fc9589f46ba1fb56d968c031b201410d51a183c97ae78a0e8ecb78508b99e149dc37d891c9d427366904bd5828ab2ac49a64d8730f6d4a989d0982a15125b3a03b743ea1240af107a59e52fd65fa7eddda4fc3b79e0a5a17c1108853", 0xb1}], 0x9, &(0x7f0000005080)=[@authinfo={0x18, 0x84, 0x6, {0x7}}, @authinfo={0x18, 0x84, 0x6, {0x911}}, @sndrcv={0x30, 0x84, 0x1, {0xff, 0x9, 0x100, 0x7519286b, 0x726, 0x0, 0x8e, 0x2, r27}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x1, 0x18004, 0x1f, 0x5453, 0x6f, 0x200, 0x10001, r31}}], 0x90, 0x10}], 0x6, 0x80) [ 3454.356100] FAULT_INJECTION: forcing a failure. [ 3454.356100] name failslab, interval 1, probability 0, space 0, times 0 [ 3454.521002] CPU: 0 PID: 22568 Comm: syz-executor.3 Not tainted 4.19.84 #0 [ 3454.527999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3454.537601] Call Trace: [ 3454.540729] dump_stack+0x197/0x210 [ 3454.544371] should_fail.cold+0xa/0x1b [ 3454.548272] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3454.553396] ? lock_downgrade+0x880/0x880 [ 3454.557562] __should_failslab+0x121/0x190 [ 3454.561809] should_failslab+0x9/0x14 [ 3454.565664] __kmalloc+0x2e2/0x750 21:01:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x234, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3454.569210] ? kmem_cache_alloc_trace+0x348/0x760 [ 3454.574067] ? alloc_pipe_info+0x199/0x430 [ 3454.578397] alloc_pipe_info+0x199/0x430 [ 3454.582481] splice_direct_to_actor+0x6bb/0x890 [ 3454.587177] ? avc_policy_seqno+0xd/0x70 [ 3454.591269] ? generic_pipe_buf_nosteal+0x10/0x10 [ 3454.596397] ? selinux_file_permission+0x92/0x550 [ 3454.601237] ? do_splice_to+0x180/0x180 [ 3454.605211] ? security_file_permission+0x89/0x230 [ 3454.610135] ? rw_verify_area+0x118/0x360 [ 3454.614286] do_splice_direct+0x1da/0x2a0 [ 3454.618432] ? splice_direct_to_actor+0x890/0x890 [ 3454.623265] ? security_file_permission+0x89/0x230 [ 3454.628183] ? rw_verify_area+0x118/0x360 [ 3454.632320] do_sendfile+0x597/0xce0 [ 3454.636176] ? do_compat_pwritev64+0x1c0/0x1c0 [ 3454.640794] ? fput+0x128/0x1a0 [ 3454.644080] __x64_sys_sendfile64+0x1dd/0x220 [ 3454.648583] ? __ia32_sys_sendfile+0x230/0x230 [ 3454.653154] ? do_syscall_64+0x26/0x620 [ 3454.657117] ? lockdep_hardirqs_on+0x415/0x5d0 [ 3454.661696] ? trace_hardirqs_on+0x67/0x220 [ 3454.666274] do_syscall_64+0xfd/0x620 [ 3454.670083] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3454.675255] RIP: 0033:0x45a639 [ 3454.678790] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3454.697777] RSP: 002b:00007f9c7efcec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3454.705655] RAX: ffffffffffffffda RBX: 00007f9c7efcec90 RCX: 000000000045a639 [ 3454.712909] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 21:01:35 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) gettid() r1 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) [ 3454.720169] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3454.727423] R10: 000000000007ffff R11: 0000000000000246 R12: 00007f9c7efcf6d4 [ 3454.734688] R13: 00000000004c83bf R14: 00000000004de7f0 R15: 0000000000000008 21:01:35 executing program 3 (fault-call:11 fault-nth:2): r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5420, 0x1) 21:01:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x235, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x184, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f00000000c0)={0x100000000, 0x1ff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}, 0x699}, 0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={r6, @in={{0x2, 0x4e23, @multicast2}}, 0xffff, 0xfff, 0x200, 0x5, 0x8}, &(0x7f00000001c0)=0x98) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x600, 0x0) ioctl$TIOCGWINSZ(r7, 0x5413, &(0x7f0000000040)) fadvise64(r0, 0x0, 0x0, 0x0) [ 3454.984068] FAULT_INJECTION: forcing a failure. [ 3454.984068] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3454.996231] CPU: 1 PID: 22690 Comm: syz-executor.3 Not tainted 4.19.84 #0 [ 3455.003177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3455.003189] Call Trace: [ 3455.015169] dump_stack+0x197/0x210 [ 3455.018832] should_fail.cold+0xa/0x1b [ 3455.022756] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3455.027928] ? __might_sleep+0x95/0x190 [ 3455.031958] __alloc_pages_nodemask+0x1ee/0x750 [ 3455.036669] ? __alloc_pages_slowpath+0x2870/0x2870 [ 3455.041705] ? find_held_lock+0x35/0x130 [ 3455.045789] ? __do_page_cache_readahead+0x3f1/0x720 [ 3455.050914] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3455.056465] alloc_pages_current+0x107/0x210 [ 3455.060901] __page_cache_alloc+0x2bd/0x450 [ 3455.065228] ? kasan_check_read+0x11/0x20 [ 3455.069388] __do_page_cache_readahead+0x1ce/0x720 [ 3455.074342] ? page_cache_sync_readahead+0x1d3/0x520 [ 3455.079474] ? read_pages+0x530/0x530 [ 3455.083300] ? lock_downgrade+0x880/0x880 [ 3455.087475] force_page_cache_readahead+0x1e9/0x360 [ 3455.092515] page_cache_sync_readahead+0x4b9/0x520 [ 3455.092540] generic_file_read_iter+0x168c/0x2ac0 [ 3455.092566] ? save_stack+0x45/0xd0 [ 3455.092579] ? __kmalloc+0x15d/0x750 [ 3455.092593] ? alloc_pipe_info+0x199/0x430 [ 3455.092611] ? __x64_sys_sendfile64+0x1dd/0x220 [ 3455.092638] ? filemap_range_has_page+0x290/0x290 [ 3455.092658] ? debug_smp_processor_id+0x1c/0x20 [ 3455.092676] ? perf_trace_lock_acquire+0xf5/0x580 [ 3455.092713] ? percpu_ref_put_many+0x94/0x190 [ 3455.092738] blkdev_read_iter+0x120/0x190 [ 3455.141804] generic_file_splice_read+0x42c/0x750 [ 3455.146673] ? add_to_pipe+0x350/0x350 [ 3455.146692] ? __inode_security_revalidate+0xda/0x120 [ 3455.146719] ? security_file_permission+0x89/0x230 [ 3455.146736] ? rw_verify_area+0x118/0x360 [ 3455.146749] ? add_to_pipe+0x350/0x350 [ 3455.146766] do_splice_to+0x127/0x180 [ 3455.146786] splice_direct_to_actor+0x256/0x890 [ 3455.146803] ? generic_pipe_buf_nosteal+0x10/0x10 [ 3455.146822] ? do_splice_to+0x180/0x180 [ 3455.186100] ? security_file_permission+0x89/0x230 [ 3455.191048] ? rw_verify_area+0x118/0x360 [ 3455.195217] do_splice_direct+0x1da/0x2a0 [ 3455.195237] ? splice_direct_to_actor+0x890/0x890 [ 3455.204242] ? security_file_permission+0x89/0x230 [ 3455.209187] ? rw_verify_area+0x118/0x360 [ 3455.213345] do_sendfile+0x597/0xce0 [ 3455.217077] ? do_compat_pwritev64+0x1c0/0x1c0 [ 3455.221737] ? fput+0x128/0x1a0 [ 3455.225032] __x64_sys_sendfile64+0x1dd/0x220 [ 3455.229540] ? __ia32_sys_sendfile+0x230/0x230 [ 3455.234144] ? do_syscall_64+0x26/0x620 [ 3455.238159] ? lockdep_hardirqs_on+0x415/0x5d0 [ 3455.238179] ? trace_hardirqs_on+0x67/0x220 [ 3455.238203] do_syscall_64+0xfd/0x620 [ 3455.238224] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3455.238235] RIP: 0033:0x45a639 [ 3455.238251] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3455.238258] RSP: 002b:00007f9c7efcec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3455.238273] RAX: ffffffffffffffda RBX: 00007f9c7efcec90 RCX: 000000000045a639 [ 3455.238280] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 3455.238288] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3455.238297] R10: 000000000007ffff R11: 0000000000000246 R12: 00007f9c7efcf6d4 [ 3455.238305] R13: 00000000004c83bf R14: 00000000004de7f0 R15: 0000000000000008 21:01:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5421, 0x1) 21:01:36 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) gettid() r1 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1e) 21:01:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x236, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x185, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x20041) fadvise64(r0, 0x0, 0x0, 0x0) 21:01:36 executing program 3 (fault-call:11 fault-nth:3): r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5422, 0x1) 21:01:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x237, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x186, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r5) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$llc_int(r8, 0x10c, 0x1, &(0x7f0000000100)=0x200, 0x4) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @ib_path={0x0, r6}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18) fadvise64(r0, 0x0, 0x0, 0x0) 21:01:36 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x1e) 21:01:36 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5423, 0x1) 21:01:36 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x1e) 21:01:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x238, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x187, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x141100) fadvise64(r0, 0x0, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x4200, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000540)=""/207) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mq_timedreceive(r5, &(0x7f0000000440)=""/152, 0x98, 0x80000001, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x2000, &(0x7f0000000640)=ANY=[@ANYBLOB="66643d7d0b960abd26465eec645d46", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,max_read=0x0000000000000020,allow_other,default_permissions,hash,uid>', @ANYRESDEC=0x0, @ANYBLOB=',permit_directio,smackfsfloor=&,*wlan1posix_acl_access.ppp1security,obj_user=+-.^ppp1,dont_hash,fowner>', @ANYRESDEC=r4, @ANYBLOB=',\x00']) 21:01:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5424, 0x1) [ 3456.402437] QAT: Invalid ioctl 21:01:37 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x1e) 21:01:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x239, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:37 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x70010) 21:01:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x188, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5425, 0x1) 21:01:37 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000000c0)={r8, @in={{0x2, 0x0, @empty}}, 0x699}, 0x90) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000001c0)={r8, 0x44, "b19fa2cf25944377e544aee35e878149dcd764aa98ee58e13d4cd658cf7fd5af2b8453a66f028e0ce172558f31d27e9e4b61dd9836803144aca55023643b4c3e4c23e39c"}, &(0x7f0000000240)=0x4c) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000040)={0x0, @reserved}) 21:01:37 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x0) 21:01:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x23a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:37 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ff10) 21:01:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x189, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3456.766608] net_ratelimit: 16 callbacks suppressed [ 3456.766617] protocol 88fb is buggy, dev hsr_slave_0 [ 3456.776747] protocol 88fb is buggy, dev hsr_slave_1 [ 3456.781916] protocol 88fb is buggy, dev hsr_slave_0 [ 3456.787075] protocol 88fb is buggy, dev hsr_slave_1 21:01:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5427, 0x1) 21:01:37 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x0) 21:01:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x23b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:37 executing program 4: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x9}, 0x8) 21:01:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x18a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5428, 0x1) 21:01:37 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x0) 21:01:37 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ff33) 21:01:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x18b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x23c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5429, 0x1) 21:01:38 executing program 4: fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:01:38 executing program 0 (fault-call:12 fault-nth:0): r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x23d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:38 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ff34) 21:01:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x18c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5437, 0x1) 21:01:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5441, 0x1) [ 3457.709423] FAULT_INJECTION: forcing a failure. [ 3457.709423] name failslab, interval 1, probability 0, space 0, times 0 [ 3457.721095] CPU: 0 PID: 23366 Comm: syz-executor.0 Not tainted 4.19.84 #0 [ 3457.728044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3457.737680] Call Trace: [ 3457.740293] dump_stack+0x197/0x210 [ 3457.744129] should_fail.cold+0xa/0x1b [ 3457.748032] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3457.753146] ? __sigqueue_alloc+0x173/0x4d0 [ 3457.757477] ? find_held_lock+0x35/0x130 [ 3457.761558] __should_failslab+0x121/0x190 [ 3457.766886] should_failslab+0x9/0x14 [ 3457.770721] kmem_cache_alloc+0x47/0x700 [ 3457.770741] ? kasan_check_read+0x11/0x20 [ 3457.770762] __sigqueue_alloc+0x268/0x4d0 [ 3457.783105] __send_signal+0x20f/0x14a0 [ 3457.787124] send_signal+0x49/0xd0 [ 3457.790696] do_send_sig_info+0xa3/0x130 [ 3457.794784] ? __lock_task_sighand+0x320/0x320 [ 3457.799395] ? check_kill_permission+0x56/0x540 [ 3457.804102] do_send_specific+0x195/0x250 [ 3457.808252] do_tkill+0x1ba/0x280 [ 3457.811715] ? do_send_specific+0x250/0x250 [ 3457.816052] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3457.821600] ? do_syscall_64+0x26/0x620 [ 3457.825581] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3457.830951] ? do_syscall_64+0x26/0x620 [ 3457.834916] ? lockdep_hardirqs_on+0x415/0x5d0 [ 3457.839508] __x64_sys_tkill+0x6b/0xa0 [ 3457.843418] do_syscall_64+0xfd/0x620 [ 3457.847222] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3457.852426] RIP: 0033:0x45a639 [ 3457.855619] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3457.874607] RSP: 002b:00007f5125900c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000c8 [ 3457.882311] RAX: ffffffffffffffda RBX: 00007f5125900c90 RCX: 000000000045a639 [ 3457.889830] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000002ed8 [ 3457.897100] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3457.904367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f51259016d4 [ 3457.911631] R13: 00000000004ca57a R14: 00000000004e24c8 R15: 0000000000000004 [ 3457.921213] protocol 88fb is buggy, dev hsr_slave_0 [ 3457.927389] protocol 88fb is buggy, dev hsr_slave_1 21:01:38 executing program 4: syz_open_dev$loop(&(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x02\x00', 0x0, 0x234942) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() tkill(r1, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3ff, 0x4, 0x0, 0x5, 0x6, 0x10, "13eb70948d419205ac233f8bcc9d6707420f1689c3f0dd11478be2707b3ed63ad37ca705166d37ecbb3a66d8f3e20c7dd40bc8a07d4f97392fbdeb83abf71a93", "f4e2034de4c00d79006453629e88590002d369dd7f640182ebf37deba202f634b4f1ec27ad1b4b9080d1ff6cbe0bacba0c0efa6fb90504a3483fc370bd63194e", "286623733a1c1410228c79cbe10ec91055781be4b67e499f093686188e1566d1", [0x9, 0xffffffff00000001]}) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_smc(0x2b, 0x1, 0x0) fallocate(r3, 0x2, 0xffffffff, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r7, 0x111, 0x4, 0x1, 0x4) ioctl$TIOCGICOUNT(r5, 0x545d, 0x0) listen(r2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaac69a6b4c3e7786dd6080000000180600fe8000000000000000000d00000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="49cc00800002000009000001"], 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='ne\x00\x00\x01\x00\x00\x00\x00\x00') ioctl$KDDISABIO(r8, 0x4b37) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$sock_TIOCOUTQ(r10, 0x5411, &(0x7f0000000000)) [ 3458.046678] protocol 88fb is buggy, dev hsr_slave_0 [ 3458.051805] protocol 88fb is buggy, dev hsr_slave_1 21:01:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x23e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x18d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:38 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ff35) 21:01:38 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5450, 0x1) 21:01:39 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x64, "e30dd9a1254e943ba1fc5134482c0deeebaa3d0d382e7a651ab59e29a0a3c909e78f7c1f1018640a8b165cb0634771a6427454e931a362b3c86b77de81346baa7bf3a905bad00a247415f6206107673dceb503f955e8822eefd01618fce53c55aa7adc99"}, &(0x7f0000000240)=0x88) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x92e4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0xc880) 21:01:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x23f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3458.446640] protocol 88fb is buggy, dev hsr_slave_0 [ 3458.451841] protocol 88fb is buggy, dev hsr_slave_1 21:01:39 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ff36) 21:01:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x18e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5451, 