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"}, 0x1015, 0x2) 12:52:58 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:52:58 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e00a0001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:52:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1) add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) clone(0x1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 12:52:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x20000) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x800) connect$vsock_dgram(r3, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host}, 0x10) getsockopt$inet_tcp_int(r2, 0x6, 0x7, &(0x7f0000bfcffc), &(0x7f0000000000)=0x3dfa9cc5abf80ed8) 12:52:58 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 12:52:59 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x7a00, 0x0, @remote, 0x9}, 0x1c) 12:52:59 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:52:59 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) r3 = msgget(0x2, 0x40) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) r5 = getegid() stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000580)=0x0, &(0x7f00000005c0), &(0x7f0000000600)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000640)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000680)={0x0, 0x0}) msgctl$IPC_SET(r3, 0x1, &(0x7f00000006c0)={{0x27bb, r4, r5, r6, r7, 0xc0, 0x1}, 0x5, 0x1, 0x81, 0x5, 0x5, 0x6b, r8, r9}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000740), 0x4) 12:52:59 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e00e0001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:52:59 executing program 3: r0 = socket$kcm(0x2b, 0x200000000000001, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x35d, &(0x7f0000000100)=[{&(0x7f0000000040)="24000000240007011dfffd940101830020200a000900000001000000f1ffffff0d00ff7e", 0x24}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x365, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/94) 12:52:59 executing program 1: unshare(0x20600) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x258000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x144, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4d2a2ce7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1462}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x633}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x20, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x84d0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x200400c0}, 0x40000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000040)) r3 = epoll_create(0xac) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x21, 0x2, 0x81, 0x4}) epoll_pwait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 12:52:59 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x127280, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x5, 0x304, 0x1003}}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000004c0)=0xffffffffffff8000) getpeername(r1, &(0x7f00000000c0)=@ax25={{0x3, @default}, [@bcast, @netrom, @default, @remote, @remote, @netrom, @bcast]}, &(0x7f0000000180)=0x80) ioctl$TIOCEXCL(r0, 0x540c) 12:52:59 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0100001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:52:59 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:52:59 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0110001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:52:59 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x0, &(0x7f00000004c0)=""/97) dup3(r1, r0, 0x0) 12:52:59 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:00 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x80fe, 0x0, @remote, 0x9}, 0x1c) 12:53:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x52) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x81, @dev={0xfe, 0x80, [], 0x24}, 0xfffffffffffffffa}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)={r2, 0x2, 0x8, [0x7f1, 0xc2, 0x101, 0x2, 0x6, 0x5, 0xfffffffffffff001, 0x9]}, 0x18) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x3, 0x4, [0x8000, 0x7f, 0x4, 0x4]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000100)={r3, 0x2}, 0x8) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000596000)=0x9, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 12:53:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000301ffff808fdb003d6554f00000ae1b"], 0x14}}, 0x0) r1 = accept4(r0, &(0x7f00000001c0)=@ll, &(0x7f0000000140)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xf68a, 0x2, 0x8}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000002c0)=r2, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'irlan0\x00', r3}) recvmmsg(r0, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 12:53:00 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/17, 0x11}], 0x1}, 0x10000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1a, 0x7, 0xff, 0x0, 0x20, 0x1, 0x1, [], r1, 0xffffffffffffffff, 0x3, 0x4}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r0, 0x0) 12:53:00 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0280001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:00 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:00 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup3(r1, r0, 0x0) 12:53:00 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x300, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0x0, 0x1, 'sh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @broadcast, 0x0, 0x200000001, 'lblcr\x00'}, 0x2c) 12:53:00 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0600001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000040)={0x0, 0x5b, "cc24ca1bf6f4f4c1b0ae52cd51e1be62f3e196c0a73ed6a58c5a58a4bced285b8ab7cdf706adbd16cffe2eb78207c93087954d794acb79394949bb3cc1a4c47797bcc197f7bc1b32511b3298afba706524a9b916d39e2207645b46"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000000)={0x2}) fspick(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0xffffffffffffffff]}) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:53:00 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x45, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6ba}, 0x10}, 0x70) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x1) [ 2883.371030][ C1] net_ratelimit: 5 callbacks suppressed [ 2883.371036][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:53:01 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xc0fe, 0x0, @remote, 0x9}, 0x1c) 12:53:01 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x500, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:01 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000301e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:01 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 12:53:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000040)={0x0, 0x5b, "cc24ca1bf6f4f4c1b0ae52cd51e1be62f3e196c0a73ed6a58c5a58a4bced285b8ab7cdf706adbd16cffe2eb78207c93087954d794acb79394949bb3cc1a4c47797bcc197f7bc1b32511b3298afba706524a9b916d39e2207645b46"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000000)={0x2}) fspick(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:53:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 12:53:01 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b700000001ed0000bfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012d400300000000006504000001ed00003400000000ffffffcf640000000000007b0a00fe000000001f00000000000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693002e7f3be361917adef6ee1caa2b4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd8dff0c710e4cdbf4fc41fbba4f94369e646b8ee6de2109fbe4ef154400e2438ec649dc74a1a610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda8a3658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06ad99edc3a6138d5fcfba53f8d0c67ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a4040996e37c4f46756d50b928f63fc77b830282294484fa6da21b62987c71c1d6e6297eadbab95444937b029e3bd90eef51977a085eaa790167cdd110d9fcc36a8dc6cf1c8e24fe23d7b6727a611b731c6fc186844deadc5bdaa83c0556cbb3c059"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r1, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f0000000080)={0x50e543373d95d06c, 0x103, 0x6, {0x2, 0x1f, 0x3, 0x4ae}}) 12:53:01 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x700, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2883.859099][T11184] QAT: Invalid ioctl 12:53:01 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000701e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:01 executing program 1: r0 = getpid() r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000840)={0x3, &(0x7f0000000340)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000880)={r2, 0x3}) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000200)) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000980)={{{@in=@broadcast, @in=@multicast2}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000a80)=0xe8) fstat(r1, &(0x7f00000031c0)) fstat(r1, &(0x7f0000003680)) getresuid(&(0x7f0000005f80), &(0x7f0000005fc0), &(0x7f0000006000)) fstat(r1, &(0x7f0000006380)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000006600)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2883.930992][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2883.936823][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2883.941565][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2883.948824][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2883.958522][T11184] QAT: Invalid ioctl 12:53:01 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0xf00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:01 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b700e6ff00ed0000bfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00c40000b7060000000000012d400300000000006504000001ed00003400000000ffffffcf640000000000007b0a6ffe000000001f00000000000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693002e7f3be361917adef6ee1caa2b4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4000000000548aed0d600c095199fe3163228e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd8d3f0c710e4cdbf4fc41fbba4f94369e646b8ee6de2109fbe4ef154400e2438ec649dc74a1a610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda8a3658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa306df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06ad99edc3a6138d5fcfba53f8d0c67ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a4040996e37c4f46756d50b928f63fc77b830282294484fa6da21b62987c71c1d6e6297eadbab95444937b029e3bd90eef51977a085eaa790167cdd110d9fcc36a8dc6cf1c8e24fe23d7b6727a611b73929ac186844deadc5bdaa83c0556cbb3c05922debe3d0d3f7a8bc744f082df698258dc6999675e75ecd21d76eff8897144d8ef61525d91db2771eb7eb5679989f2333d8c9c6c075b4d30"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x8a00, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000080)={0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=0x0, &(0x7f0000000180)=0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000004c0)={r4, 0x40}, 0x8) r5 = dup3(r3, r0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r4, 0x4}, 0x8) 12:53:02 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xe02e, 0x0, @remote, 0x9}, 0x1c) 12:53:02 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000901e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:02 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:02 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r1, r1}) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'team_slave_1\x00', 0x7fff}) 12:53:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 12:53:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x9, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000000)={0x2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:53:02 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xed3b, 0x2002) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={r3, 0x80000}) dup3(r1, r0, 0x0) 12:53:02 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x3f00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:02 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000a01e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:02 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b700000001ed0000bfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012d400300000000006504000001ed00003400000000ffffffcf640000000000007b0a00fe000000001f00000000000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693002e7f3be361917adef6ee1caa2b4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd8dff0c710e4cdbf4fc41fbba4f94369e646b8ee6de2109fbe4ef154400e2438ec649dc74a1a610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda8a3658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06ad99edc3a6138d5fcfba53f8d0c67ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a4040996e37c4f46756d50b928f63fc77b830282294484fa6da21b62987c71c1d6e6297eadbab95444937b029e3bd90eef51977a085eaa790167cdd110d9fcc36a8dc6cf1c8e24fe23d7b6727a611b731c6fc186844deadc5bdaa83c0556cbb3c059"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 12:53:02 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0xe000, 0x0) [ 2885.451048][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:53:03 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xe803, 0x0, @remote, 0x9}, 0x1c) 12:53:03 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000e01e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:03 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_persistent(0x16, r2, r3) 12:53:03 executing program 1: 12:53:03 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x1000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:03 executing program 3: 12:53:03 executing program 1: 12:53:03 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r0, 0x0) close(r3) sendmsg$rds(r3, &(0x7f0000000880)={&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f00000000c0)=""/91, 0x5b}], 0x2, &(0x7f00000006c0)=[@fadd={0x58, 0x114, 0x6, {{0x99c9, 0xa6}, &(0x7f00000004c0)=0x7, &(0x7f0000000500)=0xfff, 0x3ff, 0x2, 0x1, 0x1000, 0x28, 0x9}}, @cswp={0x58, 0x114, 0x7, {{0x0, 0x8}, &(0x7f0000000540)=0xfffffffffffffffd, &(0x7f0000000580)=0xff, 0x3, 0x3f, 0x0, 0x7, 0x15, 0xb09}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x4}, &(0x7f00000005c0)=0x9ad4, &(0x7f0000000600)=0x5, 0x7, 0x101, 0x6, 0x9, 0x4, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x98d7, 0x5}, &(0x7f0000000640)=0x21ef7058, &(0x7f0000000680)=0x1, 0x7, 0x40, 0x8, 0x3, 0x4, 0x88c7}}, @rdma_dest={0x18, 0x114, 0x2, {0x7c, 0xfffffffffffff59a}}, @rdma_dest={0x18, 0x114, 0x2, {0x6, 0x7}}], 0x190, 0x20000000}, 0x4000000) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000008c0)={'yam0\x00', 0x101}) getsockopt$packet_buf(r3, 0x107, 0x16, &(0x7f0000000900)=""/99, &(0x7f0000000980)=0x63) 12:53:03 executing program 3: 12:53:03 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:03 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0001101e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:03 executing program 1: [ 2886.011022][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2886.011061][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2886.016860][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:53:04 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xf401, 0x0, @remote, 0x9}, 0x1c) 12:53:04 executing program 3: 12:53:04 