0x1) 21:01:39 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) write$selinux_context(r1, &(0x7f0000000040)='system_u:object_r:syslogd_initrc_exec_t:s0\x00', 0x2b) 21:01:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5452, 0x1) 21:01:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x240, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:39 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x6a4900, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200000, 0x0) tkill(r3, 0x1e) 21:01:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x18f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:39 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() open(&(0x7f0000000000)='./file0\x00', 0x2, 0x3) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:39 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ff37) 21:01:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x545d, 0x1) 21:01:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x190, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x241, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:39 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x200c082, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 21:01:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5460, 0x1) 21:01:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x191, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:39 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ff38) 21:01:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x242, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:40 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCCBRK(r3, 0x5428) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r4 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r4, 0x1e) 21:01:40 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x8, 0x2, 0x3, 0x3, 0xff}, 0x14) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) 21:01:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40045431, 0x1) 21:01:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x192, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x243, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40045436, 0x1) 21:01:40 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ff39) 21:01:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x193, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x7f, 0x400, 0x7fff, 0x8, 0x2}) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) 21:01:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x244, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:40 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f0000000000)=0x8) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x1f, 0x282000) tkill(r3, 0x1e) 21:01:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455cb, 0x1) 21:01:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x194, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:40 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ff3a) 21:01:41 executing program 4: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) fadvise64(r0, 0x9, 0xffffffffffffffff, 0x0) 21:01:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x245, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40049409, 0x1) 21:01:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x195, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:41 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000000)={0x2c, 0x84}) close(r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000780)={0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="fd7d51fd1b0c730b1bba51af2d831b12a57660eea2c4999ec07a1df88e3168804d5d69", @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="6f3df7eab18f7b7bd3a6a1dd9382ad36b72a85f2b481202761902e7e2219b1731618323b0161c669b9f39ae2015da7e2421e256669dc812651", @ANYRESOCT, @ANYRES16=r4, @ANYRES64=r6, @ANYRES32=r7, @ANYRES32], @ANYRESOCT, @ANYRES32=r9, @ANYPTR64, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="06e72108d15e06cd157fc99e7a4526f47fa53a2ec445b158b04245e13e9beb3057bf1485a3da223d3984d65337503ccc3ef4acd097af368c4cc2f247bde007d7d67393894e481cb89cfac1a695f428753fdd7ef4288c4beee2c4b567cde873107d54d1a268d115c252447c492bc7e442ce4f2630742e9fd627bb9a038ad6d8e635e52d75563d59b146abdc99eef5b56486ba57a9e712c4b2a451ad609dde337e80d35434c376bc5050476ddbe2267243cc27ea"]], @ANYRES32=0x0, @ANYRES32, @ANYRES32=r4, @ANYRESDEC=0x0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB='\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB], 0x87}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000001000)="1aafdb517ccb933795b89218e7709e", 0xf}], 0x1, &(0x7f00000010c0)}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x0) tkill(r4, 0x3) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000200)={0xc, 0x82, "64acfd400a92fe0d542f46e60b5d29ac9474fcee4cf322b1965f908b030f018387d56c0bc4596f845201ffaf0de1f49d989604656917d10130f05a08656975f48ce9ca7559a0a179a00f742967351f539468e1382c99e340a72c3df68d8b56e8928d6d519611496547e9a48a0884171acaf5118890576056f8f5393b162d3e988690"}, 0x88) ptrace$setopts(0x4206, r1, 0x0, 0x0) r10 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r10, 0x1e) r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x440000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r11, 0xc0405519, &(0x7f00000001c0)={0x3, 0x6, 0x9, 0x0, 'syz0\x00', 0x30d}) 21:01:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x246, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40086602, 0x1) 21:01:41 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ff3b) 21:01:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x247, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x196, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:41 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000140)={0x2b, 0x6, 0x0, {0x0, 0x4, 0x2, 0x0, '/\xb2'}}, 0x2b) close(r2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) r7 = dup2(r5, r6) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f00000000c0)={0x10001, 0x0, {0x1, 0x0, 0x2, 0x2, 0x80}}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000000)=@req3={0x7, 0x4, 0x10001, 0xffaa, 0x2, 0xdb, 0x4}, 0x1c) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r10 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r10, 0x1e) 21:01:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40087602, 0x1) 21:01:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x248, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x197, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:41 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ff3c) 21:01:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x4020940d, 0x1) 21:01:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x249, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:42 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x198, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045430, 0x1) 21:01:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x24a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:42 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000000c0)={0x603, 0x0, {0xffffffffffffffff, 0x1, 0x800, 0x1, 0x4}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000140), &(0x7f0000000300)=0x10) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r5 = gettid() r6 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x3, 0x80100) fanotify_mark(r4, 0x146, 0x10, r6, &(0x7f0000000380)='./file0\x00') r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "57891308f61c7af0", "a577b055ad0f6f541ab4a5739395de02", "e987d2ba", "0f2a9d655f89ccc5"}, 0x28) wait4(0x0, 0x0, 0x0, 0x0) tkill(r5, 0x1e) 21:01:42 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ff3d) 21:01:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x199, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045432, 0x1) 21:01:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x24b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3462.046627] net_ratelimit: 14 callbacks suppressed [ 3462.046636] protocol 88fb is buggy, dev hsr_slave_0 [ 3462.056748] protocol 88fb is buggy, dev hsr_slave_1 21:01:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x19a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3462.208108] protocol 88fb is buggy, dev hsr_slave_0 [ 3462.214149] protocol 88fb is buggy, dev hsr_slave_1 21:01:42 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000780)={0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c63c1475c2a26b948c817271289ad2b24cbff71ca9709bc159a7b20daefabf40d065ab0000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB], 0x4f}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000001000)="1aafdb517ccb933795b89218e7709e", 0xf}], 0x1, &(0x7f00000010c0), 0x0, 0x800}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x0) sched_getscheduler(r3) r4 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_getattr(0x0, &(0x7f0000000000)={0x30}, 0x30, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000001c0)=""/91) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r5 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r5, 0x1e) 21:01:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x24c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:43 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ff3e) 21:01:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045438, 0x1) 21:01:43 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x101080) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x9f9, 0x10001, 0x5, 0x1, r1}) r3 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf8d, 0x401}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) r4 = getpgid(r0) getpgid(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) r5 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r5, 0x1e) 21:01:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x19b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3462.606624] protocol 88fb is buggy, dev hsr_slave_0 [ 3462.611804] protocol 88fb is buggy, dev hsr_slave_1 21:01:43 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x24d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045439, 0x1) 21:01:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x19c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:43 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ff41) 21:01:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045440, 0x1) 21:01:43 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x24e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3463.007556] protocol 88fb is buggy, dev hsr_slave_0 [ 3463.013855] protocol 88fb is buggy, dev hsr_slave_1 [ 3463.020532] protocol 88fb is buggy, dev hsr_slave_0 [ 3463.026674] protocol 88fb is buggy, dev hsr_slave_1 21:01:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x19d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:43 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x2, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000780)={0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB='\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB], 0x50}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000001000)="1aafdb517ccb933795b89218e7709e", 0xf}], 0x1, &(0x7f00000010c0)}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x0) r5 = getpgid(r4) prctl$PR_SET_PTRACER(0x59616d61, r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r6 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r6, 0x1e) 21:01:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455c9, 0x1) 21:01:43 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x24f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x19e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:44 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ff42) 21:01:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455ca, 0x1) 21:01:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x250, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:44 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/relabel\x00', 0x2, 0x0) close(r8) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r9, 0x8}}, 0x10) tkill(r3, 0x1e) 21:01:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x19f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455cc, 0x1) 21:01:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x251, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1a0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:44 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7fff0) 21:01:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x252, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80086601, 0x1) 21:01:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1a1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:44 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000780)={0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB='\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB], 0x50}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000001000)="1aafdb517ccb933795b89218e7709e", 0xf}], 0x1, &(0x7f00000010c0)}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x0) capget(&(0x7f0000000000)={0x20080522, r5}, &(0x7f00000000c0)={0x9db2, 0xd1cb, 0xeb5, 0x1, 0x1, 0xffffffff}) tkill(r3, 0x1e) 21:01:44 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x81000) 21:01:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80087601, 0x1) 21:01:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x253, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1a2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:45 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x70d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MODE={0x8, 0x1, 0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000010000d04000000000000000000000000daf5861d31ee6e27868cb8b18c619692a1842176b9c7393b114e891935a503800e4d4702f97b195e8b1ab17496deef7a00a57e9732b0b847f2de49f903260c7143f2c296f9c2f111854baac4f4b4fff4d60c2d6a11a451ce69f1efce799c16", @ANYRES32=r5, @ANYBLOB="b3a7cac600000000"], 0x20}}, 0x0) r6 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r7 = gettid() wait4(0x0, 0x0, 0x81000000, 0x0) tkill(r7, 0x1e) 21:01:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0xc0045878, 0x1) [ 3464.570442] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 21:01:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1a3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:45 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x254, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:45 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7fffffffffffffff) 21:01:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0xc0045878, 0x1) 21:01:45 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x255, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1a4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:45 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f00000000c0)={{0x17, @broadcast, 0x4e24, 0x2, 'sh\x00', 0x10, 0x1f, 0x69}, {@loopback, 0x4e20, 0x1, 0xea, 0x7f, 0x9}}, 0x44) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffd16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r5 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r5, 0x1e) 21:01:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0xc0189436, 0x1) 21:01:45 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x256, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1a5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:45 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x200040, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) [ 3465.224615] IPVS: set_ctl: invalid protocol: 23 255.255.255.255:20004 21:01:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0xc020660b, 0x1) 21:01:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x257, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1a6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) 21:01:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x258, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1a7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:46 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x101082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x8782, 0xeb9f}, &(0x7f00000000c0)=0x90) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$P9_RLOCK(r9, &(0x7f00000001c0)={0x8, 0x35, 0x1, 0x26d217ed0ab1f4fa}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYBLOB="260000003db214b02f9c5c25ee6ec4fca8f7a41658cbb966ed8b54e3978e1dfd135adac750eab787d49b"], &(0x7f0000000180)=0x2e) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x259, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3) 21:01:46 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) getsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1a8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 21:01:46 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r4 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\\1keyring\x00', r3) r5 = add_key$keyring(&(0x7f0000000400)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r6, r5) keyctl$reject(0x13, r4, 0x3, 0x4, r6) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000000)=0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x3) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r10, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r10, @ANYBLOB="3000060087ad31de6e332d5d000000"], 0x34, 0x0) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x3) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r12, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r12, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x3) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = getuid() r17 = geteuid() sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x2c, 0x20, 0xd5822192f3f8bee5, 0x4, 0x0, {0xa, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r16, r17}}]}, 0x2c}}, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) r19 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r19, 0x0, r19) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r20, 0x0, r20) r21 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r21, 0x0, r21) r22 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYRES64=r18, @ANYRES64=r19, @ANYPTR=&(0x7f0000000600)=ANY=[@ANYRESOCT=r20, @ANYRESOCT=r21, @ANYRESHEX=r22, @ANYBLOB="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"], @ANYPTR, @ANYRESOCT], 0x5, 0x2) r23 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x3) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r24, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r24, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x8, &(0x7f00000000c0)=[r10, r12, 0x0, 0xee01, r14, 0xffffffffffffffff, 0xffffffffffffffff, r24]) keyctl$chown(0x4, r6, r8, r25) ptrace$setopts(0x4206, r1, 0x0, 0x0) r26 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r26, 0x1e) 21:01:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1a9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x25a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:46 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000000)={0xb, @pix_mp={0x5, 0xb6a, 0x35303553, 0x0, 0x1, [{0x7, 0x5}, {0x4}, {0xffffffff, 0x91}, {0x8, 0x5}, {0xfffffff9, 0x81}, {0xfffff001, 0x4}, {0x7ff, 0x1}, {0xffffffff, 0x30b9115e}], 0x4, 0x3f, 0x7, 0xff188b1f1ad6e765, 0x4}}) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) [ 3466.302702] Bluetooth: hci0: Frame reassembly failed (-84) 21:01:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x25b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1aa, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x25c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:47 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000240)={0x0, &(0x7f00000002c0)=[{}, {}, {}]}) prctl$PR_GET_FP_MODE(0x2e) ioctl$DRM_IOCTL_DMA(r6, 0xc0406429, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0xb5, 0xd7, 0x8, 0x2], 0x2, 0x3, 0x80000001, &(0x7f0000000100)=[0x3, 0x8d, 0x80000000], &(0x7f0000000180)=[0x7ff, 0x2, 0x6]}) 21:01:47 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) 21:01:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1ab, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x25d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3467.168708] net_ratelimit: 16 callbacks suppressed [ 3467.168749] protocol 88fb is buggy, dev hsr_slave_0 [ 3467.180442] protocol 88fb is buggy, dev hsr_slave_1 [ 3467.186699] protocol 88fb is buggy, dev hsr_slave_0 [ 3467.193164] protocol 88fb is buggy, dev hsr_slave_1 [ 3468.286691] protocol 88fb is buggy, dev hsr_slave_0 [ 3468.292758] protocol 88fb is buggy, dev hsr_slave_1 [ 3468.376628] Bluetooth: hci0: command 0x1003 tx timeout [ 3468.382055] Bluetooth: hci0: sending frame failed (-49) [ 3468.446617] protocol 88fb is buggy, dev hsr_slave_0 [ 3468.451761] protocol 88fb is buggy, dev hsr_slave_1 [ 3468.846665] protocol 88fb is buggy, dev hsr_slave_0 [ 3468.851940] protocol 88fb is buggy, dev hsr_slave_1 [ 3470.446763] Bluetooth: hci0: command 0x1001 tx timeout [ 3470.452271] Bluetooth: hci0: sending frame failed (-49) [ 3472.446693] net_ratelimit: 14 callbacks suppressed [ 3472.446700] protocol 88fb is buggy, dev hsr_slave_0 [ 3472.456803] protocol 88fb is buggy, dev hsr_slave_1 [ 3472.526845] Bluetooth: hci0: command 0x1009 tx timeout [ 3472.606648] protocol 88fb is buggy, dev hsr_slave_0 [ 3472.611761] protocol 88fb is buggy, dev hsr_slave_1 [ 3473.006661] protocol 88fb is buggy, dev hsr_slave_0 [ 3473.011758] protocol 88fb is buggy, dev hsr_slave_1 [ 3473.406707] protocol 88fb is buggy, dev hsr_slave_0 [ 3473.411994] protocol 88fb is buggy, dev hsr_slave_1 [ 3473.417170] protocol 88fb is buggy, dev hsr_slave_0 [ 3473.422390] protocol 88fb is buggy, dev hsr_slave_1 21:01:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x5) 21:01:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1ac, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:57 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) ioctl$TUNSETGROUP(r4, 0x400454ce, r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:57 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x39, 0x6e, 0x0, 0x0, 0x5, 0x0, 0x50d, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x20f94b5749d2ec8a, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xe28c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x25e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x14800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x7ff, 0x10}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r2, 0x1}, &(0x7f0000000180)=0x8) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, &(0x7f00000002c0)=r6) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x80082102, &(0x7f0000000040)=r6) 21:01:57 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x166, @tick=0x401, 0x1, {0x6, 0x1}, 0xff, 0x0, 0x8}) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) 21:01:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x25f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1ad, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x7) 21:01:57 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x351042, 0x1) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x49) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) r3 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r3, &(0x7f0000000440), 0xb3, 0x81006) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000000)={0x0, 0xc0000, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) syz_init_net_socket$rose(0xb, 0x5, 0x0) 21:01:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0xee9a661769b8d33, 0x70, 0xd7, 0x8, 0x0, 0x61, 0x0, 0x6, 0x800, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000040), 0xe0e72bb68bdc0e6d}, 0x1140, 0x10001, 0x8, 0x8, 0x400, 0xa4}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4) fadvise64(r0, 0x0, 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) 21:01:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x260, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xa) 21:01:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1ae, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:57 executing program 0: r0 = getpid() waitid(0x5b47dfd1ad054577, r0, &(0x7f00000000c0), 0x1000000, &(0x7f00000001c0)) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xb) 21:01:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1af, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x261, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x400000000000000, 0x2, 0x3) 21:01:58 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f0000000040)) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r5 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat(r7, &(0x7f0000000000)='./file0\x00', 0x10000, 0x178a32648aac1081) tkill(r5, 0x1e) 21:01:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x30d65b668f5b3674, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18) 21:01:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x25) 21:01:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x262, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1b0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:58 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2408a, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe469241300956e98) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) [ 3477.576648] net_ratelimit: 16 callbacks suppressed [ 3477.576656] protocol 88fb is buggy, dev hsr_slave_0 [ 3477.587200] protocol 88fb is buggy, dev hsr_slave_1 [ 3477.592512] protocol 88fb is buggy, dev hsr_slave_0 [ 3477.597745] protocol 88fb is buggy, dev hsr_slave_1 21:01:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3ff, 0x200) fadvise64(r0, 0x0, 0x0, 0x0) 21:01:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x300) 21:01:58 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x20) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:01:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x263, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1b1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x400, 0x0) 21:01:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3a3) 21:01:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x264, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x4, 0xfffffffffffffeff) fadvise64(r0, 0xfffffffffffffffd, 0x3, 0x0) 21:01:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3a8) 21:01:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1b2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x265, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:59 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10140080}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x270, 0x3b, 0x300, 0x70bd2a, 0x25dfdbff, {0x12}, [@generic="5acb96f73527c0bc74ccfb41275a1caf0b398d3c0beaabc511ef01830851055ac989d8bbcfc03e2038f02bea6fb1328192a8759c04e4fcac100482a3af6a63d7960445ea0ed66b50edbf611166141a253b93bf", @nested={0xac, 0x88, [@generic="dccdb816da009fed15f4ad6a3f997933b6aa0383128d807be761864fa447ebc66de81616d965b4cd42ba90243bc5b62e7c493b3c9211fe9df0deba1204fdfc00ba5a2ef61b41df994b937bd157c216aa29c28241e31371c75bc3ef61c925597999150e99420c0aa38b13039d5ad75ab9927eaba06170f845e55e4ff02efa51b21cc3713b0ecf9a6a37d54ee0091bca5f4f909878b5ed830040a3b620a6ee977c99d37f1acdb0"]}, @generic="32bc38389bcc43bd2b2a9f15e338c090cdb9f9276e4dd7bfdb986cca6ca370764a16b21c2162caf084ada957a33e51dea8c6ed851c771cb88da46dcabd51cd75aad36f3310409e1e363daff8285efe2c56518438fe5ac62ec208f2e28aed19f61dced8eb5a41f6255493e79d2b5ca63cc15ec9f1e5f7e86266facf3a0df3c2ea52ffdaec4c00e46873a81487b0ad239186ececeb13e8c179cb11d66b09282d08b1de568218474bf2267e3aa495e1169028a109e2d364e1527b814088aee26c1f78a784f7a33d6d101c5dcb1b81c093748225e8544fb6ca14b587", @generic="db6c067b35115fe04330bfa0096faeff316a04a6fa007a4c1bf3f8bf8969142b29f485300f09efa86b8e513f93b121a1d4ce1971d23c5dbdd31f6b7bfefcec07ced4b1", @typed={0x8, 0x82, @pid}, @nested={0xc, 0x6a, [@typed={0x8, 0x7d, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @nested={0x2c, 0x61, [@typed={0x14, 0x5c, @ipv6=@dev={0xfe, 0x80, [], 0xf}}, @typed={0x8, 0x44, @uid=r4}, @typed={0xc, 0x10, @u64=0x80000001}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x44490) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) r7 = gettid() r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x901a01, 0x0) accept4$x25(r8, 0x0, &(0x7f00000000c0), 0x80000) wait4(0x0, 0x0, 0x0, 0x0) tkill(r7, 0x1e) 21:01:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_OPEN(r2, &(0x7f0000000000)={0x20, 0x0, 0x6}, 0x20) 21:01:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1b3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd43) 21:01:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f00000000c0)={r3, 0x3}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000040)={r3, 0x1}) r4 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0xc0506617, &(0x7f00000002c0)={{0x1, 0x0, @descriptor="4c8fbb6f55bc34f9"}, 0xc9, [], "517a70adc2bbdbd79c418c947bfe20c590f257021e2b8ddd766de4e69e362257372c06eaf80ccbd43e03e01f8759167115e90d99397b1f081bbc3781c59d309c34a8793dd4d0a57a89bba32bb6b4502ce6777ffa430f9462bad581b4a34d0ad7eae0caf81f262317947bfbeae022a826c41bd17b42ee6133a812e37bbfd3608b9d5c6d4b8e2394b5923178be722216ac20b8e7c7efa95848928fc95adc2f8655412bafddcb57d6adb9905c9adf1a98c487e91d7c5777304f422f36d343010becc7949e11f627b782cd"}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r8, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000000)=0x800, 0x4) r9 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r9, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r9) fadvise64(r5, 0x0, 0x0, 0x1) fcntl$setstatus(r4, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendfile(r5, r4, 0x0, 0x7ffff) 21:01:59 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x266, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x1, 0x40) fadvise64(r0, 0x80006, 0x9, 0x2) [ 3478.696619] protocol 88fb is buggy, dev hsr_slave_0 [ 3478.701774] protocol 88fb is buggy, dev hsr_slave_1 21:01:59 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2000, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb9) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'veth0\x00', 0xb54f2c628d0c559c}) sendfile(r1, r0, 0x0, 0x7ffff) 21:01:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd44) 21:01:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1b4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3478.847824] protocol 88fb is buggy, dev hsr_slave_0 [ 3478.853654] protocol 88fb is buggy, dev hsr_slave_1 21:01:59 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r4 = gettid() ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)=0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000001c0)="e6ce12da75f76fc538c7e8962fff9ff730455190f04a39261d1631ce32514d6ca03f4f76e1af2cdff24ffee80d162f86149d3089d65abacc1594265c3a9d954d30c3d92492cb8cf39b1529f093b9a10b11338e5ede7b256c8727d8814ee7b7bde98b76f4359aca69975b143f29ee40011b2c92d7a710aa6875a3b0e44871d1d71e96d2c078df42bc71e01938c39c697ee77b90d3932ca3c83f4b789a8b5feb35b88b25b91bb5547cfc108ea115dc54eb7157569e945b288d72835623c382dee98437d89c51bd20529e1cdcf9441aeba25b669dbf50e5") wait4(0x0, 0x0, 0x0, 0x0) get_robust_list(r0, &(0x7f00000002c0)=&(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f0000000300)=0x18) tkill(r4, 0x1e) 21:01:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@int=0x6, 0x4) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff7, 0x741101) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000080)=""/183) 21:01:59 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x267, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd45) 21:01:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1b5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:59 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x800, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) fadvise64(r0, 0x0, 0x0, 0x0) 21:01:59 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x268, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:01:59 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={{r3, r4/1000+10000}, {r5, r6/1000+10000}}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000040)=0xf427c) r7 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r7, 0x1e) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r8) fcntl$getown(r8, 0x9) [ 3479.246610] protocol 88fb is buggy, dev hsr_slave_0 [ 3479.251801] protocol 88fb is buggy, dev hsr_slave_1 21:01:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1b6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:00 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x6, 0x80, 0x4, 0x2, @random="7c8adacfbd79"}, 0x10) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:02:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x269, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd46) 21:02:00 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x8, 0xc1, 0x1, 0x4, 0x80}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r1, 0x400}, 0x8) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r2, 0xbc, 0x0, 0x1) 21:02:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1b7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd47) 21:02:00 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) perf_event_open(&(0x7f0000000040)={0x4, 0x55, 0x0, 0x1, 0x0, 0x0, 0x0, 0x50d, 0x2c400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x401}, r4, 0xfffffffffffffbff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r5 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r5, 0x1e) 21:02:00 