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup3(r0, r0, 0x0) 12:53:04 executing program 1: 12:53:04 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x3000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:04 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0481401e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:04 executing program 1: 12:53:04 executing program 3: 12:53:04 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 12:53:04 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x4000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:04 executing program 1: 12:53:04 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0002801e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:05 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfc00, 0x0, @remote, 0x9}, 0x1c) 12:53:05 executing program 3: 12:53:05 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x400, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r0, 0x0) 12:53:05 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x5000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:05 executing program 1: 12:53:05 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0004001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:05 executing program 3: 12:53:05 executing program 1: [ 2887.531025][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:53:05 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x7000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:05 executing program 5: socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x1, {0xffffffff7fffffff, 0xffffffff, 0x7, 0x7fff}}) sendto$rxrpc(r1, &(0x7f0000000000)="b92ff9f138e28d1d1d3da84a07718deb4a94e80aceea25ee91", 0x19, 0xc040, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) 12:53:05 executing program 1: 12:53:05 executing program 3: 12:53:06 executing program 1: 12:53:06 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0144801e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:06 executing program 3: 12:53:06 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x100000001, 0x10}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e22, 0xa6f, @rand_addr="efda6fe4b9ff84f89df5869f1912aafe", 0xffffffffffffffff}}, 0x3, 0x80000000}, &(0x7f00000000c0)=0x90) dup3(r1, r0, 0x0) flock(r0, 0x1) 12:53:06 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfe80, 0x0, @remote, 0x9}, 0x1c) 12:53:06 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x8000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:06 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623690f00080004000c08", 0x24}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0014f9f407000904000a", 0x11) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 12:53:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/bnep\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40002821}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xb4, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x76f9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x480c0}, 0x40) dup3(r0, 0xffffffffffffffff, 0x0) 12:53:06 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bond0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x1f, 0x0) 12:53:06 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0xf000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:06 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0006001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) [ 2888.606853][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 12:53:06 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000001040)='/dev/snd/midiC#D#\x00', 0x3, 0x41) r5 = getpgid(0xffffffffffffffff) stat(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r9, 0x400455c8, 0x0) sendmmsg$unix(r1, &(0x7f0000001280)=[{&(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000940)="7b258f64350f6798e56b27607ee0b952f78bfadd69ae0d1fd6074261e5418345ad151d9a29d56dd468fefec9e745f80ae1aa5b73c8014e3f599a321abad9ce7553508a2cc680e77031373ffc58478cf8dd53", 0x52}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000000a00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000a80)="db29700041cbe9be1021a40f7a91717aed6b34f054923d8114c2d329cc406caec48ec14396e40d156a3f4e3accddf47078c4fdefb993794173568cf8e2d6f13875007a68863fec02a619f2bacf7216648aa513a4ff37b25f35d8fe6b79b97d87a0409f38ab658e8bddc2b33ebd328fdcc4435c352ee0de29fbc08d99701f93375c8d59a99e872d6547b9884a98539aef2ac72e44ca69e6dfc32c843e3c4c908290ef4c475eae7a57f216ee7c12dcbfd25570705bb465f2c6395cae549c50e18b031084fe24b635d5793cdb", 0xcb}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)="a7bbd4c33ebfa08c15aa85244c195cfa1ebb1a4d9142c501b14788111520149a8643504393466cea230592014377adab25d61d9780f09b5c8f13c235439c9eba1e97f2e2afc5d71a80660e24425270e5dd", 0x51}, {&(0x7f0000000c40)="a1444e9ac77c0cf01933fb52ee44c3fb5cbd29fe7220db99ffded44fa4dbd12d1a73f55ec5a8e67955f54b4f947397703abc773a22481001ba4ea24a90c6653385010a07da5ada56f710b1ecb74d1e7716d96c4529f3038762018269bed5ab5bee852c1f621a88355bf2bdc58c3169cc0e5cebfbd07c1099eae47835aaccdbdab7c631", 0x83}], 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="000000007abd12c3000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2], 0x58}, {&(0x7f0000000e00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000e80)="30586324ca94f3e6624e8fa71f3160fe04f745cffd2cc9ac07e3d5cf6fd64952f94fc08a2d85e4bb61b547e9a64b92fb5152e7f1", 0x34}, {&(0x7f0000002840)="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", 0x1000}, {&(0x7f0000000ec0)="896f5273ded2ffa88f04d58cdce6661eda7fca3b5600c52beb69b45f2ea16e3bf6f4a461e998678ef355e61d3c2ab46f6f41e615e8be7bd420604fc4a25a4df782adf3a09600593568e7939d6a7571e1464391ab0a81dc83a24abc0f00cc095e668432d05d046ccf8dfc527591bf641f010469e4d86e652f71aeebdb8a2a466937eeced26176000f9a892c447274fb3bc256b75236b8b6225c25dbefdde65686b5e1e99268d028bedc6162373c92bb4638d2306cac78f29ae256", 0xba}, {&(0x7f0000000f80)="9eb8d713e6ccedcc43821d35b65168b743b3719c9c59c9528dbd34b1e381e7b65d9ff537cea2bea034511ebefce1355e13b25d8e11967f81f1f5844ab362f32083d0cc09223f91b0567b72e1d9458d3e37e2d8152e8d571ada547fc67926bb", 0x5f}], 0x4, &(0x7f0000001200)=[@rights={{0x38, 0x1, 0x1, [r0, r0, r0, r4, r1, r2, r2, r2, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x58, 0x24008840}], 0x3, 0x4044800) sendto$unix(r2, &(0x7f0000000040)="397b63a04617bc82e77cb7a08ffbbd7af4666fc1dfe3f7fa3ff70ac824509ba329f2af2832a24329f294871983c24fa532dfb6b25e761c3330741558ee91b0346ab0b56feeb0aa99ef9469edc76868a8dd682408441e848ac74af98febe3dec47adf72eccc2acad8da31b7266575d05ed51bce0cd6ebfacf988b1a9336b7f438419326cdb66137f7edbfa704af454ee2", 0x90, 0x10, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000740)=0xe8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1a, 0x8, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x7, 0x0, 0x6, 0x2, 0x196, 0xfffffffffffffffc}, @generic={0x5, 0x8, 0x100000001, 0x6, 0x10000}, @alu={0x7, 0x9, 0x8, 0x9, 0x3, 0xffffffffffffffff, 0xfffffffffffffffc}, @jmp={0x5, 0x1ff, 0xd, 0xb, 0x9, 0xfffffffffffffffc}, @ldst={0x3, 0x2, 0x2, 0xb, 0xf, 0x8, 0xfffffffffffffffc}, @jmp={0x5, 0x7, 0x9, 0x9, 0x0, 0x51}, @generic={0x7, 0x3, 0xfffffffffffffff9, 0x3, 0x708f}, @ldst={0x2, 0x3, 0x6, 0x0, 0x6, 0x100, 0x10}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xf9, &(0x7f0000000540)=""/249, 0x0, 0x1, [], r10, 0x2, r3, 0x8, &(0x7f0000000780)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x6, 0x4, 0x4e6}, 0x10}, 0x70) 12:53:06 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x11000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:06 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000300e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet(0x2, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000380)=""/223) [ 2888.819670][ T21] Bluetooth: hci0: Frame reassembly failed (-84) 12:53:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000700)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000600)="468852ecc39292776f1734e4236e4e729517a9a4bb7bbb84af692e2261df54ef19", &(0x7f0000000680)=""/120, 0x0, 0x0, 0x0, 0x0}) [ 2888.995633][ C0] sd 0:0:1:0: [sg0] tag#7283 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2889.005294][ C0] sd 0:0:1:0: [sg0] tag#7283 CDB: Get configuration [ 2889.012504][ C0] sd 0:0:1:0: [sg0] tag#7283 CDB[00]: 46 88 52 ec c3 92 92 77 6f 17 34 e4 23 6e 4e 72 [ 2889.022097][ C0] sd 0:0:1:0: [sg0] tag#7283 CDB[10]: 95 17 a9 a4 bb 7b bb 84 af 69 2e 22 61 df 54 ef [ 2889.031807][ C0] sd 0:0:1:0: [sg0] tag#7283 CDB[20]: 19 12:53:06 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfec0, 0x0, @remote, 0x9}, 0x1c) 12:53:06 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x3f000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:06 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000400e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:06 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'btrfs.', 'bdev.\x00'}) 12:53:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@rand_addr, @remote, 0x0}, &(0x7f0000000680)=0xc) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000040)={0xa, 0x4e24, 0x5, @empty, 0x200}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000100)="f25577a00b2684eb61050a047a3fcf4bf42a29a93a3607096c614cc7d3076dcaf96b14dcd61a44c1fe7e996cf776b07e044300de76f5b0e90ed05bff42afcbfef4a1be0388b851cb7a44b23a34a6bbb5d1da666e9fd0b9a3b7635da1c8c9d81fd34e92ee08f8c2b433181902149d78fd1bec20232d4e114e98123c88d446c0151cd28502424df11fa97f83ddcf261171353e62bb1203b886aab096a9f28afe07896d63effd99c273be660a2905769eb84f166432183d4223a9d850667d434ff47c6904d9968da3945efbbe3586ad987613828b7559ba1abe46a548c9f2", 0xdd}, {&(0x7f0000000200)="768599ee65fa0760173941eda0f5fff1de0287ce264f919d18f068b26eb29d00e950260ee70813eef8d9406179761513fd8a6200189642728f3026f9b83919ecdaaf42340ce9d24945dd93ab43421136ac8556b8121d852fc692c08e5fc7387c6e5897aa08613d3a75129314", 0x6c}, {&(0x7f0000000280)="17c52f326fe40837b2ceac61142dba31608f260798a898ea3ec06af6d8d4be5fb47c8b32ca8597eec370f537ca5eb4e0f294c09395dd84dfba616ef1cd32b377", 0x40}, {&(0x7f00000002c0)="427d82db1c657ba1bda2af2b9b96750644ff215a22d88bea498bf80508275d11e6dd1cd686cfd99420d620bf5b4d3cc90e64553fdfcff94ca272a442630a65749e01959d87a5e28a0f150e0c57d77257d7f9c8d68aac6b099f8b840f08a7b1ba0b142a80dbc7b3590ab0deb021a5348223d2633d871385c4a27afee6d44b51a3ab03dcf42927c007863a5ee1344d2407fddfdb8a6da8023b108c60ef69b2fd527da0fcdf5b96b4ed6dab1ef5d62c6fa898bcb12d3eed54973341b6d3889a00a11fa78bf5387bfdc2b4ee15dc21336c3cd03e9669f499b8d8b0db54fd05258bb8cf42ceb0a2569f0c31", 0xe9}], 0x4, &(0x7f00000006c0)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r2}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @hopopts_2292={{0x68, 0x29, 0x36, {0x1, 0x9, [], [@enc_lim, @enc_lim={0x4, 0x1, 0x4}, @generic={0x7, 0x3c, "b2678e77e136d576b9645880dceb76e14e87bc31256667de3c1f7d8c15d512eafd815c355d02b291168217911515aa09aeecf49a2ebe830f277d6971"}, @ra={0x5, 0x2, 0x81}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdr={{0x68, 0x29, 0x39, {0x3c, 0xa, 0x1, 0x8, 0x0, [@local, @empty, @local, @dev={0xfe, 0x80, [], 0x21}, @remote]}}}], 0x128}, 0x80) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f030000004500010700000014190016000500010014a4e91ee438d2fd000000000000006e00", 0x39}], 0x1) 12:53:07 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) getpgid(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f00000000c0)}, 0x10) 12:53:07 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x40000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2889.611041][ C1] net_ratelimit: 4 callbacks suppressed [ 2889.611049][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2890.171018][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2890.171024][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2890.171098][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2890.176842][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2890.820988][T10778] Bluetooth: hci0: command 0x1003 tx timeout [ 2890.827136][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 2891.691395][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2892.251003][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2892.251260][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2892.256830][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2892.262569][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2892.891100][ T7114] Bluetooth: hci0: command 0x1001 tx timeout [ 2892.897246][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 2894.970999][T10778] Bluetooth: hci0: command 0x1009 tx timeout [ 2895.851055][ C1] net_ratelimit: 5 callbacks suppressed [ 2895.856677][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2896.411029][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2896.411059][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2896.416894][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2896.422591][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2897.931121][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2898.491010][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2898.491030][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2898.496895][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2898.502641][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:53:16 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b700000001ed0000bfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012d400300000000006504000001ed00003400000000ffffffcf640000000000007b0a00fe000000001f00000000000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693002e7f3be361917adef6ee1caa2b4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd8dff0c710e4cdbf4fc41fbba4f94369e646b8ee6de2109fbe4ef154400e2438ec649dc74a1a610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda8a3658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06ad99edc3a6138d5fcfba53f8d0c67ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a4040996e37c4f46756d50b928f63fc77b830282294484fa6da21b62987c71c1d6e6297eadbab95444937b029e3bd90eef51977a085eaa790167cdd110d9fcc36a8dc6cf1c8e24fe23d7b6727a611b731c6fc186844deadc5bdaa83c0556cbb3c059"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) mq_timedsend(r1, &(0x7f0000000080)="0a3c96bc469b692fd1daf34b4699518b0e2659a81b612aafa950c185e09cde683486b0b5d910c56a84a9fed47b1a6633bc923daaa4e730e7ace5a73e0551295c42daff6e6f", 0x45, 0x100000000, &(0x7f0000000100)={0x0, 0x989680}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r0, 0x0) 12:53:16 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000201e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000000dc0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000180)="a1f454d371eb27b007b09fe330543e232d642bf01fbecf3de8d5d8db84c9ded268156de9dfd4cdeddc2ba1f9e73433b8750cf17935de76497a266af91f7f0298c1f6798ca13dcd3fa76a", 0x4a}, {&(0x7f00000002c0)="001ed13778be15779bb57fd1d36d8775420b4209ac7acc6f9378751d7cba19be4331c261cfb485a067a8ba8586c5a2faaf1fbef6ea558a5137cdf2cac19221f0e6d204082a3045a9691e68f9bc6aec38d2e2091709d7b6f39259d433441f59e81fa68eab971faa74a2fbf3c6df34bcce2f4f94a3ce82caa63acafc0a7bef755a7e8d48cf63225840c6535612df18256b1232944b193fceca9fa8aa462d24a2b4bdedd6891263520e9a44aa6b6477caf4ccdaa6babfc2c21b3652c9dafc9356501b80384887c89f2515962a8cfbd9c6a337db79820f99781526bbae18734281dec0da6a32", 0xe4}, {&(0x7f0000000200)="e632526ee9bc8638aed5a1dfd66be21de8de7732fba865574eb7b2444e957e14", 