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x601, 0x40) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x1d, 0x4) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x3c200, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000040)=0x1, 0x4) fcntl$setstatus(r0, 0x4, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/create\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:02:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x26a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x4002, 0x0) setsockopt$inet_dccp_int(r3, 0x21, 0x6, &(0x7f0000000240)=0x80000000, 0x4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f02000000000000000001000000000000000c4100000014001462726f6164636173742d6c696e6b000066935ac9900631451be9082458ff45fcc77bdfb0b91d10af9605d398cfe20ab6120c2ab99b39c069663129de511bc9003392518f353405aeee6c751bbe71b1517d6be51715b515486500be00000000"], 0x30}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4820024}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000827b67000fbdbdf25010009000000001800170000001e000000207564713a7b017a32000000001f5d62437e85ec364c603c4a95597760d7531aec7ed944de543aecc054c7db67c3f1b3d1297945ea984a4124221a2ec39b6f8ec78ab2dd4732f76d0d3760ef5997921e5e269ae1bb6afc631ae91e58dc2e865512c471864d1a2bfcb105363a527ae262cbd075765bdab9ba0b1e903ed43bd0449e294ad5e515e0498f802d14bfe2"], 0x34}}, 0x4008004) 21:02:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x26b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd48) 21:02:00 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x10000, 0x20) close(r0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000000)={0x0, 0x11}) r1 = syz_open_dev$loop(&(0x7f0000000280)='/de\x00\x02loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000180)='/dychord\x02\x00\x00\x00\x00\x00', 0x6) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) socket$caif_seqpacket(0x25, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) fcntl$setstatus(r3, 0x4, 0x82400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cachefiles\x00', 0x141440, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000400)=0xd9fe, 0x4) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) sendfile(r1, r0, 0x0, 0x7ffff) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000001c0)) sendto$rose(r7, &(0x7f00000002c0)="5d007f7fef4456d3ecc426fdada1e69639ebc9c086f0769efe022fd76eca7ea99bc125b3bceba84221d15687e9e4704d49947130c2421fd883b51fbdd701eab2409cbb0a08507c5dd4f85aa721a4fb2f4405ef107fa58ef4c26f21a445754f8bfe52243eb6a2c544a03cb530f88005c82ab28216f9f02f94bee63b52ba504ec6f030202c92e66570ca584594a79e932944a3c9730106126d7bc16ec6c95528ecdc9e52359f0f0fd5fa5a7a93e646f6e013c590af4f6f68b704b9a711844b7873426374f6647c1fc6a1ae8a4f1ef9fd1a5f9d21", 0xd3, 0x23426a7089dd8526, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 21:02:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1b8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:00 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = gettid() prlimit64(r3, 0xd, 0x0, &(0x7f0000000000)) ptrace$setopts(0x4206, r1, 0x0, 0x0) r4 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r4, 0x1e) 21:02:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd49) 21:02:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x26c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:00 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000011c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0)="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", 0x1000, r3}, 0x68) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x4, &(0x7f0000002400)=[{&(0x7f0000001240)="93058ec4102b9c3b66e4887fa4b7192f42eb49bc26ff112ae603c0d1793b1808b61c74bc275e1924c051242502155698a9e687d7ad7c56b121a9a63769b8b41b2d56fc7c4051a770745ed2f33a6bc7c91876922d0716ea0dce7cabc5006233997bd148e66dbec7718a63f29ce661599932258bd3889ae6f94421520a7fe9eea9", 0x80, 0x4}, {&(0x7f00000012c0)="ca9115b272e5b10143769773b079e0caa5614415a134ee7231ab1bc436b0389da8c202c624667057eeef95a2cc7c096c1551dfff6d485443d506207e02c1923e5796500f611db901bd78eac2bb21a0", 0x4f, 0x7f}, {&(0x7f0000001340)="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", 0x1000, 0x1}, {&(0x7f0000002340)="02df206e7d96328ec9768bbb696798557cc103a9452f0dd51755f367c0ab340c2075932dfa8a3e272e696566b3ae0e9d7090c59bf438634c5dfb7bb806895dd42fd07f07b8dc8865c6e81a85f148fb7e7a15138780563c6d0275f18b8ae96f5c77f28c462bb013cf79a04b8d6d9d5c5e36246f2943f59596b9c545d0bd94b937f565600c8b626756e99f6463482961e51d7890c65e315a9776a404c9d2171410a53e6063324368978253d8e474a0850f56", 0xb1, 0x2}], 0x1010, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r4 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r4, 0x1e) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) 21:02:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1b9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:00 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2000, 0x0) ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:02:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x30, r3, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x0, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x24002040) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x17, 0x3c, &(0x7f0000000000)="4a736ba3ba85ab234adb7d443ca3a7a080b671755af00e5cc6c9557e33343ad60f67d3b281afde8bbdc942c1737db6fca27d39ed824f146c64e7a0a8"}) fadvise64(r0, 0x0, 0x0, 0x0) 21:02:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd4a) 21:02:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x26d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1ba, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x1, 0x10003) fadvise64(r0, 0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000001600)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1}}, 0x10, &(0x7f00000014c0)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000000080)="f2b59d222e3b71ac0140047691f3effa143c158663783edd41f4d9f85e68c69fed5925feb07259c16747b01cdbb614c56c4358254617b56532f06fda0f17f2a7a54c76868e49da051457f3ef85bebe0b94076481223c2c4e00d4b87a688045f624826beb546db614f8a36252a2e94498329b952d0364becbf96bf778b9f61438b2811e3874dbe2fcee1c85160acd19bac87087795b8270970649c724d59244682215442a43ce51efee201875b4cd78ca4de5b834ecdba0f95d134c6c18a9f347db80addbe08a1b12b8db9ec72f6799e7d4de5ef5660ca5fa7589c2eeed8711223c90148220941f3cd0f0100cf5b3", 0xee}, {&(0x7f0000000180)="52e62f3b862eee76762215e18fe6dece8a460c23c4440e030f393ab4516ea239ee3c9e34a641f9ec91d95ba2b00a873e14d32eed948f564cf729cd10cc711fa020c2a0dc94912fa46f346a5bbb4513d203b2673f6c3d808d9b92a71fd3dc703ca7d26f4a09db9bc72ca71cc2f1740aa35d15dc973e21ed3cdeda1b7547eb3ff7edc208031c7fef7935085d7965d03608df14da886ce9a48566f0e7b348030663614706cd6d46a6f6202bbedbc4bc4adab82d8c721990", 0xb6}, {&(0x7f0000001640)="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", 0x18a}, {&(0x7f0000001340)="8d9d3ae9e8c5dcca164815ac648eb8a86695af0542a90546cdceb80f847098d83a9d004745caf242902f56754498e643021816c1cf25d9c901abbbb6dddbcba2380fb1ec8947b8e47855d51b62e115d638843be6d8991ceb727b5ddee6362952e4148e2a3c7a60055af13ed11b95f44100fea6efa952dae8d54fa7735bfdea10b17d99cf51513f3a4fc89f6890c9e0f9a9a5c95542e0f8613ae8bc3c7a52042a11f5d95f255532cd18aee881bdf4f2101db6dccb135ba97dee13d8b2da6506f28653f80a857729384ede5feccbfafc24748a9af75bc9c089428997074d555b700544e1a7df17f70f90911b106ceea00fa06a7bcc4e6d", 0xf6}, {&(0x7f0000000240)="79c7776bf4492f7702235f52ab0000be2f8a72", 0x13}, {&(0x7f0000001440)="16e315af5c2579da5feaaa67527c559ec49d19a97abb9490348253fda686fa92aebac983de16d011fe655574647853d120f75487b8fbbd6278fda7edb5a26eb42644e919382a9d1ae7d10de42b685a0ae3e705f65a87f95cbdc8060d8c83556a94ae9f59a1fd402cc744c72fbe", 0x6d}], 0x7, &(0x7f0000001540)="60d3da162c50254a32df2b433a87a506d2a2f2a472af671bd18de98ca46fa3fc6ef190094d2fa301645767abb6b05be2a477c51067056a0c5584978c0723e5d9c365bae22e74a2b04b5c597ff168612d7855f655e43ea4b5ab686f54144a3b21a8d4a8f883d1af3b8f6a0c46a925c46706cb369b447e2b41394655a40a045261d732cb545793e728e612d3e060f17bb620c6bf2a01119d5cf012f43a", 0x9c, 0x6044801}, 0x8040) 21:02:01 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000080)={r5, 0x7fffffff}, 0x8) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$P9_RLCREATE(r4, &(0x7f00000000c0)={0x18, 0xf, 0x1, {{0x20, 0x0, 0x8}, 0x1ff}}, 0x18) sendfile(r1, r0, 0x0, 0x7ffff) 21:02:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd4b) 21:02:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x26e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:01 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x4000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x6, 0x5, [0x800, 0x8, 0x6, 0x2, 0x7fff]}, &(0x7f0000000080)=0x12) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={r4, 0x400}, 0x8) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:02:01 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) socket$rxrpc(0x21, 0x2, 0x2) 21:02:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd4c) 21:02:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1bb, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x26f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r2 = fcntl$dupfd(r0, 0xc0a, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) splice(r3, &(0x7f0000000100), r2, &(0x7f0000000140)=0x9, 0x7, 0x13) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SG_SET_RESERVED_SIZE(r7, 0x2275, &(0x7f0000000080)=0x9) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4068aea3, &(0x7f0000000000)={0x7b, 0x0, [0xfffffffffffffac0, 0x9, 0x1, 0x6]}) r8 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r8, 0x0, 0x0, 0x0) 21:02:01 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000000)='\x0051\xe5V\x91\xb5\xa8\x81\xc6\x91\xbd6\xc4M0\xdaQ\xdb\xf2\xdf\xfbf\xf0}h*\xd7\xd6\xb0\x8e\xe6\xf4*P\x05\xb3\xbet\x93\xee\x10\xfaW\x15\xaa\xb2\a\xcdi`\"\xb5\x04\t\x14^\xc7\xd5K\x0e\xdf\xee\xc7ea\xac1\xc6J\xd1S\xfe\r\x1f)W\x18\xa8\xee\x80\x15\xcd\r+\xce\x87\x169Q\x98\x8b\xdaq\x8eV4\x99g\xfe\xd2\x9fdN\xc7\rq\xd6u{\x90#\xb9O\xda\xc2\xd4\xe9C\x98\xcd\x9d>\xd0\xda\x89B\f\xcd<\xf2\xa8\xef\xad\x15\xc6tL\xc9]\r\x93?\x00\\9*z\xd4\x12\xd4=\xf8\x0f\x0e\xd6\x8c\xa7\xca\x85\xf4\xcc\x98\xdb\xb3~=\x81y\x19[(b\xa6\xe6(\xe7D\xed\vw\xd2\xc9\x19\x94\x8c\xea\x06\xd8\xc3\xf7NA[\xe9\x01\x85\x12\xfd]\xdd\xbd\xd1(.\a\'\xc5\xf8@\x7fz\xb2\xcdp\xf5\x14\xe1\xd0#F\xc8T\xe1x\x9c\a]He\x90?\x9bT\xf9\t\x8a:\x8e\'\xe6\xad^\xacO\x9cz\xb9t\xa3~E6\xa4\xbc\xeb\x94_l\xac\x85\n\x01\xf4{\xee\x96\xcb\xdf\x13\xcd\x96T\x9ft2\x01\x19\xb5\xbb\x16', 0x6) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) fadvise64(0xffffffffffffffff, 0x9, 0xf1db, 0x5) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:02:01 executing program 4: gettid() syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x2000) prctl$PR_SET_SECUREBITS(0x1c, 0x21) 21:02:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd4d) 21:02:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1bc, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x270, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:02 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00') r4 = accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r5 = gettid() wait4(0x0, 0x0, 0x0, 0x0) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xff, 0x3, 0x1, 0x0, 0x1, 0xff}, 0xb3}, 0xa) tkill(r5, 0x1e) 21:02:02 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) close(r1) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x9) sendfile(r1, r0, 0x0, 0x7ffff) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="000229bd7000fedbdf25010000000000000009410000004c00180000000362726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0xc040}, 0x2000818) 21:02:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd4e) 21:02:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1bd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x271, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x15, 0x2c4085) fadvise64(r0, 0x0, 0x0, 0x0) [ 3481.710344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48425 sclass=netlink_route_socket pig=25946 comm=syz-executor.3 21:02:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd4f) 21:02:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1be, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x260080) fadvise64(r0, 0x1, 0x6, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000040)={0x80000000, 0x4, @name="755054b985bdb8cc61d94f4a4a1836176d776665d7e6c96f7ab4c8ad84637405"}) 21:02:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x272, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='\xff\x00\x00\x1e\x00', 0x800, 0x100) fadvise64(r0, 0x0, 0x0, 0x0) 21:02:02 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) delete_module(&(0x7f0000000000)='/dev/keychord\x00', 0x200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:02:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd50) 21:02:02 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0xcffe2a48cd8c1290, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYBLOB="010003000af1d2df44c6aaaaaaaaaaaaa040e34ce338bc"]) r3 = creat(0x0, 0x0) r4 = accept(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) recvfrom$rose(r7, &(0x7f0000000240)=""/7, 0x7, 0x100, &(0x7f0000000280)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @null}, 0x1c) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) getpeername(r5, &(0x7f00000001c0)=@caif=@util, &(0x7f0000000140)=0x80) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r8 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) fcntl$getownex(r10, 0x10, &(0x7f0000000780)={0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000001000)="1aafdb517ccb933795b89218e7709e", 0xf}], 0x1, &(0x7f00000010c0)}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x0) ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f0000000100)=r11) tkill(r8, 0x1e) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r12, 0x0, r12) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(r12, 0x8902, &(0x7f00000000c0)=r13) 21:02:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1bf, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000000)) 21:02:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x273, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3482.266374] QAT: Invalid ioctl 21:02:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x442082) fadvise64(r0, 0x0, 0x0, 0x0) 21:02:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd51) 21:02:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1c0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x274, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:03 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r3, 0x2) dup(r3) sendfile(r1, r0, 0x0, 0x7ffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)) 21:02:03 executing program 4: syz_open_dev$loop(&(0x7f0000000280)='\x00\x00\x9e\x13K\xf0\t/9\xc3\x00', 0x0, 0x600481) 21:02:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd52) 21:02:03 executing program 0: r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, r0) pkey_free(r0) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) r2 = gettid() r3 = creat(0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r5, 0x800443d2, &(0x7f0000000240)={0x5, &(0x7f00000001c0)=[{}, {}, {}, {}, {}]}) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) r6 = gettid() wait4(0x0, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) tkill(r6, 0x1e) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U+', 0x88}, 0x28, 0x1) 21:02:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x275, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1c1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3482.846612] net_ratelimit: 14 callbacks suppressed [ 3482.846621] protocol 88fb is buggy, dev hsr_slave_0 [ 3482.856762] protocol 88fb is buggy, dev hsr_slave_1 21:02:03 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x2200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) recvfrom$packet(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64, 0x0, &(0x7f0000000340)={0x11, 0x1a, r1, 0x1, 0x1f, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newtclass={0x38, 0x28, 0x204, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xf, 0xfff1}, {0xf, 0x10}, {0x5, 0x5}}, [@TCA_RATE={0x8, 0x5, {0x8, 0x7f}}, @tclass_kind_options=@c_cbs={0x8, 0x1, 'cbs\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4004020) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r2, 0x0, 0x0, 0x0) [ 3483.007675] protocol 88fb is buggy, dev hsr_slave_0 [ 3483.013713] protocol 88fb is buggy, dev hsr_slave_1 21:02:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd53) 21:02:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1c2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x276, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:03 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x8000, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)={[{0x2b, 'rdma'}, {0x2d, 'memory'}, {0x13, 'io'}, {0x2d, 'cpu'}]}, 0x17) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) r2 = gettid() r3 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) r4 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r4, 0x1e) accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x12, 0x800) 21:02:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd54) [ 3483.406610] protocol 88fb is buggy, dev hsr_slave_0 [ 3483.411758] protocol 88fb is buggy, dev hsr_slave_1 21:02:04 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x8}}, 0x18) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) sched_getattr(r0, &(0x7f0000000000)={0x30}, 0x30, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x9da6286d9d49959f, 0x45203139be6cea25) wait4(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x1e) 21:02:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1c3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x277, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd55) 21:02:04 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f00000000c0)={0x400, 0xb609, 0x0, 'queue0\x00', 0x7fff}) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() creat(&(0x7f0000000000)='./file0/file0\x00', 0x90) wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:02:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x278, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1c4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3483.806632] protocol 88fb is buggy, dev hsr_slave_0 [ 3483.811784] protocol 88fb is buggy, dev hsr_slave_1 [ 3483.817016] protocol 88fb is buggy, dev hsr_slave_0 [ 3483.822103] protocol 88fb is buggy, dev hsr_slave_1 21:02:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) recvfrom$packet(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64, 0x0, &(0x7f0000000340)={0x11, 0x1a, r2, 0x1, 0x1f, 0x6, @remote}, 0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@empty, @ipv4={[], [], @empty}, @empty, 0x4, 0x7, 0x1ff, 0x0, 0x4, 0x8900000, r2}) 21:02:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd56) 21:02:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1c5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:04 executing program 3: r0 = open(&(0x7f0000000240)='./bus/../file0\x00', 0x902, 0x136) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x3) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x1, &(0x7f0000000000)=[0xee01]) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x3) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r7, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x3) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r10, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r10, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x3) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r12, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r12, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x3) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r14, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r14, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x9, &(0x7f00000000c0)=[0xee01, r10, 0xffffffffffffffff, 0xffffffffffffffff, r12, r14, 0xee00, 0xffffffffffffffff, 0x0]) r16 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x3) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r17, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r17, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x6, &(0x7f0000000100)=[r4, r5, r7, r8, r15, r17]) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r19 = dup(r18) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:02:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd57) 21:02:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x279, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:04 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x10001, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:02:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000080)={r5, 0x6}) 21:02:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1c6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:04 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x110) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x96, 0x4040) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000001c0)=""/241) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r4 = gettid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timerfd_gettime(r6, &(0x7f00000000c0)) wait4(0x0, 0x0, 0x0, 0x0) tkill(r4, 0x1e) 21:02:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x27a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x02\x00', 0x0, 0x101000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000000)) fadvise64(r0, 0x0, 0x0, 0x0) 21:02:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1c7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd58) 21:02:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x27b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:05 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) 21:02:05 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x20) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200), 0x4) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000040)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000380)=0x1ff, 0xfffffffffffffd68) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x100, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000000c0)={r10, @in={{0x2, 0x0, @empty}}, 0x699}, 0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f00000000c0)={r10, 0x5f, "700f580a6d33cc9489c31a44aebefbd17ffe49c23a79ea81482c84dc61e433f0b80871d969063cae7267e8c51f74180f07d48d5262790f8501679734760bcbf4aa51a224c4ef1306c7495f8b985c10772cb40facaf2f50b54274800288891e"}, &(0x7f0000000180)=0x67) r11 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$EVIOCGLED(r11, 0x80404519, &(0x7f00000002c0)=""/107) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) 21:02:05 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x185800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000080), 0x0) fsync(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x13}}, 0x10) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x500000d, 0x4000010, r4, 0x2a56c000) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'bpq0\x00', 0x6}) r7 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5, 0x10000) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PIO_UNIMAPCLR(r8, 0x4b68, &(0x7f0000000140)={0xffff, 0xf5, 0x90}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r9, 0xc0096616, &(0x7f0000000180)) fadvise64(r7, 0x0, 0x0, 0x0) 21:02:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1c8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x27c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd59) 21:02:05 executing program 4: fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:02:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1c9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x27d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:05 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KDMKTONE(r0, 0x4b30, 0x7ff) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f0000000040)={0x7, 0x100, "2654cad81c63aefa92ba2150ac4c8b05a1acf99b576dd155438c7eb079e62683", 0x9, 0x6, 0x8, 0x8, 0x1}) fadvise64(r1, 0x0, 0x0, 0x0) 21:02:06 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:02:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd5a) 21:02:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x4) 21:02:06 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null}) sendfile(r1, r0, 0x0, 0x7ffff) 21:02:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1ca, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x27e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd5b) 21:02:06 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x80000001, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x1) inotify_rm_watch(r0, r3) r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r4, 0x0, 0x0, 0x0) 21:02:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1cb, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x27f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:06 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000002280)={0x8, 0x120, 0xfa00, {0x2, {0x2f7, 0x10001, "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", 0x7f, 0x0, 0x9, 0x8, 0x6, 0x6, 0x1, 0x1}, r4}}, 0x128) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000023c0)) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) gettid() wait4(0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f00000001c0)={0x2, 0x0, 0x2080, {0x10000, 0x3000, 0x1}, [], "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", "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"}) tkill(r1, 0x400f) 21:02:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd5c) 21:02:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd5d) 21:02:06 executing program 4: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept4$netrom(r1, &(0x7f0000000140)={{0x3, @null}, [@rose, @bcast, @netrom, @rose, @bcast, @remote, @null, @rose]}, &(0x7f00000001c0)=0x48, 0x180800) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0xffffffffffffff0b, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) fadvise64(r2, 0x8002, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) recvfrom$packet(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64, 0x0, &(0x7f0000000340)={0x11, 0x1a, r10, 0x1, 0x1f, 0x6, @remote}, 0x14) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000200)={@broadcast, @empty, r10}, 0xc) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f0000000100)={0xa4, 0xc, 0x4}) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x3, @bcast, r5}) 21:02:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1cc, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:07 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4200, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000080)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r5, 0x80045700, &(0x7f0000000000)) 21:02:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x280, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) fadvise64(r0, 0x0, 0x0, 0x0) 21:02:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd5e) 21:02:07 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r4 = gettid() r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000780)={0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB='\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYBLOB], 0x50}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000001000)="1aafdb517ccb933795b89218e7709e", 0xf}], 0x1, &(0x7f00000010c0)}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = dup(0xffffffffffffffff) r11 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @dev, 0x6}, 0x1c) getsockopt$sock_buf(r11, 0x1, 0x19, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) ioctl$sock_FIOGETOWN(r11, 0x8903, &(0x7f0000000000)=0x0) wait4(r12, 0x0, 0x40000000, 0x0) r13 = getpgid(r12) r14 = getpid() sched_setattr(r14, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x80000000000000, 0x0, 0x4}, 0x0) r15 = getpid() sched_setattr(r15, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r16 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r17 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r18 = fcntl$dupfd(r16, 0x0, r17) r19 = gettid() ioctl$BLKTRACESETUP(r18, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x5, 0x81, 0x1, r19}) r20 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r21 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r22 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r23 = fcntl$dupfd(r21, 0x0, r22) r24 = gettid() ioctl$BLKTRACESETUP(r23, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x81, 0x1, r24}) r25 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r26 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r26, 0x0, 0x0) r27 = getpgrp(0x0) waitid(0x0, r27, &(0x7f00000002c0), 0x5, 0x0) r28 = getpgid(r27) r29 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r29, 0x8904, &(0x7f0000000000)=0x0) r31 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r32 = openat$cgroup_ro(r31, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r33 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r34 = inotify_init1(0x0) r35 = gettid() fcntl$setown(r34, 0x8, r35) r36 = getpid() r37 = socket(0xa, 0x3, 0x8) r38 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r37, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r38, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r37, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r40 = gettid() waitid(0x0, r40, &(0x7f0000000780), 0x8, &(0x7f0000000800)) sendmsg$key(r37, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r39, @ANYRESDEC=r40]], 0xfffffffffffffe56}}, 0x20004850) r41 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r42 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r43 = dup2(r42, r41) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x4, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00u#c1y\x8a\xc6^\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r43, 0xc08c5334, &(0x7f0000000200)) r44 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r44) timer_create(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r44}, 0x0) kcmp(r44, r44, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r44, 0x0, 0x0) r45 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r44, r45, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r46}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r40, r43, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r46}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r46}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r46}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r36, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r46}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r46}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r35, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r46}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r33, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r46}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r32, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r46}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r30, r29, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r46}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r28, r26, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r46}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r46}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r24, r25, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r46}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r46}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r19, r20, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r46}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000040)='GPLvmnet0\\]GPL&systemeth1\x00', r46}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00', r46}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r14, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000000c0)='*\x00\x00\x00/Ppp\x00', r46}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r13, r10, 0x0, 0x3, &(0x7f0000000100)=',)\x00', r46}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r46}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000140)='team0\x00', r46}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r46}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000002c0)='\x00', r46}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r7, r9, 0x0, 0x3, &(0x7f0000000140)='(:\x00', r47}, 0x30) r48 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r48, 0x0, r48) r49 = fcntl$dupfd(r5, 0x0, r48) r50 = socket$inet6_tcp(0xa, 0x1, 0x0) r51 = fcntl$dupfd(r50, 0x0, r50) ioctl$PERF_EVENT_IOC_ENABLE(r51, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(r51, 0xc0106426, &(0x7f00000000c0)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r49, 0x40086425, &(0x7f0000000100)={r52, 0x3}) wait4(0x0, 0x0, 0x0, 0x0) tkill(r4, 0x1e) r53 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0xd95) fcntl$getownex(r53, 0x10, &(0x7f0000000780)={0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r54, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB='\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r53, @ANYBLOB="54826f32698c31154ec7941b441cd32c0d481861f5c517215316b10c4c054bd62f897904af6f2ca478959955045c68eeeb1c71ee6e8a1bed9d4628ebdb7b3a729c84356399e925e21d7fe7be4c0aba86586d2f1fd3228a5622f28cd2071d1e501d98fd6588b29a3e42ce5f60ff3e363c450c3dfb43d18c9a8969036aeaff51143283be0da05043978696"], 