0x20}, {&(0x7f00000003c0)="74cb9ca243c6a7b50ce71499f182b46bf4153bc7063f4ef3e79606b29f572862ba43cd1e11b9cb75fba1a3580ca532cfb19f4fdfb2e403104eff051e3ac0e6d6d77c582f80acad54078206dc9dc8b956e99fce63019666add45282ea", 0x5c}, {&(0x7f0000000440)="073da40f42f895d2acb7e37cbbfb2064a2eac9a569efa4c1c684093c8cf905032706af710967569054040133bba2352b3d34a5999b494ad17a10d06a97cbe39fb292a7c7895affb7707fed0b29f56723444e58585911f8b24fe9cd3728337db3eb8ed9805dc4422746a1f696621a547b93d8ba0c8461e92275e8627966e149c5a312480ebcf5cf29c5ddc6dcb45e597d723509edfcf908a3b0b080f452964de055373e3e74bc350b015338a368f0ffb4f364256b7fd39805cbe3701205b8b051f154c9ee164cd01e205bfc04f0927425", 0xd0}, {&(0x7f0000000540)="e5c70645ec83ea08931c8eeb1c7b4ad70948ff32e69bd2457891bf788d267d4145211381ca7e8c7f401c53387e3828bc0c55d944a1a8b680cd4e5ad69f4525b95f28013cc6940d8797025c62c91f28708e48649ec380bd6f5ec6dd31d2f5f2c74293f94d29945d2e3279650b549436f11086d41c2dda911aa7218a5e3d74e6d7c6217179a5451b160cb69e9862170b2d8d1427404747f2b85002ce6e48b0f60ac8f5b743d06f150418eea2e0a8d2a6b7d331f0741bb7c001a1473080f16fe93f6db070b3bc004ef02a2fc2f89d27de9a80b7f1c5e34a6b6f42b76dcda0a93033d195c4d8b644", 0xe6}, {&(0x7f0000000640)='C', 0x1}, {&(0x7f0000000680)="de7f5fff31230b737e4df2098b1ade6bff0ac70b6ff50daa8853b37b24d6c4c694fffb6c1d75dbe7cc5a55eab1056d624e76f23c6197b6e42aea67c48c1e02d502f21ae488e7bb37d665a018329e08a3724e638413952737893fbd336da683395a89f3d871e1ccb1c235b0e0a4a88e327abe774f412c67ae127fc28d9887c407a9724bf7c340a6a13016640bcf421f623d33055412", 0x95}, {&(0x7f0000000740)="012d1305eb485b667b19f51abfb643265c2897d107d7033b4de0b1977cb8e907cc502f444a07d2964e6068132f4c4797d47149c0ba23ce1ddc7740531d7cc2ee2c872b986d2bd0338317b1c9c7af28233ced5a1a1f96e53deb8036f392b0a315cd17a298763521b82e83b19196d7ec1e573bdf3d1b97099a6e998be4611b46805be0c758ebd4e0827e481883013e1ed2884f2f67d97d5436fc9decf86626198c984c4ea881fee5c39a8cb566f997a3b838628ed0b48bd2f539275d9ab821ec861a4777a5d0e2eff9f8", 0xc9}, {&(0x7f0000000840)="d0e3b348938543adc5e1cb9979406fbadeb6ce509ccbc9cd6f8fc40a7c52c8c04f7312038157f7544d1114eb85ebb76c0b440a252daf57805f08c0578bf9405b2d56bee38082fa625fc2e7a18b34791d1bfb7dd733e4bf992e6aa02263bd6ff9fb1a7c69c43caef6227bdac78816a2fb0d7d76dcf503a4c225c6", 0x7a}], 0xa, &(0x7f0000000980)=[{0x60, 0x88, 0x401, "23cc6944195bded33a41556d3f52f910b8b7f9fc49190e4a1ad2f8ea088567a567e47dd1af384ca748daa85b345c53cee0fc40dc40256cbdd5d537fd405d820e896cc5506bbeb6c8f4b5fb1e"}, {0x108, 0x113, 0x3, "088f06154e9e8ff3cd5e4b2bd24ee7011464d15ebb21b17599268ebdc3956bd30c5102c0af4eef03bf47ac6fdd8e3c9b4600678489a85f9874ad8d30ba9e9aabf1b57ad3dcf212806f8f2a5706583deee81b84734fe616dd9fd04054c67be18acec8891f67ac33a6ee7d53f0558e47223eb56808e2fc412a7e0deafee8ac400de3c46341bc9c1be1db0db02663c98ee887ca477de7828439d40d653bb41fa6f3590f74054529b59659239ae26203aacb944c1b947e33e45e0e759d897e67b195d72400e7bbf246ddfab18b0204dac53a37cab1ac397bcc32174c7cf490727dcd7d1c0ef2ae191c5480798a3997c463846bf6f03a5a9f49"}, {0xa8, 0x114, 0x4, "98f50f0f07fc4b8ab1558d41d77a9aa0053b3707cd13a55ef52317f1a522e151806968558f4a007d87aa0444f14c9a653cd7a131cd381c4349eb8eb0168bcbaedae5d8c0a4fd856d13b44a4636e6f99a3678b99f8c9f36d689c2fbbe90a07cb8d01046451f3e3a398961414c96280274986c0f60a470e3694e37a49d21cc66ec7a49d47c75829a39eba0cc39480bd6b133f3"}, {0x68, 0x11f, 0xffffffff00000001, "91d20870f14018aa46d94d564ada6e7cc69db4aed6b450f0a046842dc5f6acde7c20bf19d72b919807559b965571526b88de56034df4aca57e6d9e02e92ded2c870104e2d4135af96a6c6781724042d56a116eebdc46a1c3"}, {0xb8, 0x113, 0x4, "9eb8a445f0c2c0cd8a188a058b4a50ee0c58210a95a5834d784a5ce23f08eab808b6055f4ca7cfcb73250176af327ca94495b5b7be535de101844ecea9eea89cf19c8befe538fee6add18e052ad7ac0154d53b1c295740bead3e3e7500af841649935afe81025b10e2c0a4044e168b31f7bab864c9f74cf6ad20a279053547bafe6464b78fd92cc5e03868cdcd7004f13414ea2f276aa53f67e43ac1518510e6184789"}, {0x50, 0x116, 0xb793, "a8b0a8403195de2627631b1ed4f9d528fa43a32c29a5a67fe869c2e22dff8fdabd4b3e26c12a7a4548637e5ab9b30f07a3bf3211fe1b0f6f0d5626cc30ab"}, {0x28, 0x139, 0x5, "60c090e64687fe1fa7c80e762903c78e00"}, {0x90, 0x111, 0x40b, "40287f20f0af0573064335ea53d29598a95e13b2812794ec4266843bcd52db4037414841a31e85a2e096c699162e41f7eb214586f045bee44947e659ba136d5d55d71eb84c219d1fe6bb085020c6cd7ee4829528d9df7b3be68be35c39b9f3a41a4cb605a1f684b77fe1c142bb36eb73fb91e8f9bb08b5dcd678"}], 0x438}, 0x40000) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x2df) read$alg(r1, &(0x7f0000000080)=""/224, 0xe0) 12:53:16 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x6, 0x4}) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 12:53:16 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:16 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xff00, 0x0, @remote, 0x9}, 0x1c) 12:53:16 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x45, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 12:53:16 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='.$]xcpuset&/)\x00', 0x5) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x8, 0x4) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x3) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x4) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000240)) 12:53:16 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000301e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:16 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:16 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xfffffffffffffffd, 0x45, &(0x7f0000000280)=ANY=[@ANYBLOB="b700000001ed0000bfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012d400300000000006504000001ed00003400000000ffffffcf640000000000007b0a00fe000000001f00000000000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693002e7f3be361917adef6ee1caa2b4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd8dff0c710e4cdbf4fc41fbba4f94369e646b8ee6de2109fbe4ef154400e2438ec649dc74a1a610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda8a3658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06ad99edc3a6138d5fcfba53f8d0c67ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a4040996e37c4f46756d50b928f63fc77b830282294484fa6da21b62987c71c1d6e6297eadbab95444937b029e3bd90eef51977a085eaa790167cdd110d9fcc36a8dc6cf1c8e24fe23d7b6727a611b731c6fc186844deadc5bdaa83c0556cbb3c059"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x400000000000, r0, 0x8, &(0x7f0000000000)={0x4}, 0xfffffffffffffcf0, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x70) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) 12:53:16 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 12:53:16 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:16 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000401e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:17 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x400000006, 0x0) write$UHID_CREATE(r0, &(0x7f00000005c0)={0x0, 'syz1\x00', 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) readv(r0, &(0x7f0000002800)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000240)={'HL\x00'}, &(0x7f0000000280)=0x1e) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200140, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f00000000c0)="af72b87e5f8696ef200c17d1ebd07596ac5ee6eae2c993d62bbc50668fb7400836cc6a260c7a614944a0b4cfae5d77d40b503fe5771262f7b38e533a308e", 0x3e) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/173, 0xad}], 0x1) 12:53:17 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f0000000040)="494345305a376c7ee386d5f78819ebdd15ff8e48502097d2128f98ed8566e2e79cb7c7f803941ef5cc211e0d740e232db5a120c91b46b1f1e1e45cb00064d16adce2db07a2528b93a7f2c39d9445f619fddfcccebb7b1edd00d84674b1ae5d969503a852571885c02d4d3188b315204e8233116f2798a5b2ba42f49dd9e9d96f8267f6f05d03fc759972b9925dadf542c831969bd03d15c2c426a4608ab277b3bb96d6eb0c03004d6ebf1635b470debb4e13bcc5a4af414af7d0dadf5ccc9d6a07032140780f"}, 0x10) 12:53:17 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:17 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xff0f, 0x0, @remote, 0x9}, 0x1c) 12:53:17 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$dri(&(0x7f00000009c0)='/dev/dri/card#\x00', 0xff, 0x80040) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x40000000000018) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@ipv4={[], [], @local}, @rand_addr="9db356df644c13aae046643cdfd6c06c", @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8, 0x200000000, 0x80, 0x500, 0x7, 0x4400000}) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x0) listen(0xffffffffffffffff, 0x4) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000240)={0x0, 0x4, 0x1}) ftruncate(r0, 0x101) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000440)=[&(0x7f0000000100)='/dev/dri/card#\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000380)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00', &(0x7f0000000280)='cgroup%\xd3$*md5sum/:wlan0self\x00'], &(0x7f00000008c0)=[&(0x7f0000000480)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00', &(0x7f0000000540)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00', &(0x7f0000000600)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00', &(0x7f00000006c0)='/dev/dri/card#\x00', &(0x7f0000000700)='!cgroupposix_acl_access&/}posix_acl_accessem0securityppp0&vmnet0\x00', &(0x7f0000000780)='{\'\x00', &(0x7f0000000e40)='md5sumlo:\x00', &(0x7f0000000800)='selinux+\x00', &(0x7f0000000840)='/dev/dri/card#\x00', &(0x7f0000000880)='/dev/dri/card#\x00']) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000bc0)=[&(0x7f0000000ac0)='cgroup%\xd3$*md5sum/:wlan0self\x00', &(0x7f0000000b00)='\x00', &(0x7f0000000b40)='vmnet0mime_type#nodev\x00', &(0x7f0000000b80)='eth0\x00'], &(0x7f0000000e00)=[&(0x7f0000000c00)='bdev\x00', &(0x7f0000000c40)='em1:(!securityeth1system-\x00', &(0x7f0000000c80)='!\x00', &(0x7f0000000cc0)='\x00', &(0x7f0000000d00)='nodev\x00', &(0x7f0000000d40)='!cgroupposix_acl_access&/}posix_acl_accessem0securityppp0&vmnet0\x00', &(0x7f0000000dc0)='selfppp0&ppp0^/a\\-selinux^:keyring\\-keyring\x00']) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000940)={0x0, 0x4}) ppoll(&(0x7f0000000080)=[{r0, 0x2014}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000980)={0x58}, 0x8) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x39) write$P9_RLERROR(r3, &(0x7f0000000a00)={0xb0, 0x7, 0x1, {0xa7, 'net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'}}, 0xb0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$', @ANYRES16=0x0, @ANYBLOB="0000000000000000ad561dcfca2be3f47be3350569000008000000100004b74ed002d96e638d0325a0c32114627a217d0193386b4eb32dbe0dc30b201a94633097d057dda6a3fc9a0f9431589f2988ae1fc3e95c6af86707c22bd0d5c40d2e9b4996325ffaa2d64df7dd5a2b5bf85f907f7e06b5483437a7a019d9a0c9b08a56abf7d41e21967c40c64352fc5daf2d96d84fa8399e1419eaaafac761add8dd6e497cb0d8c80aa38966cf6958d8f09421fe0b96444cc6c057f2dd07112c63744bef75d3d96daa"], 0x3}}, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000f00)=0x4, 0x4) accept4(r2, &(0x7f0000000e80)=@nfc_llcp, &(0x7f00000007c0)=0x80, 0x80800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) 12:53:17 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000501e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:17 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 12:53:17 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2899.828914][T10778] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 2899.865444][T10778] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 2899.900543][T10778] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 2899.923546][T10778] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 12:53:17 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000701e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) [ 2899.949387][T10778] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 2899.990705][T10778] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 12:53:17 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snapshot\x00', 0x8, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9aa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) dup3(r1, r0, 0x0) [ 2900.027586][T10778] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 2900.049636][T10778] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 2900.078036][T10778] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 2900.106554][T10778] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 12:53:17 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:17 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = getpgid(0xffffffffffffffff) kcmp(r4, r5, 0x7, r3, r1) [ 2900.127807][T10778] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 2900.168878][T10778] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz1 12:53:17 executing program 1: r0 = getuid() r1 = geteuid() setresuid(0x0, r1, r0) r2 = accept(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@id, &(0x7f0000000080)=0x80) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000b80300000000000000f800000000020000200300002003000020030000200300002003000004000000708e6275086c49876782bdfc6ba23dd8c6e965d9f813d94f1d3472fedbcde89ab10f99b758b70566", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="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"], 0x418) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x40, 0x0) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000000580)) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x1, 0x0) 12:53:17 executing program 3: r0 = shmget(0x0, 0x4000, 0x160, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = socket$inet(0x10, 0x3, 0x0) r3 = accept4(r2, &(0x7f0000000140)=@x25={0x9, @remote}, &(0x7f00000001c0)=0x80, 0x80000) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000200)) r4 = semget$private(0x0, 0x0, 0x0) semctl$GETZCNT(r4, 0x2, 0xf, &(0x7f0000000080)=""/154) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c0000001200ff04fffefd956fa283b724a6008000000000000000683540150e04001d001fc41180b598bc593ab6821148a72dde33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 12:53:17 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b700000001ed0000bfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012d400300000000006504000001ed00003400000000ffffffcf640000000000007b0a00fe000000001f00000000000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693002e7f3be361917adef6ee1caa2b4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd8dff0c710e4cdbf4fc41fbba4f94369e646b8ee6de2109fbe4ef154400e2438ec649dc74a1a610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda8a3658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06ad99edc3a6138d5fcfba53f8d0c67ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a4040996e37c4f46756d50b928f63fc77b830282294484fa6da21b62987c71c1d6e6297eadbab95444937b029e3bd90eef51977a085eaa790167cdd110d9fcc36a8dc6cf1c8e24fe23d7b6727a611b731c6fc186844deadc5bdaa83c0556cbb3c059"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x80000) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000100)={0xf574, 0x9, 0x2}) prctl$PR_GET_SECCOMP(0x15) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000080)=0x6bd, 0x4) dup3(r2, r0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e21, @multicast2}}) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x9, 0x8000) [ 2900.394766][T15638] netlink: 'syz-executor.3': attribute type 29 has an invalid length. 12:53:18 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:18 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000901e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:18 executing program 5: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 12:53:18 executing program 1: write$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x1000000004000) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000100)=""/81) clone(0xc1ffc, 0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1000, 0xfffffffffffffff9, 0x5, 0x5e1d3b19, 0x0, 0x16b9, 0x4000, 0x4, 0x8, 0x7, 0x322c, 0x8000, 0x6e, 0xffffffffffff23db, 0x40, 0x1, 0x80, 0x7, 0x1, 0x8000, 0x5, 0x2, 0x7, 0x7, 0x5, 0x9, 0x3f, 0x3, 0x0, 0x10000, 0x271, 0x1c3, 0x10001, 0x7, 0x2, 0x7, 0x0, 0x80, 0x2440435e57486fb0, @perf_bp={&(0x7f0000000080), 0x2}, 0x800, 0x7, 0xd066, 0x8, 0xfffffffffffffff9, 0x3, 0x1}, r1, 0x4, r0, 0x0) 12:53:18 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x20480, 0x0, @remote, 0x9}, 0x1c) 12:53:18 executing program 3: r0 = socket$inet6(0xa, 0x7fffc, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x40}}, {{@in6=@empty}, 0x0, @in=@empty}}, 0xe8) 12:53:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000001c0)={0x5}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x177) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000080)=0x5) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xfffffffffffffff7, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r3, 0xfe000000000000, 0x10}, &(0x7f0000000200)=0xc) 12:53:18 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) 12:53:18 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000a01e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:18 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0xf00000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:18 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup3(r1, r0, 0x80000) arch_prctl$ARCH_SET_GS(0x1001, 0xfffffff800000000) 12:53:18 executing program 1: getpgid(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000240)='fdinfo\x00') preadv(r2, &(0x7f0000000880)=[{&(0x7f0000000940)=""/194, 0xc2}], 0x1, 0x7fffffff) 12:53:18 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000e01e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000001c0)={0x5}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x177) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000080)=0x5) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xfffffffffffffff7, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r3, 0xfe000000000000, 0x10}, &(0x7f0000000200)=0xc) 12:53:18 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x1100000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:18 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x7, [@var={0xe, 0x0, 0x0, 0xe, 0x5, 0x1}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @union={0x1, 0x1, 0x0, 0x5, 0x8, 0x9a2, [{0x4, 0x3, 0x79c}]}, @fwd={0x4}]}, {0x0, [0x5f, 0x0, 0x3e, 0x0, 0x7f]}}, &(0x7f00000004c0)=""/217, 0x5f, 0xd9}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 12:53:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_setup(0x1000, &(0x7f0000000080)=0x0) io_submit(r1, 0x2000000000000133, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x0, r0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) 12:53:19 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0001001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:19 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x50000, 0x0, @remote, 0x9}, 0x1c) 12:53:19 executing program 1: r0 = memfd_create(&(0x7f0000000140), 0x0) capset(&(0x7f00000fc000)={0x20080522}, &(0x7f000047efe8)) syz_open_procfs(0x0, &(0x7f0000000140)='setgroups\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000000950084d45faf6e8e"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) 12:53:19 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bind(r0, &(0x7f0000000040)=@nfc={0x27, 0x1, 0x1, 0x7}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'vxcan1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="440000f9ffff0000ffffff7f01000080060000000000000000"]}) dup3(r2, r1, 0x0) 12:53:19 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:19 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b700000001ed0000bfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012d400300000000006504000001ed00003400000000ffffffcf640000000000007b0a00fe000000001f00001000000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693002e7f3be361917adef6ee1caa2b4f8ef1e50becb19bc4b7ef61e91a6168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef70548aed0d600c095199fe3ff3128e599ba6d9100bd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2ceb69f0c710e4cdbf4fc41fbba4f94369e646b8ee6de2109fbe4ef154400e2438ec649dc74a1a610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda8a3658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06ad99edc3a6138d5fcfba53f8d0c67ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdf098b9411fe7226a4040996e37c4f46756d50b928f63fc77b830282294484fa6da21b62987c71c1d6e6297eadbab95444937b029e3bd90eef51977a085eaa790167cdd110d9fcc36a8dc6cf1c8e24fe23d7b6727a611be90b9ef84b549510731c61c186844deadc5bdaa83c0556cbb3c059"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x4) dup3(r1, r0, 0x0) 12:53:19 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:19 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0001101e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:19 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, &(0x7f0000000280)=ANY=[], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) 12:53:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) close(r2) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000004240)=[{{&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/14, 0xe}, {&(0x7f0000000200)=""/142, 0x8e}, {&(0x7f00000002c0)=""/103, 0x67}, {&(0x7f0000000340)=""/180, 0xb4}], 0x4, &(0x7f0000000440)=""/38, 0x26}, 0x887e}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000480)=""/231, 0xe7}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/249, 0xf9}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x4, &(0x7f00000016c0)=""/210, 0xd2}, 0xffffffff80000001}, {{&(0x7f00000017c0), 0x80, &(0x7f00000018c0)=[{&(0x7f0000001840)=""/83, 0x53}], 0x1, &(0x7f0000002940)=""/31, 0x1f}}, {{&(0x7f0000002980)=@nfc_llcp, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002a00)=""/91, 0x5b}, {&(0x7f0000002a80)=""/113, 0x71}], 0x2, &(0x7f0000002b40)=""/83, 0x53}, 0x9}, {{&(0x7f0000002bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c40)=""/206, 0xce}], 0x1, &(0x7f0000002d80)=""/57, 0x39}, 0x6}, {{&(0x7f0000002dc0)=@vsock, 0x80, &(0x7f00000041c0)=[{&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/78, 0x4e}, {&(0x7f0000003ec0)=""/11, 0xb}, {&(0x7f0000003f00)=""/155, 0x9b}, {&(0x7f0000003fc0)=""/149, 0x95}, {&(0x7f0000004080)=""/86, 0x56}, {&(0x7f0000004100)=""/189, 0xbd}], 0x7}, 0x6}], 0x6, 0x1, 0x0) readv(r2, &(0x7f00000002c0), 0x18f) 12:53:19 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) times(&(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) close(r0) clock_adjtime(0x0, &(0x7f0000000100)={0x5763f671, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}) 12:53:19 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0002801e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) [ 2902.091044][ C1] net_ratelimit: 5 callbacks suppressed [ 2902.091051][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:53:20 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x100000, 0x0, @remote, 0x9}, 0x1c) 12:53:20 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)='lo%\x00', 0xffffffffffffffff}, 0x30) migrate_pages(r2, 0x3, &(0x7f00000000c0)=0x9, &(0x7f0000000100)=0x52e3) dup3(r1, r0, 0x0) 12:53:20 executing program 3: r0 = userfaultfd(0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) sendmsg$alg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)="535139bf90231b26c15078273a9350da7889bcafeb1d30d3f99169db4f44961db567aa2069829eb0f159a3c056f2882c19de4422d2740947d3612516cc979bf548d5c7736c2800a23a5f40b5ab77b5a97e52edb71ea7eed5d4c51524bfecdbdab8287a46d380b478d2", 0x69}, {&(0x7f0000000240)="ead3c3ce036c895856f23412c3d60d0e822d1b1c00c98cb036f0580b48df96981d5ce82bde7fdb95c00cad40622e9b1d57e423ec420b9ab7cdea2bc799adb1ad7b87e18e1b573edf9336b2abae63fff33de6479d9ab0e0891499566d9ae954ae7b673d5c066725fa372927650a8d0a22ffbc3825398164c5046d", 0x7a}, {&(0x7f00000002c0)="de700ca7d7bf52af4f6dbc9b01cd01a9622d9bf8fcd43e459aed018850861afd46eb1dfbe452efdda0981e12e6c6433c3d49bb4bb43a758ae92cc93508ce191f8bd72e0e3d88fc84bee788c4cb6c0d062f3ed3d63af67fa83c4f904805ec5fcd6b39fefed2a61633d6358bdbf592b51e5cdd66f8bd2a485333fe9455af8f8d2abb873debd97dd505431266b0d152e919f81826b46daa08420ba43cd76046d64d31f52763ca3b8a8be6e3cab9bc7b1acb", 0xb0}, {&(0x7f0000000380)="598dcd7ffb73d29a4f65006e70059585ad20ebf2023c94d313dceb04bc3d51b6f0c97bc786a2cf8dcd354210ca4a06c988f8099e95926d043627662c978ed96736cc6517218c282a94c63250bb9c42c0409e65d72fdde6ecb31dbd182e6400f4ab71d4013c1bada72934a35ebb45c40384efe725e38a7e327e5af521a526e8f4dbb2de3edb9b508bbeb085830b146734a3a2ca63ed1ab37e791bd5ca450525fad6047e34710324f028b4c657092da23ffa262650d4b9db6ef1da72fd48a609ce3f573bf9686c96c6aef71b5305968318f94898a3d110e2eab18683891f9497d68182f7323cb0637ce84f814442bcb86f18", 0xf1}, {&(0x7f0000000480)="e7862e76b0e0a719387347c2bfffbf8360525a50f3ba5fb57a0b2b33690f374bd2e82af1423d3ad534862a557189faa31a7c836753c855bd198db73b8ab4987e3410fa267f024705e7d75989f7a31509672243a4f58e32ae0b2d27f6c31ef74496fd22e8374107957f56b999a4648ba8e3c994b4d6dfe457c6e0117b7c8dfff0597afa40dedcdf51c2bb3801e9cc8c81d5c31393cbd4c7900afad4635b190fe5a5019688b5e5169010163766f0dcc704e452e0b8eb101185a8b512cdd296572e84debfbf", 0xc4}, {&(0x7f0000000580)="70ba37c89b3ccf646cebc1bb64be77f4704333c304b39147199a018aa9ac753b57904f52cfcd34be228cfed917f2809fa314f6c2a6140a7e7cf124382747555d8873818f8faa0fbc42003716777b9c3f7485717245946515f25a96de3545856f7d12587224f094578b7fd07c80a1d2cb6491bbc3152eef5effe62de23438a6b16eb632b46ca935bdda8ad84cd286c5d89436dcfebc53322ea0ef4bedfc6071a9fe24941f8084919df3b86998714d37b0779a14dc67b9", 0xb6}, {&(0x7f0000000640)}], 0x7, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x4}, @iv={0xb0, 0x117, 0x2, 0x96, "0245f75586922907c77520edaa9cc984c0faf26a221443c84aba31015e1ee3610a2fc1303072ce2c2a4ee736d12c53d6770556b3f6e1cb3e93d5a82940e9a8aabe3ea69793493186e9f4955472b57e3b4d8a23f448f769f439bfb39899962c279fb792d023b4ea8d495a32f8466cf883f6719797ab3d407c5333c84ae4a93af199ab923ef07f151561dc0dac66b516c18ab5d15f90fb"}], 0xc8, 0x20000001}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x10503, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000000c0)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x800, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000e00)=0x1) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r3, 0x800443d3, &(0x7f0000000080)={{0x101, 0x80000001, 0x3f, 0x10000, 0x6, 0x9}, 0x0, 0x7, 0x5}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000cc0)='/proc/capi/capi20\x00', 0x400000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000d00)={0x4, 0x0, [{0x5, 0x3, 0x0, 0x0, @irqchip={0x3ff, 0x9}}, {0x6036, 0x7, 0x0, 0x0, @irqchip={0x2, 0xfffffffffffff000}}, {0x1800000000, 0x7, 0x0, 0x0, @msi={0xb33a}}, {0x3, 0x2, 0x0, 0x0, @sint={0x1, 0x1ff}}]}) sendmsg$alg(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000840)="716c6c8837299b61bb2e07245beaf92891449726219baf4aa9cb83baeaf42b6fa1cca942f9a460b84efdb22ddf10087e9ebdbc13b58ff3499be0b6c027240a50c88890bbdd6fdce35adaaf880de4fdc4694ef0b333710a68def06fe57ffd2e4c5320b7dd7689968d4f87cabc26d481f5527c6410fbd24557e7bed9ede00d8c45da25292705c72e94b6636c557db527e5ec7adc90fe96", 0x96}, {&(0x7f0000000900)="1472bafff020fb24264c3e96f10e437165c5d4e7162dee80241a17a5ca0b0afdbf0e8643a3946b8f83b8c67776244a72422e70c2095ca35f73d2399b7cfd1df86864454df39abb08c33002c0c2cf3ed40757927e679e7eb1fd591a3e4a52b641637f455edebbdf93f343e4e8f87fea9a090267b969c466653ea02babc32875", 0x7f}, {&(0x7f0000000980)="a6c870e1bccfa64e16a212bfe872f120e1425e75bafe4cdc6584fadb772fca9af2a265827ac43223d1061025d27ee165263d397d7c74b81ce7465c405963fcac7aec9e9fc1da983d4fb31a9fed9c16972054362fe2b9fc5574b70062e25fd64da2515db080b2a5ae92b1ea1e3253482f82eb05a1acc65eb7c61bbd31c606039b1ccd17ca044da60b331ee30e5d1c0fd7565b9408b7fe691ea1c4291a150be786b27e83dfb2ae7b178539b90dd455b7", 0xaf}, {&(0x7f0000000a40)="6286f575bf44e9f7ea445075c02a6541ee5c331b64ca852f7c473cb0ce108e86379b447a4669c8960af45627c89cab0433e5d9cc3c204d6235b446f0001717dff50ae37f4b8514079de30c33f53bfbae2562475cd7d537d6e804a4c8ad75f98b72abd2557a388d062128d44a4fffcd47f7743644b41d3cf680d7817f80b8347abef4c22c6102814f65018160ab423e9a52cfeee8e1415411e2befb876a210865e5c7310571be5fea626549b820d081157fa5d1af623f4f1918b8b0df12042cb25adb4e3e6eb96421a534b9120a0856a7f655693556199436f7a08ca0b58ba801cbdc33523d", 0xe5}], 0x4, 0x0, 0x0, 0x80}, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000b80)={0x1, 0xffffffff, 0x8005, 0x7, 0x5, 0x6, 0x0, 0x100000000, 0x0}, &(0x7f0000000bc0)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000c00)={r5, @in6={{0xa, 0x4e21, 0x6, @empty, 0xd5}}, 0x9, 0xffb, 0x1, 0x3682, 0xfdef3efd64c5a29e}, 0x98) 12:53:20 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:20 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0006001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:20 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000180)) getdents(r1, &(0x7f0000000040), 0xfffffffffffffeaa) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000004c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000500)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000540)={0x0, 0x6}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x80, &(0x7f0000000640)=[@in6={0xa, 0x4e24, 0x101, @rand_addr="b2c175e78ae8f70b1f6b835e84fcec7c"}, @in6={0xa, 0x4e22, 0xfff, @loopback, 0x100000001}, @in6={0xa, 0x4e23, 0xffffffff, @mcast2, 0x5}, @in6={0xa, 0x4e22, 0x0, @rand_addr="1b21935802b3aadbd275f594b9cc8ae4", 0x6}, @in={0x2, 0x4e20, @remote}]}, &(0x7f0000000700)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000740)={0x0, 0xd, 0x6, 0x4, 0x0}, &(0x7f0000000780)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000007c0)={0x5, 0x0, 0x8000, 0x1, 0xffffffff, 0x6, 0x356, 0x11b64000, 0x0}, &(0x7f0000000800)=0x20) sendmsg$inet_sctp(r1, &(0x7f00000009c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000080)="6ac5d96ec06a53e3bf467efb190a9e6d5249e7500f8edcce2f7f235647970d317ea2ca0e3fa33bf69dceefa9fbf59ad697b2e446ad52f01a34195c2ac225a9b4b912c16523da9c1afe7f62848991c722e24346c0325b89e7dd8464c3fa1dba3b5e692843c9e4ab1d6a969e15a866c04ad2a13cbc1d505eb022b2c8d5d53b762efa4359e1b9a4137300cf85c5270d47d7b8bb3501bf3abcfcf1155babb2aa40ed6e11d1c40cd31af2db557ce9daa5ff11405959f447edae29d642cca51501101e60cd9cc402", 0xc5}, {&(0x7f0000000180)="ea3526d541d2484318d704f9d09e34f7be91754c45a76d96e51c62d7067e8e3bdac649997c466c43bbce9d904cfe66290bf009da6b7e6023e9db779ab92465bbbe25a6d9dc6741460d86f36f35515472bf1e1b29592c4095b4e4e458c128c09cf7cbedc35e8b575b8d06994dde94ae7a70b0ec6c9385ada5e1dfeb653382fd1eb261a19a9f251a6621de4bc536499e77f6bcc0a63a910a18f65a02b7688d8c2d3d4a314ac291e4054e6742b5db99bb247582679803229d456976fa6bfd332c7bd54069f4683fd5359f424f0f96c618db", 0xd0}, {&(0x7f0000000280)="66d3929e8c77ccd4d01565bc0c195c44fc513f8e7caf862ec0c32c0f4f1681c7026f348e35dbbfc927cffed805f2b17c2e485987142bacb6b51ac7bc9984", 