0x50}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000001000)="1aafdb517ccb933795b89218e7709e", 0xf}], 0x1, &(0x7f00000010c0)}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x0) fcntl$setown(r3, 0x8, r54) 21:02:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1cd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x281, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:07 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x20000) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000780)={0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB='\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB], 0x50}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000001000)="1aafdb517ccb933795b89218e7709e", 0xf}], 0x1, &(0x7f00000010c0)}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x0) r6 = getpgid(0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400, 0x0) kcmp(r5, r6, 0x6, 0xffffffffffffffff, r7) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fadvise64(r2, 0x0, 0x0, 0xa) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VT_RESIZE(r9, 0x5609, &(0x7f0000000040)={0x8, 0xcbbb, 0x26}) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000000c0)=""/222) 21:02:07 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000002000e5be000000010000000000040000001400c7e90a1eccdd3149449b47a52c7caf0100fe0000000002000000000000"], 0x34}}, 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0xffffffffffffff18}], 0x1, 0x81003) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f00000000c0)={0x7f, "f70cf7a7f24f174298f3d542e2e662f4ef6f91a85a5c1849610eedad788d6d53", 0x4, 0x41e59999, 0x7ff, 0x2, 0x7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:02:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1cd5f) 21:02:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1ce, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:07 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0xe0081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x58045}, 0x0, 0xffffffffffffffff, r3, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r4 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x4, 0x400000) ioctl$KDSETMODE(r5, 0x4b3a, 0x1ff) tkill(r4, 0x1e) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0503080000000005001b25759275e7182a5464ad38a76a9c212d9e1f00b50281e5e06a6a32"], 0x25, 0x3) 21:02:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x282, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:07 executing program 4: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fadvise64(r1, 0x1fe, 0x2, 0x1) 21:02:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x283, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:07 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000240)={'veth1\x00', 0x7ff}) sendto(0xffffffffffffffff, &(0x7f0000000280)="ec7bad1a6aec4b7406b117d26e5822b00f487ef4275ee43e737fd541565839157f304f52788d0e219c7af618ffc18f28575409832c7113ee99e2351bed34cff5f27150090f4f6dedef22fdc49881dfb864b9d535248d1a35b8c43a0c365ee125c016c94452778632c128229b2176d3cc33fe30c184dda8ac9a11e046d509e80acb3b4a732d16a1ec941dd25aca200cdfb830d485efbfb8c26f4c681b8fd82ff0abf68b84809fde7906c0f24299b94119601992b1b769ef112bac16c45743b897c7da14307da87efe4e8afb2ea206b9611f01968e25210e7f36", 0xd9, 0x100000a0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$netrom_NETROM_T2(r5, 0x103, 0x2, &(0x7f00000001c0)=0x3, &(0x7f0000000200)=0x4) r6 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r6, 0x1e) write$cgroup_pid(r3, &(0x7f0000000000)=r1, 0x12) r7 = request_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='&nodevproc\x00', 0xfffffffffffffffd) keyctl$invalidate(0x15, r7) 21:02:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x7ffffffc) 21:02:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1cf, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xffffffff, 0x9000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000040)=0x400, 0x4) 21:02:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x284, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffff88809f835738) 21:02:08 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1d0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000006131e504e345ef968a41de2c682b586f4b0c147dd7bfceb37b6ab4de287ba677263abc2cc0bca411561d479802e86f6372b894964862b1c7430cc6c8e74473c0c5284bf01b25243d5dc853199336a60905aab7da02e2de7b69c5455afb2f01d2724679b7903acab94756dbc0893fabb19c31f9b372c737327d2c231214edcd91cd57c6cd865583dbcdcc364830c7efd306c21ec289cb088d2b7172deeff81e", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @empty}}, 0x699}, 0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000080)={r4, 0x2a, "08133973b25892acc9d388718fba7ad225adb314babe1348dc1aaab66cac0d6bd93260bba62a906254fb"}, &(0x7f00000000c0)=0x32) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuacct.usage_all\x00', 0x0, 0x0) 21:02:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x285, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffff88809f835e38) 21:02:08 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newrule={0x34, 0x20, 0xd5822192f3f8bee5, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @local}]}, 0x34}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r10, 0x0, r10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000001340)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="737ef309ccfe1f337733f839edffed2196d4b60e567299ee494950bc4c51d4", @ANYRESHEX=0x0, @ANYRES32=r1, @ANYBLOB="93ff34ec47cdda6ceba7eadbab4858c250bf6a67f8610a1b42d9f2a0c9e9f5c1a8e3791fc62bcda8334c2a3f672b83313fd439c0537ed2e3822607464145d3581976bec086c8b824088b68055a7532d67bcde92dbb7a5dda0e1209f69d8d45267291c4f8514093105b68d1ebe5e4e86d5d8207a5253a6d0f94a95c6248254855f4e6b3e397212e084bb4e7bdd3c988c5e7a44697db30cb6e40a594c5f57cb152ddf6c1cfb38012e634d9e4d1ea9e44c8", @ANYBLOB="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", @ANYRES32=0x0, @ANYPTR], @ANYRESOCT, @ANYRES16=r6, @ANYRESOCT=r7, @ANYRES16=r9, @ANYRESHEX=r10, @ANYRES64=0x0], &(0x7f00000000c0)=0x7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x699}, 0x90) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x5, 0x8, 0x81, 0xf23, r11}, 0x10) tkill(r3, 0x1e) 21:02:08 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1d1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3487.976634] net_ratelimit: 16 callbacks suppressed [ 3487.976649] protocol 88fb is buggy, dev hsr_slave_0 [ 3487.986788] protocol 88fb is buggy, dev hsr_slave_1 [ 3487.991964] protocol 88fb is buggy, dev hsr_slave_0 [ 3487.997095] protocol 88fb is buggy, dev hsr_slave_1 21:02:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x286, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xffffffffff7ffffc, 0x3c2241) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000022c0), &(0x7f0000002300)=0x4) r2 = fcntl$dupfd(r1, 0x0, r1) sendmmsg$sock(r1, &(0x7f00000021c0)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x3, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="a884145c367108bc8d72668b56ba1b888752f7408757d74d91ac34d6cffeada20afa777761e6c1629bf15c3b4e10698f0a9df3e8c89937334272b39493f221e8444e49816f5bc11276021255465c0d86773c05b458c561ce799c26ae4f03028a270ebe32b3df5feaad0758a17078277b60d12623ec9c12a743fee199e15bfc2053c4706a8c2a2e266c38b4dd24b79028e1d47e6df35cf7175922956716b233eba958543cd2014d7f971b178f6e97bb2f697c547cc768dde18a131ee1af4a5eba651f970946a5c2bf12895aec7b02b72e1c6342a3052226fced9ad15ef07dbe", 0xdf}, {&(0x7f0000000180)="b041ebba7e6e098727c143ee83d1705660e62da35c51ecd98b2ca6a4e42832fc3d2f7a2507174830982aec9450be94d82ec1b2f9d7d059af4ab7fd84436d3c43f11de7b0519ea256c34844d9c98cfff9370daa4f34bc0fdf6109290665f4e91d4eaa2a19aa1ccb99470147f26b3d8601f08f0f7327123ac887ddd81f71d6b985805d0e9db82cfba0995a042efa5a39b1665057281a8bdd052b8d359d0e2017a62c50ce2e23834051b6e9fd8371675ed1985d00bfb6388a", 0xb7}, {&(0x7f00000002c0)="87197252e6691de3b83a8b129289e10e3c769d9bf8345540f55d55f4812b5b59856474fe590d8aa6c03b860cfb35dfbb86e3f4c30db505ae778d62fd5eeb62aac760c631c92f6f18cd8e7ed404c9624d6822df333b0a7bd9be73f7872f1e1ca521c716541f90c547e42beaedfaa1e081d84e15180ee8cfc662aa4bc46b609ca20a1b0d69df1a5ce58fe0", 0x8a}, {&(0x7f0000000380)="170ef3145b1f2b9e9f28e424e11c8846b1c019738b5d7ec2021bf8ff1e42305f035cdd9547e3f03309a86d3b2bade1bbf609682529d113c19b5e2700172fb585a054dd97f3a8f929b0c507b5e5ea4ad92f776859b1d00555b128c737188ab67c3a40799e9f2d18be0b8ef4ea056165f6f4e549db1e6cb5b6a85208b9c1d22d3b9dfc2de795a0e98feb1e76a9190804aeb93830113f01c4a9b6670920544703fcdacdcbd2ade0d4d080317743d3e3c90addcec117820348887e1f91d8a5b3cf3512c987625789a705489c6274c5a6d7f6993178ff9c0d898c8f474dda0cf28ea246ae8a", 0xe3}], 0x4, &(0x7f0000000480)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xfffffffb}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x90}}, {{&(0x7f0000000540)=@pppoe={0x18, 0x0, {0x1, @dev={[], 0xa}, 'ipddp0\x00'}}, 0x80, &(0x7f0000000780)=[{&(0x7f00000005c0)="5ccdd523e9499b5c702f0aea2f03817a6f15ec703823924243f6125321f6fc75e765ecf05c1120d8e88965cf585162db61e43c1bcdacb807848da09c78bb42233ecfff8dbed2176bd59a96dd436980049317360cb5b90e94222dff3df52d3c465cf3b7a637627ce1d40df6c27ad54c586c596e0f492d14614604a448133c5e0c993a751007be313ae0250827680369e0cef87afcd1ffa56656241bc1c6cb4589ea621920db20518fdd3e761c9d50a1d4aa7011232b549dffd73860d8a76def9d3705bee1d03caa2f0073bafea034efb0db508e5b1bcdc936ce09aae0d30873c0fa15303c5468a2ce21c848b07014786bf313583d3a8b", 0xf6}, {&(0x7f00000006c0)="e1399502df21500687755d289f87972a7f452c1393cb1e4a7c5d9b6acd7486496ad0ea6b085197927dfebb379bcdde07ae57aff62b1109dfc78048d5ecf2a370cba074c36cad8206ff836500f28ed58fca3f60b5eb479fa100d11a85bef1599b349df3bbd8b163f4c721de79f0e5bb76dd2408a51a560d5a1e8e16ce387aab9659ae4aa012c9f452950a", 0x8a}], 0x2, &(0x7f00000007c0)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x56a}}], 0x78}}, {{&(0x7f0000000840)=@nfc={0x27, 0x0, 0x85, 0x1}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000008c0)="395c3099d56ea60386f29808b9acf062e0bb25eaf091f233fd4d87ca72e1d085abd1bfd25ea0ac00d9e678a1eb8b7608829450ce2c0d569d57db1138d26c0213f85bf5a0ae50965d817b6a0e027b2ed99216bcaa02ab7925cdc5f3b75071c29f1bf16a281a9082fb4982527a373f5a12c923efd1a2c0373b5474a4c79ced5c33ade93eaadea2d012a3801773333ff8ede84e6479a096defb9f39b164bde1a36c7623bb63201a6188a51ecdf63d532079e03759020c3228b2893145fea2", 0xbd}, {&(0x7f0000000980)="470eeb28ee106234fb29079b02ed2ad98fb1d8e1cf05978c4cbcacd7f2902cfe117caa70efa9ac55873aa2b3210b36ae2e98b8c3ff502735cb8a0e2e47e846a4f64742cfa576b631b2db574896dd529c2c49a55dad37b4aaa7ce06d567c6462bd8f1c2e41b2b71173b25b58b3352afc800a8a3", 0x73}, {&(0x7f0000000a00)="f7d01b9bac44e67475d922a36f7020bceb9513737862d9a61672251c874a3dae28cebe5923d8fda0b2349873e7f95532acede0cb6527a6004c132d760c37f1515f8ba62a565bedf83a70420677587471e1008405e4b83f08e0708cea24ca9a652cb24b3983f694844680624577030037c05d41cb4d452fdc2c20ca118e89d8a763cc599089d548d4e59e779c6ef4d0ea39d70938287110ab7006f38fe4d71b91812dd570ec744885f32a5cf4b1ca6fa49562cbac71971e92322dd02c0168614845e0f37a", 0xc4}, {&(0x7f0000000b00)="85fffdcf0d11a8a8bbc70559d4302885554265320d157b49510d0fdffd7b6a118b30e8a66061a470ace3d4dfc37f73c396d9351776c901bcd71dce7784c6bc2dca4b3ccb0a995ec47f9044e91ca64d2f98b316e48fcc05524479047286bdfd481b6450ce", 0x64}], 0x4, &(0x7f0000000bc0)=[@timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x3b3d}}, @mark={{0x14, 0x1, 0x24, 0xfffffffe}}, @timestamping={{0xfffffffffffffed5, 0x1, 0x25, 0x9b6}}, @mark={{0x14, 0x1, 0x24, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}], 0xc0}}, {{&(0x7f0000000c80)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000d00)="5c8d2334829db6f17b4712343aa9195ba3ad4fac0ac115a2e6afc1676d11b408258e4badffc45e6cdf1df0323ac279eba424aeece320b34172dc79c06e51604da0349b7d112f79c2fea9518b902282c3d1ebfec07133ce84ffe03429101ddbd06e50379fd2d2b9c3c889731d36038bab850938e6997e583c64bf", 0x7a}, {&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000001d80)="a40d11119b15c2a8e27aa46ccb66b1563e2db91ba4450cdc263cf2c4dd910d4b7342f6d0c23e458c45cdc04a6ec9bbbd6a37184dcf1ee005243345385aa4fcb13ceef93c510081d864653c59e53dca6611c8daf8ed269124bc4af3", 0x5b}, {&(0x7f0000001e00)="32bc09a57a768a8f159b64c9ae73e3033035435ca4a9440628932b4e9e82e8decf9bc05ab8db0e3f65dfd4d125d922bfe4595459c560386cc161ca480fdc934f1f0ba9578c824bda6a3f8efd966a4072d7c7b1cae47a118016f36fb55f5100f918903c", 0x63}, {&(0x7f0000001e80)="b6271c25e699748bed90ac90f7ed5dedb55981e95d108d070a3570333ed050f3cb29505a854d9017101c7d4139916e87175a2c1359b63a00b8f089cacaddd01bf6530e68f353adc94b3d263d02cad8cc3d52bbb0393d12e6fc443a8df15db3fffb5792f7acdbcaa632ebc5c8df12072963bad2a77a12b93ffa52a7bbaf3b3411d6942fee06616b6327c22f261302a22cffc8665ec49344f8e344e0e20c8c8b048dee0840522593097dd3f35c2c9903fa8058168238", 0xb5}, {&(0x7f0000001f40)="25342a2e8373b8e28d2402efe1add4be9583de16ea3d8aeebfbdf144268f3073d909b5596d89e0557678c0dda4c3b7947a71779067a71171a44d8221c327d6787e7b45aed01d841d873b1a0e7a5b0ca4f71dbd6b1d1e5f64416ff46d19d1633f2b2840df089c2a5d47117071e5f160c9e58fe394e8029ed5e433f1389aa2cc0509025b0ea4da963efc24dc605440a9f819022186a4e58ad356edee91e915ecd0a7230f48edbd9d1950f21d95015e62ebfc3ad808236e876004676a7e6275aa50d5d754ce1d033d5f5a16c187c69d3065fed4c46dbddd021a3befe1b17f7a26b05e", 0xe1}], 0x6, &(0x7f00000020c0)=[@timestamping={{0x14, 0x1, 0x25, 0x3d}}, @mark={{0x14, 0x1, 0x24, 0x3ab}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0xe824}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xbc}}, @timestamping={{0x14, 0x1, 0x25, 0xfb}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xd8}}], 0x4, 0x4c804) fadvise64(r0, 0x0, 0x0, 0x0) write$P9_RMKDIR(r2, &(0x7f0000002340)={0x14, 0x49, 0x1, {0x529378c965100af0, 0x1, 0x7}}, 0x14) 21:02:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffff88809ffdd498) 21:02:08 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1d2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:08 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000000)=0xa82, &(0x7f00000000c0)=0x4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:02:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x287, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffff88809ffdd578) 21:02:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0xfffffffffffffffd, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000080)=0x400) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$selinux_access(r2, &(0x7f0000000000)={'system_u:object_r:dhcpc_var_run_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x2}, 0x68) fadvise64(r0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x3) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, r6) 21:02:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1d3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) fadvise64(r0, 0x4, 0x100, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) 21:02:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x288, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffff88809ffdd9d8) 21:02:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='rdma.