0x3e}, {&(0x7f00000002c0)="5b9e8e418a05d0152afb974cf5a0203942c1121158b957145bdadd3ea9685741f98b9e5886a57576eba10406bd6a502b22ed08ad42db2065211eb1bd202fd9e3bc9ec7f7baa42625", 0x48}, {&(0x7f0000000340)='g', 0x1}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="d12774921a9677a8dfffb014b661ee03daae7d9a803bb44bc27ecad3bb2eb5bf52eba1723aeaf4d16ae50be8988049a1ea852cfb4d0c2f892c5ebe74b8d9b1d9fe5d61ddaa1245445cbbac60a178e1cfc263a818768259168f59f3652c628d9ef834f74ebca7bdee4e6095326b2c1a12f38f", 0x72}], 0x7, &(0x7f0000000840)=[@sndinfo={0x20, 0x84, 0x2, {0x5, 0x0, 0x7, 0x100010, r2}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x0, 0x1, 0x5d5e, 0xfffffffffffffff8, 0xa428, 0x36, 0xba, r3}}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @sndrcv={0x30, 0x84, 0x1, {0x100000000, 0xbff, 0x2, 0xd875, 0x37, 0xfffffffffffff801, 0x8, 0x8, r4}}, @sndrcv={0x30, 0x84, 0x1, {0xb760, 0x1, 0x200, 0xfffffffffffffffc, 0x0, 0x2, 0x4db41fb8, 0x8, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x7b40fffd}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr="466ce69fd3c8f25a1d6b60199295aaaa"}, @sndrcv={0x30, 0x84, 0x1, {0xfffffffffffffff7, 0x0, 0x8, 0x2, 0x1, 0x3ff, 0x4, 0xffff, r6}}], 0x168}, 0x80) [ 2902.651037][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2902.651060][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2902.656932][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2902.662704][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:53:20 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:20 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000040)={0x80000001, 0x697e, 0x5}) 12:53:20 executing program 3: r0 = socket(0x10, 0x2, 0xc) r1 = gettid() getpgid(r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000003780)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000038c0)={0x0, 0x3f, 0xd6, &(0x7f00000037c0)="27e347efaddab14ef972125e726f9c23afb54aadf45b381e5c4462058d226b71d047d2b37d6aaa732d2fce288e6d854dcbf61430ef19b41481fd083dbc587788496e68959c87a8abe3fa6e834177c6b162c8a347b5b2108567ad9057760187cdd71bd1bc3e5a9c05c85e019a8b290dc0a3a485907bcdc6048bf884fd7ae508ab1e0ea362dc8b69519c01aba303d5b668339cdca32a05867d2d24a130045b945084d65458a430194e45b14d0e44d50162ea8f6e40a76f66c85098dc8c3bd83731c5fde5c42f13fbcf2113773d2e5f0b0c674f914e530a"}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000003900)='dctcp\x00', 0x6) sendmsg(r0, &(0x7f0000003740)={&(0x7f0000000000)=@generic={0x11, "15e803e5ad498d846c9a582e2afe948c3d1640ea77f609377f2bd7dda63dfe75b1643dc1b191d8be1e6ebed2650108e2ec84fe4efee3bee56e21efb92a13ac2b4e0fd6287ae3a5865e322989674929d3ba584d429f1a08a1e4d0e2156b8d7f2542956af80e6cbd4168d559ab200ae7ce7c5e1678c7a7eb603ee42685b440"}, 0x80, &(0x7f0000001340)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="fb886ba7f9004e1303432c88c5794ce7b11abf426355eb31913b8f2719fc16a50c1d191cd33c844d895eda8390c65ec1210aa6150c02bfe3d51cde1fe51e309d5b2419f71110e18e829a7f95273aa6490a54c17f583bc8be4522750e6834ae7f6586f7000184e38f2576c8d85eddb6cb995e125aab64a64f42", 0x79}, {&(0x7f0000000180)="6fa955955e0ed291288aee776fbf8ece09d467c2c832551cfc987e43164c3d1d2844172a50e586bd999142c8e3322fc46e461858872d2854c5d8669cf9a96e8d3a8af7ffae9b18c05e48f8cf3bf8179d9bcb7fce6d86e237e7701d92a4e03e572ef2ef261981d313e46e28c30d8f1ad5c30fca2bde64a2837440f5d13066c92f3f2c1fe211bfa9ecdb1b4ed130e0c162da532e39202e48d66e7f0007b851aae87561fd0e19d381be28b71b03a0d1ee9526a057d1196cb87f54e53a0e7971b328e5f6c362cceacc61441c7372b7db19eb4cd8e21dc489d7", 0xd7}, {&(0x7f0000000280)="0a3065e2965b3609b8db2f807af61d26974f067c3a5a0d2f4bc1b5030fae71476f5e5e7512533b71d95f2a52933ee3b751be8999e71c0e8192cedc00a4aae5b0ea6122ba98c9a70be7474d02d673a9c45cc838a634b8972deba95f2585071eda50b70f5be5ca3c9e8da77cf9f74ba60438581349adf6da6a033ea03a51e450eb55521451e11a8248150c52da213a", 0x8e}, {&(0x7f0000000340)="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", 0x1000}], 0x5, &(0x7f00000013c0)=[{0xe0, 0x10c, 0x8, "1e6c6511116b452fb815f8996772769a25d4c2066b9908587a9dcde59fe3d5b631d4854b6158c5f7c11b1d529a8987c8744ceb8e58e9f13ae9994769648e60676867d6ea080adb0c1332f8ba720cff0f52f46b35cf0621f975f463c57385b9113160fe1d7c86b4e6a0e4421042aab8df908a6b512bcbbb799cfe3bdb4183d71d3490d0c4e64ad2e2f0a906e59ba8feaa6c067fb8bc6d4d51159637541283d8a030b5897aad15a2db049cd061ad2abad18adf24f77f5ef5c7654206dab02aa7f9bb15c747e4403b7d8b579acb"}, {0x68, 0xba, 0x9, "7639c39bda3b0ca237f01e4c5119ca11d1e70e2b29179780308e65b7f3dfa061f37bc6a2cd08998036abb0e170bf509424e3767ccc6c3f855d5c81abbea3f9a57594ba8c57331d9c8da094089700adf021"}, {0x98, 0x0, 0x3, "b1d6bf97b548cb0b80fbebb2ad7df34209971bb3b2e1b2532174994b959eb037e7b6a9c120ae0cee2a0f786a8bf8f666fdc2721bc564d4e70d93ac4f42032691aec6ac096772441c40744024d3e27e2bb9762be4dce3614bc39954382f8c66fd4686acd388bfee72efb2111a5cc891c6ffc14ebaa3298d1c5f393b94afa39c6b887576d964cb7f"}, {0x1010, 0x115, 0x8, "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"}, {0x108, 0x109, 0xffff, "b782c3da6115abe27dfa0076185b780c0e182c734a5588937518b17d2f5549cad6f23b25247929587b0fe7423cb29024b5d959f7cfaba538168eb9971c2c9cd467eff9f249ba410013b7f0cdc51d438318ba8591f06c6213244b96cf841a1ab2f0f10f6ddd1c0af1da0ad5d72ebe9bf552fc5b0631501a622fa8537a9f83b9924e523f2290c20c7868308b54c519dabcdba8042eca931dcb94946368af45960935b58f5f2597a79ba20cc5802ce81ca4118173c517d58f31b208a44bf6d1923e2df1c383d2dee8d74f299a70639805c8db4f64ae873435593ad34c182c72c26c3260f26272402fb983aec00ce66c6c7422"}, {0x1010, 0x112, 0x401, "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"}, {0x28, 0x6, 0x6, "7449b0e95a952d6f36d0d646c0102548c3e1a8"}, {0x30, 0x108, 0x5, "eaa8b9c457c4827d8c5f5656b17790b8205606355cee4fcfef5d83179a"}], 0x2360}, 0x40) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) write(r0, &(0x7f00000000c0)="1f0000000104ff00fd4354c007110000f3e9000008000100040423dcffdf00", 0x1f) 12:53:20 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e000000fe5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:20 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:20 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000000)={0x9, {0x3, 0x6f, 0x1}}) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) [ 2902.880001][T17984] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 12:53:21 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1000000, 0x0, @remote, 0x9}, 0x1c) 12:53:21 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000261, 0x0) syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000080)=""/57, 0x39}, {&(0x7f00000000c0)=""/172, 0xac}], 0x6e, 0x6c00000000000000) 12:53:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$midi(0x0, 0x1, 0x400800) readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=""/137, 0x89) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff2000/0xd000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)="73e8309f885140a1b707d434e27d029c2efabf5373e20add18c1851187f00fd7925e031f9514701fb43e14793a62cee827640032baeb09321d28ddd068d6255d8ad5d283d7390dd5262ec4f9b64ff969454098a2751b41713c467275aa7c6e93c3a403ae0bc873047bfa387d4a5b3b69fe793ec59539477661776dbb660d27625787732dac3cd03f97da5ee830234a", 0x8f, r0}, 0x68) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, &(0x7f0000000040)) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00\x00\x00\f\x00'}) 12:53:21 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:21 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e000003fe5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:21 executing program 1: r0 = add_key(&(0x7f0000000040)='logon\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="cf3b896c1b7e57188964cdeb6e67bc2677ffaca1d8bdbb42a5829004e667a88d60e636d2498fb0d970ab98d1cc91f0e3d704911b637e976a3757781317221748369fbba1a1efe82575ef7c728ae604318c432ced2e22aeebe27fbcaced7618592bb18aeeffd33bc8abd8b3744e23a15a2565acd5b0f4b1391a6bbc47242d021f1e3e03", 0x83, 0x0) keyctl$set_timeout(0xf, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) 12:53:21 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) getpgid(0x0) lsetxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x3) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0xd0, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x34, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'hwsim0\x00'}}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4801}, 0x4000080) 12:53:21 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:21 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000040e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:21 executing program 1: r0 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000000000)='./file1\x00') rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00009ac000)={0xfffffffffffffffd}, &(0x7f0000de0ff0), 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f00000001c0)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x40000000000013, 0xffffffffffffffbd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmmsg(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @broadcast}, 0x0, 0x0, 0x4, 0x4}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="fddb64d56243e99ffbc5dc0aa25abef21fc11b45fd140f853ee4dce4cbfa4820c2ee4d20c466f6e799167c664f50ea82a2fc756ac67583b19efd7a983eceb04b", 0x40}, {&(0x7f0000000140)="f05d80", 0x3}, {&(0x7f0000000180)="6a6fd153d121966d7788cd8a4459e6b766ba56b50fc377daf045986cf9e56b5f9765cbaed514957e2241ef72782602a8610b70fa4750c6d861f2780796ec94fddc331fa015bd0a242ea1fec6260949ffe918b73303742f8fcb01ace534db35b399cfd3c4e1b33e6b3151f6a631759fe4e14a56336f9872f533a47481b485bfba8fc76176ef34021b62f7e17fffc9d9b20db4eefef9a67579e3f884f5e8c7be2dea2115b057532d24f55849e0b32f51ff7161848dd67c8a569f19fc15915f28e24e2136cff70a83", 0xc7}, {&(0x7f0000000340)="43c7820d9524d2debf4fff366c0639c6adae3a1022881dcc84ceb57763c19c74a9f389747e66d33d61b39e1e9244369d8d53202c995ed9b71fa8fa6e08b4c0ee6c3cea75c2ec1eca8459d9b6dbd15eec01b8107e03994bc7733780bba934faabccbd94aac0a4ebd2d201424d55fee82780a619c6ef042b3147f96662ce1df0eb5745f2055350235332cb41ee7ac666d4248ecb0c70f28c49ffed054c03e0693bad44b7016c259771d465e04532d6d568a86eba4897b62c17ea11d411875b1aa894f0f33f6cc3eb", 0xc7}, {&(0x7f0000000440)="631e57b10744769d2cec3ff20b386579ecf87ab0428ed1386937eb60880f87c2850748de5e0fc40527d85c531e8fa08844e1f6a757fc23f17391aaaad8de72970921125cb77dac7a0c8a6fbcb15f3c7aff7d2720fd0c9238c5aab48fd1933147e46c2d9ad7446ad97575301cc6492b600ee2fc9492f34a57fdefca39f20d7de4243b6ce3199650af268a7088c8", 0x8d}, {&(0x7f0000000500)="18cbd59ceca4e916c896bce7752f936e7fa07e98821b7033b37c43d621512222ebc5ef527452eef629cb65ed7fc46f16aab23ad620e049d73572ccbec0f5a604ecd85cf14e345e68e7b2c4d6ace2fe0fb17d26f42501a8a7292361048b6220a97975c45518c4db2195bdf0f9c29c1132619ae9e94d92b02bdc873c48f70bbb214a6d428552050b9da776ec290ac36c68ed1c8845b2ee7406139eeb842f5cd46976c473793054b6f67bc7bd3e9d75c20f20b7d62a4ccb7dd877324c3971395462cb0c3c745399fcac44e53c7d70a05e352174f70a1882027b0084d89eb1e7", 0xde}], 0x6, &(0x7f0000000600)=[{0xb8, 0x116, 0x4f, "7e4bd701dc98389bae8e09dbb726d2185b29dc75eea77ccaaa5c5dd2bcbbae426688786c1585d10f6399522426ea1edab3fafe48e5e3611a0d2b0efaa732e217138304c1407e0926f001a50e22c3293ea59f6d6a84b266fbc48d1d334cf75eea88454f80bac8a9bbde50ed6fe6eb4b0f9e201a7ecb5ab221a0f2be3d51e9c84cd75d6462f6cf74ac7c986bf4e885c11c2a0996789430b8dad4a4d8a33030d8609b"}, {0x88, 0x13d, 0x8, "720ab172b5f1fdf1815f322b0880c482f603c1b4aea89a49e2d8c3703f127dea5688869721a712f1d3e0bb7018e3f538557dc7b78022bd44b9ca37299984d848b6d6194b2e9c253999eaba6cb3ebe461ae38a9c990e3f0ef32b8264cf7661993311ed41ce3d3408f97d2807c6d61d0aaf6cdc0e696000334"}, {0x100, 0x11, 0x1f, "3ca5cf1bf6d218ceda7af06de541e3b5137e395f7705836fd84fa9613fe312a33c129b1a3a59a3feedfd1c4c238391a5f1967f91153c43bdbd802713f524674b9065955fc766b506a3d2c13f318e9a1f49f3343c102572ba95bfe99df9805028e521e8fe6b8f95c04d7241e19a1f412acf06d9ba1d7b0d15fdee9955422ec3d56cb782ddb8df7c896eee165a711962f0dce523f32a065b4f698450e416ac3b2a72fdb20ebdfa592d300b408767bae8320a915f83830c98f8552cec43109f1225c3a70f4ac567dea085ade20b223e0767b7e2d7270df0ce0b9e7013bd83a21f8d045d2144e8aea113b4"}], 0x240}}], 0x1, 0x4000000) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') writev(0xffffffffffffffff, 0x0, 0x0) 12:53:21 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x180, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x100, 0x1, [0x7ff]}, &(0x7f0000000080)=0xa) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x800}, 0x8) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r1, 0x7}, &(0x7f0000000140)=0x8) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000180)=""/103) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={r2, 0x80000000}, 0x8) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000240)=0x100000000) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) r3 = open(&(0x7f0000000280)='./file0\x00', 0x2001, 0x10) r4 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/null\x00', 0xfffffffffffffff8) r6 = request_key(&(0x7f0000000400)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='/dev/null\x00', 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r4, r5, r6, 0x1) r7 = fcntl$dupfd(r3, 0x0, r3) fadvise64(r0, 0x0, 0x4, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000004c0)=0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000500)=0xb47) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000680)) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000006c0)={0x43, 0x3, 0x3}, 0x10) ppoll(&(0x7f0000000700)=[{r0, 0x8008}], 0x1, &(0x7f0000000740), &(0x7f0000000780)={0x9}, 0x8) setsockopt$sock_int(r3, 0x1, 0x16, &(0x7f00000007c0)=0x400, 0x4) rt_sigqueueinfo(r8, 0x1e, &(0x7f0000000800)={0x21, 0xc, 0x10}) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000880)={r7, 0x10001, 0x0, r0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f00000008c0)={0x6de, 0x2f, 0x2, 'queue1\x00', 0x1}) ioctl$UI_GET_VERSION(r7, 0x8004552d, &(0x7f0000000980)) fcntl$addseals(r3, 0x409, 0x4) connect$rxrpc(r7, &(0x7f00000009c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x24) write$P9_RATTACH(r0, &(0x7f0000000a00)={0x14, 0x69, 0x1, {0x2, 0x3, 0x3}}, 0x14) 12:53:21 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2904.171893][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:53:22 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1030000, 0x0, @remote, 0x9}, 0x1c) 12:53:22 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000002e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000040)={0x0, 0x0, {0xffffff8000000000, 0x83, 0x300f, 0x6, 0xf, 0x4, 0x1, 0x2}}) ioctl$TIOCGPGRP(r0, 0x540d, 0x0) 12:53:22 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0xf, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:22 executing program 1: r0 = socket(0x12, 0x5, 0x0) write(r0, &(0x7f0000000000)="220000001400070500e82e8a004c030002080300010000f30700020041081e22f054", 0xfffffffffffffec5) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000080)={0x3, "d8c02a231610c9d00558462899723922bb40dcefe7f9fe6c00e6af8b6139ec1d", 0x3, 0x1}) 12:53:22 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000040)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f00000000c0)={0x460, 0xfffffffffffffc01}) ioctl(r0, 0x5452, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x401}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r2, 0xff}, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) 12:53:22 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x11, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:22 executing program 5: r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0x4, 0x20001800, 0x400, 0xc05b, 0x10000000000000, 0x100000001, 0x80000000, 0x0, 0x7, 0x8001}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10rist\xe3cusgrVid:De', 0x0) 12:53:22 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x159, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x25c880, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x4000000000101, 0x70bd26, 0x8c09, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4814) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)) 12:53:22 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000008e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:22 executing program 1: r0 = socket$kcm(0xa, 0x6, 0x0) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0xfffffffffffffffe, 0x14001) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0x14}, 0x4}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000200)={r2, 0x7fff}, 0x8) setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000000)=r0, 0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x400000, 0x0) write$P9_RWRITE(r3, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x2}, 0xb) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000002c0)=0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x81) 12:53:22 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x300, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2904.730994][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2904.731028][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2904.737237][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:53:22 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x2000000, 0x0, @remote, 0x9}, 0x1c) 12:53:22 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x0, 0x3f004000}) close(r1) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffffa) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 12:53:22 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e000000fe5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) 12:53:22 executing program 3: r0 = userfaultfd(0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)=0x4d48, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000680)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) 12:53:22 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x500, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:22 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x2000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x240, r1, 0xb00, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x84, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffffffffffffff8, @empty, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0xc}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @empty, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0xb8, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfe}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x5}, 0x0) rt_sigpending(&(0x7f0000000080), 0x3b4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) waitid(0x3, r2, &(0x7f0000000140), 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x1, 0x96c, 0xb2f, 0x4, 0x0, 0x9, 0x20000, 0x1, 0xd10, 0x273, 0x9, 0x7, 0xfff, 0xffffffffffffffa3, 0xaa6, 0x9, 0x0, 0x2, 0x2, 0x81, 0x7, 0xfffffffffffffffb, 0x7, 0x6, 0xffffffff, 0x9, 0x5, 0x81, 0x0, 0x3f, 0x3ff, 0x4, 0x4, 0x101, 0x0, 0x4, 0x0, 0x989e, 0x1, @perf_bp={&(0x7f00000001c0), 0x8}, 0x200, 0x2, 0x3, 0xd, 0x7, 0x7, 0x2}, 0xffffffffffffffff, 0x3, r3, 0x3) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f00000000c0)) 12:53:23 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.mu\xc3\xe0\x02\x00_\xff\x03\x00\x00\x00\x00\x00\x00age\x00\xec\xca\x17\xde\xb7\xfbi7\xf86\xfaMq\xd5\xe66\xd40\x10\xa5\xf31\xc3\xf8\x9e\xd6\x97\xc4(\xf5\xbd\x99\x80\xeb\x95_\x990x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x700, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:23 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x14}], 0x1}, 0x0) 12:53:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000000c0)=""/75, &(0x7f0000000140)=0x4b) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000180)=r1) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) setpgid(r2, 0x0) 12:53:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x100, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000140)={0x7}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x3}}) listen(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x3, 0x2, 0x3, 0x2}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x21c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, &(0x7f00000000c0)=0x14) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r6, 0x4}, {r6, 0x4000}], 0x2, &(0x7f00000000c0), &(0x7f0000000100)={0x6a}, 0x8) 12:53:23 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstatfs(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="5401000010001307000000000000000000b7000000000000000000000000000000000000000000000000ffffac14ffaa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000001c0017007b0000000000000000000000000000000000000000000000480001006d643500"/268], 0x154}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x0) 12:53:23 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x18}], 0x1}, 0x0) 12:53:23 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0xf00, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:23 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x2, [@broadcast, @remote]}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00\x00\x00\x00 \xb8\xbeb\xd8\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00\x00\x00\x83\xca\xdf8\xae\x7fu\x1d\x00\x00\x11', 0xffffffffffffffff}) 12:53:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = getpgrp(0xffffffffffffffff) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x7fffffff, 0x0) r4 = dup2(r0, r2) r5 = openat(r4, &(0x7f00000001c0)='./file0\x00', 0x420000, 0x80) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f00000000c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TIOCSCTTY(r5, 0x540e, 0x7) sched_setscheduler(r3, 0x3, &(0x7f0000000000)=0x100) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0xc0000100, 0x0, 0x258, 0xffffffff02000000], [0xc1]}) 12:53:23 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3000000, 0x0, @remote, 0x9}, 0x1c) 12:53:23 executing program 1: syz_open_dev$video(&(0x7f0000000380)='/dev/video#\x00', 0x401, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r0 = socket$inet(0x10, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) sched_setaffinity(r1, 0xfffffffffffffe73, &(0x7f0000000080)=0xa000000000000005) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000f80)=""/55, &(0x7f0000001000)=0x37) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x159) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={0x0, r3, 0x0, 0x14, &(0x7f0000000e40)='security.capability\x00'}, 0x30) gettid() r4 = getpgrp(0x0) setpriority(0x0, r4, 0x8001) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000500)=@v3={0x3000000, [{}, {0x692, 0x2}]}, 0x18, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) [ 2906.251065][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:53:24 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x1100, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:24 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x27}], 0x1}, 0x0) 12:53:24 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x101080) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "7e99747933c953b5", "cd4647b48b82d98ca8d189498a43139b", "b9a09f7d", "7871192debc4cf94"}, 0x28) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 12:53:24 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x3f00, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:24 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/icmp\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @ib={0x1b, 0x8, 0x3, {"f9097c0edb4fe9390f77227a3f4d2a9e"}, 0x1, 0x7}}}, 0x90) r2 = socket$key(0xf, 0x3, 0x2) chroot(&(0x7f0000000000)='./file0\x00') sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300091000000000000000e8000000010014000000000005000600000000000a000000d01d5a0900f121008000000000000000000000000000000007000100150000000000000000020200000005000100000000000a00000000000000fe8000000000000000000000000000ff0000ff07000000000000000000000000000004395b4f9bb094d0f40b4aa3921405846f2b20a682951f0246a366655ac2608d93114ea09ddf7c46a206e1e1f7e68b976b9e25064266ab8e55ef7437622c8456531f3e5e2c9676409b031783eee4b99a27a03a1ded926c34418da7096a2f41c384d25f2864824c5391293442b4131e79e5e8ee180681f5ce35328baafbf161a3dc02f91d935bd9e8eb57ea23e055a637dd4985dae6e3568b191de994d97a8fc17b70db546e0281c1aa45f101e5cbf3c4c8df8bb458b1cfd1dd4aa87285845925ed9823feb48328a51c57b5d2291e557a2e63c9200400c801eb800e27d52c61ca9e709c8cf3f1347bc956da4b67fdf8a348cdfd8ea7f53e9fd75ce41d31fcfa887be2ffcf6f5fa100816258184c08324cbd195ea063ac8e77daad882d3f88facb6891e0eb00000000000000000000115f46265f2dc8d4559e8e02fb10f60444dc4b2bd173ee60e3434c9fdd0d5beced6f785a6c9a11e0f5436f5ab27636da43da8d97bed6a359c0390b092b88c16ecaac92208e1ff1f87151fae5266b582346862aad7cae336fe67f397b3c7387f8f0525249aa26dfa79da52ba9a987981fa44a98e30f855999c78b9bd3cafed7a177bc2dedb3a69d9f8b4dfa27e98b674da1c40b5bcac488d139f09a837f2a156032e1046d3eb33edbec9aaebdf3a0b115df3020c02bacac732319eb"], 0x80}}, 0x0) 12:53:24 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x4000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:24 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x5c4}], 0x1}, 0x0) 12:53:24 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x4000000) write$vnet(r0, &(0x7f0000000280)={0x1, {0x0, 0xffffffffffffff98, 0x0, 0x2, 0x2}}, 0x68) 12:53:24 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$isdn(r0, &(0x7f0000000040)={0xfffffffffffffe00, 0x8, "15cd59d479476fdb57afac1b6b660f82556f072833e080f7629c370f6e78cc8042f140d20da9c1ea9803ec0a1b22d16bb1957a4c794ef4ab9a90936dab5e556296a26c86b607c116b903caaeb7627dbee0b96b566922a93f348e9ae13fd71dd8106194eb4f6c8432fac1858f497ec4feb9169c92f9e9509c9b55e91064681260028ca61b97536c4a0d41f3d95eae1b308e4581e7a8c4905c41558bf34e4f0c2a56360ad7c847fd6f33800ccd25a84d8d634bba9f1796041c9a41321704daea522bb30e0861f65cefb9bf9cdae7da782cd259ca0a26be91420e26b2244e63fd582877980778512c1906aa223691"}, 0xf5, 0x40, &(0x7f0000000140)={0x22, 0x7f, 0x8, 0x4, 0x18}, 0x6) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000440), 0x4) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7, 0x644081) 12:53:24 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x5c8}], 0x1}, 0x0) 12:53:24 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4000000, 0x0, @remote, 0x9}, 0x1c) 12:53:24 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x800, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, {0x2, 0x4e20, @empty}, 0x1, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)='tunl0\x00', 0x101, 0x1}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000003c0)={[{0x7fffffff, 0x101, 0x9, 0x800, 0x2, 0x1, 0xffffffff, 0x1, 0xfffffffffffffffa, 0x7d, 0xffff, 0xd33}, {0x4, 0x5, 0x3000, 0x7, 0x7, 0x2, 0x100, 0x2, 0x5, 0xff, 0x5, 0x4, 0x400}, {0x1, 0x10001, 0x3, 0xffffffff, 0x3, 0x7, 0x2, 0x1ff, 0x5, 0x0, 0x3, 0x10001, 0x6}], 0x7}) readahead(r1, 0x3ff, 0xffff) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0000fb8ee99a4e3c04450d338c00000000000000675607a4e614bfd24dd3d4cb2d233219da7bba2dc5c27adaacead65cbe33ad8e857a25547819770101b400000000000000000000dbd3ec61f539fdba20b9991d7557439e0000926fb1316f55f5842040a32f9baba2e2eb7a566ad225b88ca8e39b6b7b4119ad7f9fe43cfbb70e475d4001760a7e01040000000000009900ceab2fc511d42bd0a43d2cbf1778fdf2408d748f04834ee7", @ANYRES16=r3, @ANYBLOB="040008000000fbdbdf250a0000002c0007000c000300050000000000000008000100ff07000008000100040000000c00030009000000000000001c000900080002000700000008000200ffffffff080002006d4a0000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000140001000000000000000000e0000001000000000000000000000000000000000000006a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000008000000000000000000000000000000022b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000014000e00"/188], 0x104}}, 0x0) 12:53:24 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x1000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:24 executing program 5: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x4000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:24 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x20000168}], 0x1}, 0x0) 12:53:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_\x00\x00\x04\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="400000000000000000000000000000008e0dd4a21502af52d1182cc386e0c4308da78ff8b4d1f8ec4c962e498eb9785a4f081e3bebd2d1c7e7724006a67f97d174470e3c34a0323ba67e58932b863841209690ff07cedcf3cb50eb2ed6d418f36eff69d0e3c58efeddc7c4d00d03d7970c3ebdb0cb5ebb06e258a42e751d35d99595796be8ccdf59b42efd4d4981c2f2c836ccb60b026e5c3ed962aa2213ff36c299561acaa3754ef077ae521ea3c7bccffd9535632ed5b94fe653e8f00807c905e2326235ea083594c52c18e1013187548800665c51f6a512f02cd02467cb1f6197d76c7962184aebe56b98364ea8ec5dd8531a28b9c28f4be883f8a92396510ed4638e45acb6d21dfba8aec137a358e083128da1f91571ef1b63eda769179966ac111c71cf02cdddd3a6bc7e35b41fffb2b0adfb01c44356acb4683f4cb168a5cda81d77453d1a7234ec7521bff35709b498ead09ca0df522d5a7e20b904a31aad9981a542aabae7818c7193ee1e7bee6c2a853025fbd9942a34bb4bd069d300898309813a97a49065ec1a1e92cd018c35a975f728f1fb0a7a93433e6d0f4beecabf1bc4acad99b708fdf07aeaf15766a1381c7399531a969751d33378549ed261caf33fbb0012d6a036aeb8cc2b5c7ba3ec625fc7b12475411c767020251f17915883c9b4fb68b51c0e4aea0019fdc6bdd78326d93d7898d86ae16bed06ceccb257e4f393b156bf45b111fff6432d3021753d5ac04b8a16751acaf87a66e54bf7e8983b5e4236442268137b01992b2e24ef4b60ff3690cf04ac05414a0505a2e446d31b3a424079c95172d83e79f1ad6947bd1c75fda1a0e02e7c8cae68ffb29a949e13bfe071936c5a9c0bcfd1b314dffcf00c52a91a9a8041658183313c064d68a2197fa4a9dfc70ca68908585bead2e74715041c8aab7a8a7a80b28ff15b37720db0c487edce0c20e952f3074993e49b55f66a1dd49f57a3f6ae173eec384a58c1b802eef5d1bdb706d515a29c24943a1937fff51dacc7bbb29e6e4b4e0804ff52f1c91ee0f8200d6e9508d380b8ec90996ff65f797c011fd3c419f3a4789acdcd97b9763260507232fd745b1f884d25de7c9f549e1bdd27d2f88dffc647a2beb45f215fd79bb49a6df952fbf9a47257b269754580a75ed4e3877815ee7502f4ae86c1cc563472fb0c2423e07ab3607ada49b713cae5b41486af531afdb79cde7a739f0e36fb335c9a315c7e064be5f66178e51dc2b9c281693ca47567d2a82982eebfdcc78b675f3825544bf97fe944492fc0181593a7c149a569909824c337f5b7555ea5967a45c4e79f2ca955a2d655cb260324437e5fc8d6a11cad003769270ae6199201"]}) [ 2907.286166][T21624] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2907.305132][ T21] Bluetooth: hci0: Frame reassembly failed (-84) 12:53:24 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:25 executing program 3: unshare(0x2000000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00') setns(r0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x400000) 12:53:25 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000401, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000002c0)={0x873be2373240630a, @pix={0x1, 0xffaa, 0x32344d59, 0x7, 0x0, 0x5, 0xb, 0x8, 0x1, 0xf, 0x2, 0x5}}) 12:53:25 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x7ffff000}], 0x1}, 0x0) 12:53:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback, @multicast2}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter\x00') ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000140)) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x2, 0x3f, 0x62, 0x6}}) 12:53:25 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x3000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:25 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0xfffffdef}], 0x1}, 0x0) 12:53:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup2(r0, r1) ioctl$TIOCSCTTY(r2, 0x540e, 0xe2a) umount2(&(0x7f0000000040)='./file0\x00', 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000100)={0x7b, 0x0, [0x40000106]}) 12:53:25 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80200, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc, 0x60148800}, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc}, 0xc) 12:53:25 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5000000, 0x0, @remote, 0x9}, 0x1c) 12:53:25 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2908.331020][ C1] net_ratelimit: 4 callbacks suppressed [ 2908.331028][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2908.891082][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2908.897547][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2908.901018][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2908.910291][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2909.371019][T12655] Bluetooth: hci0: command 0x1003 tx timeout [ 2909.377619][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 2910.411193][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2910.971091][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2910.971585][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2910.977414][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2910.983579][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2911.451151][T12655] Bluetooth: hci0: command 0x1001 tx timeout [ 2911.458140][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 2913.531091][T10644] Bluetooth: hci0: command 0x1009 tx timeout [ 2914.571129][ C1] net_ratelimit: 5 callbacks suppressed [ 2914.578445][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2915.131076][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2915.131101][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2915.138051][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2915.144891][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2916.651905][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2917.211044][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2917.211129][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2917.216879][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:53:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_\x00\x00\x04\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="400000000000000000000000000000008e0dd4a21502af52d1182cc386e0c4308da78ff8b4d1f8ec4c962e498eb9785a4f081e3bebd2d1c7e7724006a67f97d174470e3c34a0323ba67e58932b863841209690ff07cedcf3cb50eb2ed6d418f36eff69d0e3c58efeddc7c4d00d03d7970c3ebdb0cb5ebb06e258a42e751d35d99595796be8ccdf59b42efd4d4981c2f2c836ccb60b026e5c3ed962aa2213ff36c299561acaa3754ef077ae521ea3c7bccffd9535632ed5b94fe653e8f00807c905e2326235ea083594c52c18e1013187548800665c51f6a512f02cd02467cb1f6197d76c7962184aebe56b98364ea8ec5dd8531a28b9c28f4be883f8a92396510ed4638e45acb6d21dfba8aec137a358e083128da1f91571ef1b63eda769179966ac111c71cf02cdddd3a6bc7e35b41fffb2b0adfb01c44356acb4683f4cb168a5cda81d77453d1a7234ec7521bff35709b498ead09ca0df522d5a7e20b904a31aad9981a542aabae7818c7193ee1e7bee6c2a853025fbd9942a34bb4bd069d300898309813a97a49065ec1a1e92cd018c35a975f728f1fb0a7a93433e6d0f4beecabf1bc4acad99b708fdf07aeaf15766a1381c7399531a969751d33378549ed261caf33fbb0012d6a036aeb8cc2b5c7ba3ec625fc7b12475411c767020251f17915883c9b4fb68b51c0e4aea0019fdc6bdd78326d93d7898d86ae16bed06ceccb257e4f393b156bf45b111fff6432d3021753d5ac04b8a16751acaf87a66e54bf7e8983b5e4236442268137b01992b2e24ef4b60ff3690cf04ac05414a0505a2e446d31b3a424079c95172d83e79f1ad6947bd1c75fda1a0e02e7c8cae68ffb29a949e13bfe071936c5a9c0bcfd1b314dffcf00c52a91a9a8041658183313c064d68a2197fa4a9dfc70ca68908585bead2e74715041c8aab7a8a7a80b28ff15b37720db0c487edce0c20e952f3074993e49b55f66a1dd49f57a3f6ae173eec384a58c1b802eef5d1bdb706d515a29c24943a1937fff51dacc7bbb29e6e4b4e0804ff52f1c91ee0f8200d6e9508d380b8ec90996ff65f797c011fd3c419f3a4789acdcd97b9763260507232fd745b1f884d25de7c9f549e1bdd27d2f88dffc647a2beb45f215fd79bb49a6df952fbf9a47257b269754580a75ed4e3877815ee7502f4ae86c1cc563472fb0c2423e07ab3607ada49b713cae5b41486af531afdb79cde7a739f0e36fb335c9a315c7e064be5f66178e51dc2b9c281693ca47567d2a82982eebfdcc78b675f3825544bf97fe944492fc0181593a7c149a569909824c337f5b7555ea5967a45c4e79f2ca955a2d655cb260324437e5fc8d6a11cad003769270ae6199201"]}) 12:53:34 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[0x2b0b, 0xd1, 0x3d7a, 0x20]}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x3, 0x7, 0x0, 0x2, 0x2}, 0x14) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x201000008912, &(0x7f0000000040)="11dca5055e0bcfe47bf070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xffffffff00000004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:53:34 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x5000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:34 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x2}, 0x0) 12:53:34 executing program 3: r0 = memfd_create(&(0x7f0000000140), 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x4000, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) 12:53:34 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x6000000, 0x0, @remote, 0x9}, 0x1c) 12:53:35 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x400000) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x8, 0x3}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000140)={0x7, 0x0, 0x0, 0xfffffffffffffff9}, 0x8) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1, 0x3}}) listen(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}}, [0x81, 0x7, 0x8, 0x2, 0x8, 0x7, 0x2, 0x8, 0xec, 0x7, 0x3, 0xffff, 0x9, 0x1f, 0x3]}, &(0x7f0000000280)=0x100) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000002c0)={r5, 0x7, 0x6, 0x80, 0x9, 0x4}, &(0x7f0000000300)=0x14) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair(0x5, 0x1, 0x7655, &(0x7f0000000340)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x0, 0x9, 0x7fffffff}, &(0x7f00000000c0)=0x14) 12:53:35 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000140)={0x7}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x3}}) listen(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(r1, &(0x7f0000000300)=@HCI_VENDOR_PKT, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x3, 0x2, 0x3, 0x2}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f0000000340)="390339bbd7b7005af48f499a0ecff9559ac9c104efda1c91d0531ad84d1775b7a49c5d809e69d5ee796b728ad6763913b09652ee313b63ba08f1a5f4e96200f9b215e06d9738ac5099d5625dcb411f35624f16375f9ed703a5825aa190684663ca8d104f6ffb43e061516dbafe4104d11e2cecf1dda064786b80da4520b65ba890329bff98c2508afcdd4952d8ff0e97ec4fae557af60c700a9cfc4c9e0ead543e92a8b2b07b03b969d5edfedd2b16a7c93325c7", 0xb4) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x21c) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x0, 0x9, 0x7fffffff}, &(0x7f00000000c0)=0x14) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={r4, 0x94, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0x3, @local, 0x20}, @in6={0xa, 0x8001, 0x401, @empty, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e23, 0x4, @empty, 0x6}, @in={0x2, 0x4e24, @rand_addr=0x401}]}, &(0x7f00000002c0)=0x10) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x100, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r5, 0x4}, {r5, 0x4000}], 0x2, &(0x7f00000000c0), &(0x7f0000000100)={0x6a}, 0x8) dup2(r6, r7) [ 2917.483928][ T6504] Bluetooth: hci0: sending frame failed (-49) 12:53:35 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x7000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:35 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x8}, 0x0) 12:53:35 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x8000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:35 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0xf}, 0x0) [ 2918.731497][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2919.531098][T12655] Bluetooth: hci0: command 0x1003 tx timeout [ 2919.537252][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 2920.811093][ C1] net_ratelimit: 4 callbacks suppressed [ 2920.811100][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2921.371001][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2921.371661][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2921.376906][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2921.382641][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2921.611060][T10778] Bluetooth: hci0: command 0x1001 tx timeout [ 2921.617206][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 2922.891032][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2923.451023][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2923.451116][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2923.456904][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2923.462653][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2923.690993][T12655] Bluetooth: hci0: command 0x1009 tx timeout [ 2927.051026][ C1] net_ratelimit: 5 callbacks suppressed [ 2927.051032][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:53:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_\x00\x00\x04\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}) 12:53:45 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x400, 0x7fffc) prctl$PR_GET_DUMPABLE(0x3) r1 = fcntl$dupfd(r0, 0x1000000000000000, r0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0xdf, &(0x7f0000000080)=0x4) 12:53:45 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0xf000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:45 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x300}, 0x0) 12:53:45 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) io_setup(0x88, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r2, 0x0, [0x305f, 0xa, 0x300, 0x1800, 0x6000000]}, 0x2c) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback, @initdev}, &(0x7f0000000100)=0xc) connect$packet(r0, &(0x7f0000000140)={0x11, 0xf8, r3, 0x1, 0xd3, 0x6, @broadcast}, 0x14) io_submit(r1, 0x1, &(0x7f00000017c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4000000000000, 0x0, r0, 0x0, 0xffffff0e}]) 12:53:45 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x7000000, 0x0, @remote, 0x9}, 0x1c) [ 2927.611062][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2927.611336][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2927.617057][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2927.622775][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:53:45 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x501}, 0x0) 12:53:45 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x11000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:45 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3e5, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="5800000000000000140100000800"/24, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="d5fd6d24353e6efc059cb3ddafcfe05710c853d24e4adf35d602273cdd178af4213c072afbde883c9ba9b0569a5f84dc38144fe037f322fb5d94757a1e5186abdfcb8743f14508c49580"], @ANYRESDEC=r0], 0x34, 0x1}, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x102, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00') [ 2927.755979][ T21] Bluetooth: hci0: Frame reassembly failed (-84) 12:53:45 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) read$rfkill(r0, &(0x7f0000000080), 0xfffffffffffffcb5) 12:53:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r2, r1) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) 12:53:45 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x80000001, 0x6040) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x54, "0b9bc7dc81605ad595af257f2db24f764908182a0a2acf805723ff7b2eacabad8d0f093d5e095172a94a46a7513b1290644e18a6d30cc73a2b31bcd156edb4ebf68ce0d0a43605f2150761664b33d8ef7975bdd6"}, &(0x7f0000000140)=0x5c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1}, &(0x7f00000001c0)=0x8) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x80000001}, 0x10) write(r2, &(0x7f0000000080)="240000001a005f0214f9f407000904008100000000000340000000000800040040000000", 0x24) [ 2929.131059][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2929.691599][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2929.697530][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2929.700975][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2929.709023][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2929.771057][T10778] Bluetooth: hci0: command 0x1003 tx timeout [ 2929.777199][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 2931.851117][T10778] Bluetooth: hci0: command 0x1001 tx timeout [ 2931.857253][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 2933.291014][ C1] net_ratelimit: 5 callbacks suppressed [ 2933.296653][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2933.851010][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2933.851064][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2933.856836][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2933.931070][ T7114] Bluetooth: hci0: command 0x1009 tx timeout [ 2935.371069][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2935.931093][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2935.931656][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2935.936972][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2935.942642][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2937.451061][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:53:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_\x00\x00\x04\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}) 12:53:55 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0xffffff1f}, 0x0) 12:53:55 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x3f000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:55 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x841, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000100)) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x63, 0x2) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000040)) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0xc0a85352, &(0x7f0000000200)) 12:53:55 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x1088, 0x1, 0x5, 0x40dc, 0x3, 0x2, 0x0, 0x7, 0x5, 0x4a7, 0x4}, 0xb) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x31887f1e, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x71, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="1fbfa29d260be0317eae46991ca582f7465bd115e9bbb0ef704ea5e8c8abdfd0d69c5d34b48c1016e7b96013754dc3d598098d677c0862a7c80287f1a61d5b0435ab1625a78ce109250ebacae188aa88275a55b6b030f7b29f267bceef78b6d3678f5a23c1785a791fed98f6f9217968d89a896b547304e99937fa3f048a1968565510fb03e6a05212e2166bc7cfee72e22c5802440d8210c92579"], 0x8) 12:53:55 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x8000000, 0x0, @remote, 0x9}, 0x1c) 12:53:55 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x2}, 0x0) 12:53:55 