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x12) r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r3, 0x0, 0x0, 0x0) 21:02:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffff88809ffddd58) 21:02:09 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x289, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) 21:02:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1d4, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x289, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1d5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffff88809ffdde38) [ 3489.087977] protocol 88fb is buggy, dev hsr_slave_0 [ 3489.094300] protocol 88fb is buggy, dev hsr_slave_1 [ 3489.246612] protocol 88fb is buggy, dev hsr_slave_0 [ 3489.251763] protocol 88fb is buggy, dev hsr_slave_1 21:02:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x28a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:09 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000000)) 21:02:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = dup(0xffffffffffffffff) r2 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @dev, 0x6}, 0x1c) getsockopt$sock_buf(r2, 0x1, 0x19, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) wait4(r3, 0x0, 0x40000000, 0x0) r4 = getpgid(r3) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x80000000000000, 0x0, 0x4}, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r9 = fcntl$dupfd(r7, 0x0, r8) r10 = gettid() ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x5, 0x81, 0x1, r10}) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r12 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r13 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r14 = fcntl$dupfd(r12, 0x0, r13) r15 = gettid() ioctl$BLKTRACESETUP(r14, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x81, 0x1, r15}) r16 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r17 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r17, 0x0, 0x0) r18 = getpgrp(0x0) waitid(0x0, r18, &(0x7f00000002c0), 0x5, 0x0) r19 = getpgid(r18) r20 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r20, 0x8904, &(0x7f0000000000)=0x0) r22 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r23 = openat$cgroup_ro(r22, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r24 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r25 = inotify_init1(0x0) r26 = gettid() fcntl$setown(r25, 0x8, r26) r27 = getpid() r28 = socket(0xa, 0x3, 0x8) syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r28, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) r29 = socket$inet6_tcp(0xa, 0x1, 0x0) r30 = fcntl$dupfd(r29, 0x0, r29) ioctl$PERF_EVENT_IOC_ENABLE(r30, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r30, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0xfffffffffffffe49) sendmsg$key(r28, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r32 = gettid() waitid(0x0, r32, &(0x7f0000000780), 0x8, &(0x7f0000000800)) sendmsg$key(r28, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r31, @ANYRESDEC=r32]], 0xfffffffffffffe56}}, 0x20004850) r33 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r34 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r35 = dup2(r34, r33) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x4, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00u#c1y\x8a\xc6^\xbf}\xdd\x00\x00\x00\x00\x00\x00\xb4za\xadS\xd8\x150\x15\x00', 0x800}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r35, 0xc08c5334, &(0x7f0000000200)) r36 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r36) timer_create(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r36}, 0x0) kcmp(r36, r36, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r36, 0x0, 0x0) r37 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) r38 = socket$inet6_tcp(0xa, 0x1, 0x0) r39 = fcntl$dupfd(r38, 0x0, r38) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r39, 0xfffffffffffffd49, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r41 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r41, 0x10, &(0x7f0000000780)={0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r42, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB="ff65951d51d4228486e4bb926f18920d03b4583f1f27ec938e245b904cb8c366c4edf51f4a8d2d3be7b5d327d8807613ccb2929131f4de39", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r41, @ANYBLOB], 0x50}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000001000)="1aafdb517ccb933795b89218e7709e", 0xf}], 0x1, &(0x7f00000010c0)}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r42, r37, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r32, r35, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r40}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r40}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r40}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r27, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r40}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r40}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r26, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r40}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r24, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r40}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r23, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r40}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r21, r20, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r40}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r19, r17, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r40}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r40}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, r16, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r40}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r40}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r10, r11, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r40}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000040)='GPLvmnet0\\]GPL&systemeth1\x00', r40}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00', r40}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r5, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000000c0)='*\x00\x00\x00/Ppp\x00', r40}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r4, r1, 0x0, 0x3, &(0x7f0000000100)=',)\x00', r40}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r40}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000140)='team0\x00', r40}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r40}, 0xc) r43 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r40}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={r0, r43}) r44 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r44, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x5}) 21:02:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1d6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffff8880a01c7498) 21:02:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x28b, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1d7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3489.650570] protocol 88fb is buggy, dev hsr_slave_0 [ 3489.656596] protocol 88fb is buggy, dev hsr_slave_1 21:02:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffff8880a01c7738) 21:02:10 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r0, 0x1ff, 0x10}, 0xc) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) r2 = gettid() r3 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x1, 0x2) write$9p(r4, &(0x7f00000001c0)="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", 0x1000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) r5 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r5, 0x1e) 21:02:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x28c, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1d8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x28d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffff8880a01c7d58) 21:02:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1d9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:11 executing program 4: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x208700) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) fadvise64(r0, 0xfffffffffffffffc, 0x0, 0x0) 21:02:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x28e, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x802, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000100)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) [ 3490.713295] mkiss: ax0: crc mode is auto. 21:02:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1da, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x28f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 3490.803879] mkiss: ax0: crc mode is auto. 21:02:11 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = gettid() r1 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="610be508", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}, 0x699}, 0x90) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000000c0)={r9, @in={{0x2, 0x0, @empty}}, 0x699}, 0x90) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={r9, 0x4}, &(0x7f0000000100)=0x8) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r10 = gettid() r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) setsockopt$inet_udp_encap(r12, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x80600, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = fcntl$dupfd(r13, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_MD5SIG(r14, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}}, 0x0, 0x5ac3, 0x0, "ed0e8eb9fe4470e9b5352ae5008d8f00267093ea05a0a2ca6e9e6ec2b60f7e13986de3a3f76ebad1cd3a1662e46ea036718e2a00cf052b003dfe9f5d56003a0c3133a477a6a442d037a8eeddcba6a4fe"}, 0xd8) tkill(r10, 0x1e) 21:02:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x290, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1db, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000100)={0xfffffff9, 0x28c0, 0x738d3c1f, 'queue1\x00', 0x100}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x1) 21:02:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x1, 0x0) fadvise64(r0, 0x0, 0x4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x1a7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000000), 0x4) 21:02:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x291, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1dc, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:12 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0, 0x0, r3}, 0xfffffffffffffd58) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='coredump_filter\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r5 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r5, 0x1e) 21:02:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x292, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/\xb6:op#\x00', 0x0, 0x24200) fadvise64(r0, 0x40000000000, 0x2, 0x96d483bdfed287c4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000080)={0x0, 0x18, &(0x7f0000000000)="d7dd54729486a0dfe7bd670e43e3ca512e3de2f88b981920e28a2e72ca13617594fbd827bc85a8d849fddbcb70a12da5510990b57d99e075023c6497d76a3308db1f5f1b214d9fad6ab264cf0a41", {0xff, 0x4, 0x52424752, 0x3, 0x4, 0x100, 0x0, 0x6}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x2, {0xffffffff, 0x1, "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", 0x77, 0x7, 0x2, 0xfa, 0x6d, 0xfc, 0x7}, r5}}, 0x128) 21:02:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1dd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:12 executing program 4: fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r1, 0x14, 0x1, 0x1, &(0x7f0000000000)=[0x0], 0x1}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={@null=' \x00', 0x7, 'ip_vti0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x84, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 21:02:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1de, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x293, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x400) fadvise64(r0, 0x0, 0x0, 0x0) socket(0x2, 0x800, 0x2a) [ 3493.246646] net_ratelimit: 14 callbacks suppressed [ 3493.251665] protocol 88fb is buggy, dev hsr_slave_0 [ 3493.256954] protocol 88fb is buggy, dev hsr_slave_1 [ 3493.336622] Bluetooth: hci0: command 0x1003 tx timeout [ 3493.342029] Bluetooth: hci0: sending frame failed (-49) [ 3493.406668] protocol 88fb is buggy, dev hsr_slave_0 [ 3493.411811] protocol 88fb is buggy, dev hsr_slave_1 [ 3493.806596] protocol 88fb is buggy, dev hsr_slave_0 [ 3493.811764] protocol 88fb is buggy, dev hsr_slave_1 [ 3494.206653] protocol 88fb is buggy, dev hsr_slave_0 [ 3494.211760] protocol 88fb is buggy, dev hsr_slave_1 [ 3494.216973] protocol 88fb is buggy, dev hsr_slave_0 [ 3494.222086] protocol 88fb is buggy, dev hsr_slave_1 [ 3495.406804] Bluetooth: hci0: command 0x1001 tx timeout [ 3495.412227] Bluetooth: hci0: sending frame failed (-49) [ 3497.486751] Bluetooth: hci0: command 0x1009 tx timeout [ 3498.366686] net_ratelimit: 16 callbacks suppressed [ 3498.371680] protocol 88fb is buggy, dev hsr_slave_0 [ 3498.376725] protocol 88fb is buggy, dev hsr_slave_1 [ 3498.381809] protocol 88fb is buggy, dev hsr_slave_0 [ 3498.386840] protocol 88fb is buggy, dev hsr_slave_1 [ 3499.486714] protocol 88fb is buggy, dev hsr_slave_0 [ 3499.491882] protocol 88fb is buggy, dev hsr_slave_1 [ 3499.646690] protocol 88fb is buggy, dev hsr_slave_0 [ 3499.651817] protocol 88fb is buggy, dev hsr_slave_1 [ 3500.046651] protocol 88fb is buggy, dev hsr_slave_0 [ 3500.051767] protocol 88fb is buggy, dev hsr_slave_1 21:02:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1df, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x294, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:22 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000780)={0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB='\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB], 0x50}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000001000)="1aafdb517ccb933795b89218e7709e", 0xf}], 0x1, &(0x7f00000010c0)}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}], 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = dup(0xffffffffffffffff) r9 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @dev, 0x6}, 0x1c) getsockopt$sock_buf(r9, 0x1, 0x19, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000000000)=0x0) wait4(r10, 0x0, 0x40000000, 0x0) r11 = getpgid(r10) r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x80000000000000, 0x0, 0x4}, 0x0) r13 = getpid() sched_setattr(r13, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r14 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r15 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r16 = fcntl$dupfd(r14, 0x0, r15) r17 = gettid() ioctl$BLKTRACESETUP(r16, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x5, 0x81, 0x1, r17}) r18 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r19 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r20 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r21 = fcntl$dupfd(r19, 0x0, r20) r22 = gettid() ioctl$BLKTRACESETUP(r21, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x81, 0x1, r22}) r23 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r24 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r24, 0x0, 0x0) r25 = getpgrp(0x0) waitid(0x0, r25, &(0x7f00000002c0), 0x5, 0x0) r26 = getpgid(r25) r27 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r27, 0x8904, &(0x7f0000000000)=0x0) r29 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r30 = openat$cgroup_ro(r29, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r31 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r32 = inotify_init1(0x0) r33 = gettid() fcntl$setown(r32, 0x8, r33) r34 = getpid() r35 = socket(0xa, 0x3, 0x8) r36 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r35, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r36, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r35, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r38 = gettid() waitid(0x0, r38, &(0x7f0000000780), 0x8, &(0x7f0000000800)) sendmsg$key(r35, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r37, @ANYRESDEC=r38]], 0xfffffffffffffe56}}, 0x20004850) r39 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r40 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r41 = dup2(r40, r39) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x4, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00u#c1y\x8a\xc6^\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r41, 0xc08c5334, &(0x7f0000000200)) r42 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r42) timer_create(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r42}, 0x0) kcmp(r42, r42, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r42, 0x0, 0x0) r43 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r42, r43, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r44}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r38, r41, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r44}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r44}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r44}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r34, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r44}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r44}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r33, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r44}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r31, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r44}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r30, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r44}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r28, r27, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r44}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r26, r24, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r44}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r44}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r22, r23, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r44}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r44}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r17, r18, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r44}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r13, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000040)='GPLvmnet0\\]GPL&systemeth1\x00', r44}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00', r44}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r12, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000000c0)='*\x00\x00\x00/Ppp\x00', r44}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r11, r8, 0x0, 0x3, &(0x7f0000000100)=',)\x00', r44}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r44}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000140)='team0\x00', r44}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r44}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r5, r7, 0x0, 0x1, &(0x7f0000000000)='\x00', r44}, 0x30) r46 = socket$inet6_tcp(0xa, 0x1, 0x0) r47 = fcntl$dupfd(r46, 0x0, r46) ioctl$PERF_EVENT_IOC_ENABLE(r47, 0x8912, 0x400200) kcmp$KCMP_EPOLL_TFD(r45, r0, 0x7, r2, &(0x7f0000000100)={r47, r3, 0x8}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r48 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r48, 0x1e) 21:02:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x22a7d) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) fadvise64(r0, 0x0, 0x3ff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x23ba5dafe364574d) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000080)={0x3, 0x70, 0x7f, 0x1, 0x7, 0x81, 0x0, 0x0, 0xc080, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040), 0xd}, 0x36e50, 0x8, 0xd23c, 0xc, 0x100000001, 0x1ff, 0x3}) 21:02:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) 21:02:22 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x5, 0x1, 0x5, 0x8, 0x5, 0x5, 0x20, 0xd5, 0x8, 0x9, 0x8, 0x5}) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000003680)=ANY=[@ANYBLOB="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"]) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) r4 = socket(0x1e, 0x2, 0x0) bind(r4, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r5 = dup3(r4, 0xffffffffffffffff, 0x0) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000003800)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r5, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0xd6, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0x2}, 0x0, 0x0, &(0x7f0000000200)={0x4, 0x6, 0xfffff001, 0xfff}, &(0x7f0000000240)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x6}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r3, 0x10, &(0x7f00000003c0)={&(0x7f0000000080)=""/250, 0xfa, r6}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r6, 0x4) fsetxattr(r7, &(0x7f0000000240)=@random={'btrfs.', 'g#vboxnet0cpuset#%GPL\x00'}, &(0x7f00000037c0)='wlan0wlan0GPL\x00', 0xe, 0x37e5f8c01ef7942b) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) clone(0x73f964190a83219e, &(0x7f00000003c0)="548386285d652365b0", &(0x7f0000000400), &(0x7f00000004c0), &(0x7f0000003600)="5233bb15d3b686cff9fbb1c402aa5b565e6d44968ab3e365c2de87bd2976fc193722b9111a1bf1b5a2dd2c8114c978622425cd0ac1d385357a219165c781ef6da795b2dd8510758e6cfea91a7f2284c0cfb6c51f5d8fa22749546d9d0af3b77be4ea58a0362b3b25c17381e61addc33796a49bc274cef13453303e485b76") syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f0000000080)='./bus\x00', 0x9, 0x0, &(0x7f0000003540)=[{&(0x7f00000000c0)="2cafadcb", 0x4, 0x1}, {&(0x7f0000000180)="a3bc55ddee6624c3f4646c28d1722189a7579f4ce74088931f8eb127a38ad202c25491775f9c17e533f2e929fff4b25bdfc6004162860ad20ef0827495a99e2fb816f7a162ffbf", 0x47, 0x400}, {&(0x7f0000000540)="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", 0x1000, 0x6}, {&(0x7f0000001540)="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", 0x1000, 0xe9}, {&(0x7f00000002c0)="2fe7df30208b964626348eaff9cb04362f6189e92b676640f3f8d87d1a1928cf3d7cb12738004b00b298b1ee22873b9ac873630e2ea80da2ad72d1b47994a47b6a227d0f60577e81e85b6dbf80afbf94e2277fbfe534212a556701584849f2d9e859308f9133e6d244fe655431de6377ec75e71560d868ec2fc0a9e2ad769dd85996b07a955b587e5c603755b16b8273b45ab801c2c89691dd0c62ef9a4936d48aafff55bd289aa439c906805eb58ee463ed542835975708699ed3a9c5f95e5f9bdf1203f5c826efe869a9dd0d8056", 0xcf, 0x1}, {&(0x7f0000002540)="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", 0x1000, 0x8}], 0x80000, &(0x7f0000000100)='/dev/loop#\x00') fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$TIOCGSID(r10, 0x5429, &(0x7f0000003840)=0x0) ptrace$setopts(0xffffffffffffffff, r11, 0x5, 0x100062) dup(r8) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:02:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x8) close(r2) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}, 0x699}, 0x90) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x81, 0x7f, 0x5, 0x8, 0x2432, 0x400, 0x4, 0x3f, r6}, 0x20) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 21:02:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1e0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x295, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:22 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @ib_path={0x0, r4, 0x1, 0x2}}, 0x20) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r5 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r5, 0x1e) 21:02:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) socket$inet(0x2, 0xa, 0x50) fadvise64(r0, 0x0, 0x0, 0x0) 21:02:22 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000540)={{0x2, 0x1, 0x2, 0xffffff1e, '\x00', 0x7fff}, 0x0, [0x4, 0x0, 0x5, 0x10000, 0x7fffffff, 0x6, 0x8, 0x2, 0x100000001, 0x3f, 0x7, 0x96, 0x97, 0x9, 0x200, 0x8, 0x1, 0x7, 0x5, 0x1, 0x0, 0x1, 0x7, 0x4, 0xd7d, 0x6, 0x0, 0x5, 0x3, 0x366d, 0x3f, 0x9, 0x7072, 0x400, 0x8000, 0x2, 0xfff, 0x4, 0x3f, 0x4, 0x9, 0x4, 0x3, 0x4, 0x1, 0xd97, 0xfffffffffffffffa, 0x1f, 0x200, 0x0, 0x7f, 0x1, 0x0, 0x15792047, 0x2, 0x6, 0xb08a, 0x8000, 0x41dc546, 0x6, 0x1, 0x14e0000000, 0x31, 0xb9, 0x2, 0x1, 0x8, 0x9, 0x0, 0x7f, 0x5, 0x9, 0x7fff, 0x7fffffff, 0x5, 0x81, 0x4, 0xfffffffffffffc00, 0x6, 0x1, 0x7fff, 0x9, 0x8000, 0x10001, 0x7fff, 0xb6, 0x13, 0x3, 0x0, 0x9, 0x7, 0x1000, 0x101, 0x7, 0x1000, 0x5, 0x3, 0x3, 0x7, 0x800, 0x9, 0x2, 0x1, 0xff, 0x8, 0x55, 0x1, 0x10001, 0x2, 0x900, 0x4, 0x9d, 0xb62, 0x44c2, 0x6, 0x335, 0x10, 0x52b4, 0xfffffffffffffffc, 0x83c, 0xffffffff, 0x0, 0x81, 0x1, 0x7f, 0x1, 0xa8, 0x8], {0x0, 0x1c9c380}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)=@in={0x2, 0x4e22, @empty}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)}, {&(0x7f0000000180)="54c529f6e382b6b4e73d9683e76b5cde40da7d9b271c9da519e853661acea7bf8a22a7701bb6ffa84324a8a61742fc210ef0992abe42e22428fd415b6bbfeb240c64458ee873e0259d86083cbb7525cc6b1c0a30b554b366a2a5d133fe577f70227a53d419df8a52d7d3272d51e917ef46024e3ba83ef039fc4c3a26ccff1eb0b5f89c714b9344f5794eafb2d43650982359a072be920e978e34a222cb714b104ff9fdb1eec7e4", 0xa7}, {&(0x7f00000002c0)="93d794c21a1c10d9920359115261ccaa15986ec779a586a2eabcf563a5b300808ddb5c2f12d9f36f9423c0a42b1a7d41e5a88e9b8d41a9dcf96d0530cf42f086fd92790fd17c6560cd5672c0c13dab9ca4866a251b4d8c38efd28edf050da6872770e855efe8078532d29cf4aab0fdd1c99448f3b1e72a7e09ea29b6dae7480d22b808149dbaf24c3e9ac2ea8df1dfe031b4f277b978f9dda25a61886fc1470baea847f86ba11616adf01c9795d3acd746a624ed13d93fe90575019ba5fa25444c553db959d7bd9f", 0xc8}], 0x3, &(0x7f0000000a40)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x2d4a}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x1f}}], 0x90}}], 0x1, 0x4008080) r6 = socket$tipc(0x1e, 0x0, 0x0) getsockname$tipc(r6, &(0x7f0000000000), &(0x7f0000000040)=0x10) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) 21:02:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x296, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:22 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() r2 = creat(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_AUDOUT(r4, 0x80345631, &(0x7f00000001c0)) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'vboxnet1{\x00'}, &(0x7f0000000100)=""/90, 0x5a) r5 = gettid() wait4(0x0, 0x0, 0x0, 0x0) tkill(r5, 0x1e) socket$kcm(0x29, 0x0, 0x0) 21:02:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1e1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x297, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) 21:02:22 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}, 0x699}, 0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040)={r3, 0x1d, "c84cb080ec939d1cff29d7d73f514e2b12ddb6246a181b6d2350d651eb"}, &(0x7f0000000080)=0x25) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:02:22 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r1) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x276882) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x0, 0xe922}) fadvise64(r1, 0x0, 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff) [ 3502.227006] Bluetooth: Error in BCSP hdr checksum [ 3502.476978] Bluetooth: Error in BCSP hdr checksum [ 3503.646674] net_ratelimit: 14 callbacks suppressed [ 3503.651675] protocol 88fb is buggy, dev hsr_slave_0 [ 3503.657095] protocol 88fb is buggy, dev hsr_slave_1 [ 3503.806631] protocol 88fb is buggy, dev hsr_slave_0 [ 3503.811739] protocol 88fb is buggy, dev hsr_slave_1 [ 3503.966603] Bluetooth: hci0: command 0x1003 tx timeout [ 3503.972017] Bluetooth: hci0: sending frame failed (-49) [ 3504.206689] protocol 88fb is buggy, dev hsr_slave_0 [ 3504.211857] protocol 88fb is buggy, dev hsr_slave_1 [ 3504.606707] protocol 88fb is buggy, dev hsr_slave_0 [ 3504.612210] protocol 88fb is buggy, dev hsr_slave_1 [ 3504.617356] protocol 88fb is buggy, dev hsr_slave_0 [ 3504.622440] protocol 88fb is buggy, dev hsr_slave_1 [ 3506.046652] Bluetooth: hci0: command 0x1001 tx timeout [ 3506.052255] Bluetooth: hci0: sending frame failed (-49) [ 3508.126638] Bluetooth: hci0: command 0x1009 tx timeout [ 3508.766712] net_ratelimit: 16 callbacks suppressed [ 3508.766722] protocol 88fb is buggy, dev hsr_slave_0 [ 3508.776886] protocol 88fb is buggy, dev hsr_slave_1 [ 3508.782008] protocol 88fb is buggy, dev hsr_slave_0 [ 3508.787153] protocol 88fb is buggy, dev hsr_slave_1 [ 3509.886714] protocol 88fb is buggy, dev hsr_slave_0 [ 3509.891925] protocol 88fb is buggy, dev hsr_slave_1 [ 3510.046691] protocol 88fb is buggy, dev hsr_slave_0 [ 3510.051987] protocol 88fb is buggy, dev hsr_slave_1 [ 3510.446666] protocol 88fb is buggy, dev hsr_slave_0 [ 3510.452374] protocol 88fb is buggy, dev hsr_slave_1 [ 3512.368320] ================================================================== [ 3512.376583] BUG: KASAN: use-after-free in kfree_skb+0x38/0x390 [ 3512.382583] Read of size 4 at addr ffff8880a96e2b64 by task syz-executor.5/28262 [ 3512.390302] [ 3512.392065] CPU: 1 PID: 28262 Comm: syz-executor.5 Not tainted 4.19.84 #0 [ 3512.398996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3512.408359] Call Trace: [ 3512.410952] dump_stack+0x197/0x210 [ 3512.414706] ? kfree_skb+0x38/0x390 [ 3512.418543] print_address_description.cold+0x7c/0x20d [ 3512.423834] ? kfree_skb+0x38/0x390 [ 3512.427625] kasan_report.cold+0x8c/0x2ba [ 3512.431852] check_memory_region+0x123/0x190 [ 3512.436399] kasan_check_read+0x11/0x20 [ 3512.440478] kfree_skb+0x38/0x390 [ 3512.444087] bcsp_close+0xc7/0x130 [ 3512.447627] hci_uart_tty_close+0x1ea/0x250 [ 3512.451944] ? hci_uart_close+0x50/0x50 [ 3512.455922] tty_ldisc_close.isra.0+0xaf/0xe0 [ 3512.460684] tty_ldisc_kill+0x4b/0xc0 [ 3512.464624] tty_ldisc_release+0xc6/0x280 [ 3512.468815] tty_release_struct+0x1b/0x50 [ 3512.473060] tty_release+0xbcb/0xe90 [ 3512.476920] ? put_tty_driver+0x20/0x20 [ 3512.480916] __fput+0x2dd/0x8b0 [ 3512.484443] ____fput+0x16/0x20 [ 3512.487918] task_work_run+0x145/0x1c0 [ 3512.492256] exit_to_usermode_loop+0x273/0x2c0 [ 3512.496947] do_syscall_64+0x53d/0x620 [ 3512.500927] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3512.506358] RIP: 0033:0x4141d1 [ 3512.509557] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 3512.529599] RSP: 002b:00007fffd447a260 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 3512.537460] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004141d1 [ 3512.544829] RDX: 0000001b31a20000 RSI: 00000000000015fd RDI: 0000000000000003 [ 3512.552339] RBP: 0000000000000001 R08: 00000000f699d601 R09: ffffffffffffffff [ 3512.559733] R10: 00007fffd447a340 R11: 0000000000000293 R12: 000000000075c9a0 [ 3512.567149] R13: 000000000075c9a0 R14: 0000000000760b98 R15: 000000000075bfd4 [ 3512.574634] [ 3512.576262] Allocated by task 15710: [ 3512.579996] save_stack+0x45/0xd0 [ 3512.583585] kasan_kmalloc+0xce/0xf0 [ 3512.587655] kasan_slab_alloc+0xf/0x20 [ 3512.591763] kmem_cache_alloc_node+0x144/0x710 [ 3512.596609] __alloc_skb+0xd5/0x5f0 [ 3512.600685] bcsp_recv+0x8c7/0x13a0 [ 3512.604493] hci_uart_tty_receive+0x225/0x530 [ 3512.609130] tty_ldisc_receive_buf+0x15f/0x1c0 [ 3512.613873] tty_port_default_receive_buf+0x7d/0xb0 [ 3512.618916] flush_to_ldisc+0x222/0x390 [ 3512.622912] process_one_work+0x989/0x1750 [ 3512.627144] worker_thread+0x98/0xe40 [ 3512.631133] kthread+0x354/0x420 [ 3512.634665] ret_from_fork+0x24/0x30 [ 3512.638466] [ 3512.640102] Freed by task 15710: [ 3512.643572] save_stack+0x45/0xd0 [ 3512.647024] __kasan_slab_free+0x102/0x150 [ 3512.651438] kasan_slab_free+0xe/0x10 [ 3512.655241] kmem_cache_free+0x86/0x260 [ 3512.659227] kfree_skbmem+0xcb/0x150 [ 3512.663012] kfree_skb+0xf0/0x390 [ 3512.666462] bcsp_recv+0x2d8/0x13a0 [ 3512.670182] hci_uart_tty_receive+0x225/0x530 [ 3512.674675] tty_ldisc_receive_buf+0x15f/0x1c0 [ 3512.679269] tty_port_default_receive_buf+0x7d/0xb0 [ 3512.684454] flush_to_ldisc+0x222/0x390 [ 3512.688433] process_one_work+0x989/0x1750 [ 3512.693072] worker_thread+0x98/0xe40 [ 3512.696885] kthread+0x354/0x420 [ 3512.700275] ret_from_fork+0x24/0x30 [ 3512.703997] [ 3512.705646] The buggy address belongs to the object at ffff8880a96e2a80 [ 3512.705646] which belongs to the cache skbuff_head_cache of size 232 [ 3512.719666] The buggy address is located 228 bytes inside of [ 3512.719666] 232-byte region [ffff8880a96e2a80, ffff8880a96e2b68) [ 3512.732544] The buggy address belongs to the page: [ 3512.737725] page:ffffea0002a5b880 count:1 mapcount:0 mapping:ffff8880aa347ac0 index:0xffff8880a96e2080 [ 3512.747447] flags: 0x1fffc0000000100(slab) [ 3512.752297] raw: 01fffc0000000100 ffffea00022bb748 ffffea0002a38188 ffff8880aa347ac0 [ 3512.760705] raw: ffff8880a96e2080 ffff8880a96e2080 000000010000000b 0000000000000000 [ 3512.768911] page dumped because: kasan: bad access detected [ 3512.774617] [ 3512.776236] Memory state around the buggy address: [ 3512.781175] ffff8880a96e2a00: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 3512.788702] ffff8880a96e2a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3512.796061] >ffff8880a96e2b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 3512.803544] ^ [ 3512.810036] ffff8880a96e2b80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 3512.817490] ffff8880a96e2c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3512.825002] ================================================================== [ 3512.832994] Disabling lock debugging due to kernel taint [ 3512.839205] Kernel panic - not syncing: panic_on_warn set ... [ 3512.839205] [ 3512.846619] CPU: 0 PID: 28262 Comm: syz-executor.5 Tainted: G B 4.19.84 #0 [ 3512.855180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3512.864787] Call Trace: [ 3512.867724] dump_stack+0x197/0x210 [ 3512.871346] ? kfree_skb+0x38/0x390 [ 3512.875015] panic+0x26a/0x50e [ 3512.878205] ? __warn_printk+0xf3/0xf3 [ 3512.882095] ? kfree_skb+0x38/0x390 [ 3512.885772] ? preempt_schedule+0x4b/0x60 [ 3512.890006] ? ___preempt_schedule+0x16/0x18 [ 3512.894481] ? trace_hardirqs_on+0x5e/0x220 [ 3512.899136] ? kfree_skb+0x38/0x390 [ 3512.902875] kasan_end_report+0x47/0x4f [ 3512.907281] kasan_report.cold+0xa9/0x2ba [ 3512.911621] check_memory_region+0x123/0x190 [ 3512.916036] kasan_check_read+0x11/0x20 [ 3512.920069] kfree_skb+0x38/0x390 [ 3512.923737] bcsp_close+0xc7/0x130 [ 3512.927301] hci_uart_tty_close+0x1ea/0x250 [ 3512.931812] ? hci_uart_close+0x50/0x50 [ 3512.935841] tty_ldisc_close.isra.0+0xaf/0xe0 [ 3512.940343] tty_ldisc_kill+0x4b/0xc0 [ 3512.944288] tty_ldisc_release+0xc6/0x280 [ 3512.948439] tty_release_struct+0x1b/0x50 [ 3512.952651] tty_release+0xbcb/0xe90 [ 3512.956382] ? put_tty_driver+0x20/0x20 [ 3512.960416] __fput+0x2dd/0x8b0 [ 3512.963745] ____fput+0x16/0x20 [ 3512.967074] task_work_run+0x145/0x1c0 [ 3512.971088] exit_to_usermode_loop+0x273/0x2c0 [ 3512.975819] do_syscall_64+0x53d/0x620 [ 3512.979738] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3512.985170] RIP: 0033:0x4141d1 [ 3512.988370] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 3513.007838] RSP: 002b:00007fffd447a260 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 3513.016098] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004141d1 [ 3513.023627] RDX: 0000001b31a20000 RSI: 00000000000015fd RDI: 0000000000000003 [ 3513.031292] RBP: 0000000000000001 R08: 00000000f699d601 R09: ffffffffffffffff [ 3513.038561] R10: 00007fffd447a340 R11: 0000000000000293 R12: 000000000075c9a0 [ 3513.046633] R13: 000000000075c9a0 R14: 0000000000760b98 R15: 000000000075bfd4 [ 3513.055823] Kernel Offset: disabled [ 3513.059694] Rebooting in 86400 seconds..