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x40000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2937.975385][ T21] Bluetooth: hci0: Frame reassembly failed (-84) 12:53:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x242040) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x9, 0x8, 0x4, 0x3}) open$dir(&(0x7f0000000340)='./file0\x00', 0x684500, 0x20) r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)=0x100000001, 0x4) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00002bbd7000ffdbdf250300000014000900fe880000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80) 12:53:55 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x3, 0xfffffffffffffffd, 0x215) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0x81}, 0x28, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x4, 0x22000) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000140)) socket$caif_stream(0x25, 0x1, 0x4) 12:53:55 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:53:55 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x3}, 0x0) [ 2939.531078][ C1] net_ratelimit: 3 callbacks suppressed [ 2939.531088][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2940.011003][ T7114] Bluetooth: hci0: command 0x1003 tx timeout [ 2940.017572][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 2940.090994][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2940.091052][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2940.096871][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2940.102931][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2941.611030][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2942.090994][ T7114] Bluetooth: hci0: command 0x1001 tx timeout [ 2942.097215][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 2942.171000][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2942.171018][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2942.176863][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2942.183235][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2944.171066][T10644] Bluetooth: hci0: command 0x1009 tx timeout [ 2945.771013][ C1] net_ratelimit: 5 callbacks suppressed [ 2945.776802][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2946.331007][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2946.331451][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2946.336835][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2946.342962][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2947.851049][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:54:05 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) 12:54:05 executing program 5: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000780)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x40, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x40000000}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x80000001) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x4) 12:54:05 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x2040400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_pts(r1, 0x280400) r3 = dup3(r2, r1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x6, 0x100000001, 0x1, 0x1, 0x4, 0x0, 0x2, 0x3f, 0x0, 0x7, 0x0, 0x8, 0x5, 0x80000001, 0x12}}) fcntl$getown(r0, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) setpgid(0x0, r4) 12:54:05 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:54:05 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x4}, 0x0) 12:54:05 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x9000000, 0x0, @remote, 0x9}, 0x1c) 12:54:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg(r1, &(0x7f0000005040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x5, 0x50100) fchmod(r0, 0x2) read$FUSE(r2, &(0x7f0000000080), 0x1000) 12:54:05 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x7}, 0x0) 12:54:05 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:54:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@initdev, 0x800, 0x0, 0xff, 0x100000000000001, 0xfffffffffffffffc}, 0x20) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2040, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000500)=0xfffffffffffffffe) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r1, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000240), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x138) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x7, 0x8}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000200)={r2, 0x81}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={r2, 0x8, 0x30, 0x6, 0xffffffff}, &(0x7f00000001c0)=0x18) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@rand_addr="15376d743273146fa88268ce719f0597", 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x1000000000800, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x20) [ 2948.273082][T21381] Bluetooth: hci0: Frame reassembly failed (-84) [ 2948.411001][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2948.411753][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2948.416889][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2948.423053][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:54:06 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x9}, 0x0) 12:54:06 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2950.331010][ T7114] Bluetooth: hci0: command 0x1003 tx timeout [ 2950.337197][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 2952.011045][ C1] net_ratelimit: 5 callbacks suppressed [ 2952.011051][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2952.411030][ T7114] Bluetooth: hci0: command 0x1001 tx timeout [ 2952.417221][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 2952.571022][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2952.571041][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2952.576883][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2952.582665][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2954.091000][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2954.491087][T10778] Bluetooth: hci0: command 0x1009 tx timeout [ 2954.651028][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2954.651090][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2954.656895][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2956.171022][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2958.251005][ C1] net_ratelimit: 4 callbacks suppressed [ 2958.256616][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:54:15 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) 12:54:15 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x2040400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_pts(r1, 0x280400) r3 = dup3(r2, r1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x6, 0x100000001, 0x1, 0x1, 0x4, 0x0, 0x2, 0x3f, 0x0, 0x7, 0x0, 0x8, 0x5, 0x80000001, 0x12}}) fcntl$getown(r0, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) setpgid(0x0, r4) 12:54:15 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x2040400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_pts(r1, 0x280400) r3 = dup3(r2, r1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x6, 0x100000001, 0x1, 0x1, 0x4, 0x0, 0x2, 0x3f, 0x0, 0x7, 0x0, 0x8, 0x5, 0x80000001, 0x12}}) fcntl$getown(r0, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) setpgid(0x0, r4) 12:54:15 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0xa}, 0x0) 12:54:15 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:54:15 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xa000000, 0x0, @remote, 0x9}, 0x1c) [ 2958.429778][ T21] Bluetooth: hci0: Frame reassembly failed (-84) 12:54:16 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:54:16 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0xe}, 0x0) 12:54:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mknod(&(0x7f0000000200)='./file0\x00', 0x1120, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) fcntl$setpipe(r1, 0x407, 0x0) writev(r1, &(0x7f00000005c0)=[{&(0x7f00000000c0)="c7", 0x1}], 0x1) r2 = dup2(r1, r1) clone(0x1000108, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f0000000100)='p', 0x1}], 0x1, 0x0) poll(&(0x7f0000000080)=[{r2}], 0x1, 0x81) read$FUSE(r2, &(0x7f0000000880), 0x1000) 12:54:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) 12:54:16 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:54:16 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x10}, 0x0) [ 2958.810994][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2958.810999][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2958.811050][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2958.816966][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2960.331067][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2960.491003][T12655] Bluetooth: hci0: command 0x1003 tx timeout [ 2960.497188][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 2960.891028][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2960.891034][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2960.891086][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2960.896876][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2962.571001][T10778] Bluetooth: hci0: command 0x1001 tx timeout [ 2962.577166][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 2964.491026][ C1] net_ratelimit: 4 callbacks suppressed [ 2964.496635][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2964.650989][T12655] Bluetooth: hci0: command 0x1009 tx timeout [ 2965.051023][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2965.051049][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2965.056869][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2965.062617][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2966.571051][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2967.131013][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2967.131045][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2967.136871][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:54:26 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:54:26 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x11}, 0x0) 12:54:26 executing program 3: setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000008d80)=0x20, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 12:54:26 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xe000000, 0x0, @remote, 0x9}, 0x1c) 12:54:26 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0xf00000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:54:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x9, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000000)={0x2}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2968.651022][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2968.690601][T16957] Bluetooth: hci0: Frame reassembly failed (-84) 12:54:26 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:54:26 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x28}, 0x0) 12:54:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1014000000016) 12:54:26 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:54:26 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x60}, 0x0) 12:54:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 2969.084598][T26212] input: syz0 as /devices/virtual/input/input73 [ 2970.731541][ C1] net_ratelimit: 3 callbacks suppressed [ 2970.731547][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2970.743481][T10778] Bluetooth: hci0: command 0x1003 tx timeout [ 2970.749617][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 2971.291004][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2971.296813][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2971.300964][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2971.308276][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2972.811044][ T7114] Bluetooth: hci0: command 0x1001 tx timeout [ 2972.811461][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2972.817172][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 2973.371029][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2973.371037][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2973.371107][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2973.376960][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2974.890981][ T7114] Bluetooth: hci0: command 0x1009 tx timeout [ 2976.971066][ C1] net_ratelimit: 5 callbacks suppressed [ 2976.971075][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2977.531029][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2977.531517][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2977.536875][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2977.542574][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:54:36 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:54:36 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:54:36 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x300}, 0x0) 12:54:36 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000140)=""/219) syz_emit_ethernet(0x2e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaa9968840010ec07000001901414aa440000000000690e2e32d9c017ce5b13fc000000000000000000000000000000000000000000a48be8e6f3a5201d1c592acea1c722007160f752bdfb80bddb85276d744e4039935bf44d36f948ad9f40aed817c6ee7d5a75c7c533f398ead9f087e21ea08384dada9abdcfd10fb2db8ad3c9d9fb966d5c22a708ca724f5d3e5491a113228419c620603ac3055f734c7c955c0100b836fc97c46ede0707894dd5527968c51a678d649e0b1f79a1c8cbdaff97b259987ca3874507a26a5074ed04345ac9158c"], 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0xa000) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) setsockopt(r2, 0x7f, 0x6, &(0x7f0000000100)="23169b21716724efaa4a5fb0deb827bdcd7ab9350a", 0x15) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r1, r2, 0x14, 0x2}, 0x10) 12:54:36 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000, 0x0, @remote, 0x9}, 0x1c) 12:54:36 executing program 5: r0 = dup(0xffffffffffffffff) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000080)={0x7b, 0x0, [0x4b564d02, 0x0, 0x2000000048, 0x1]}) 12:54:36 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:54:36 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:54:36 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x700}, 0x0) 12:54:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "91f5c9a1938f2b24", "596cdaad2f281b7cecca45f96ebb092d", "59a15945", "5e0d124dd7fdc23f"}, 0x28) sendmsg$inet6(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rthdr_2292={{0x18}}, @dontfrag={{0x14}}], 0x30}, 0x0) 12:54:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1e8, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x80000003) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x40040) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000080)={0x400, 0x7, 0xff, 0x2, 0x4}) [ 2979.051024][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:54:36 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:54:36 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x241, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0)={0xffffffffffffffff}, 0x1, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0xfff, 0x0, {"55d3349e9a206b3fd4c6cd3a8c788310"}, 0x7fff, 0x1000, 0x55d2}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000540)=0x1, 0x4) write$binfmt_elf64(r2, 0x0, 0x0) write$P9_RREMOVE(r2, 0x0, 0x0) userfaultfd(0x72414db53062eceb) 12:54:36 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0xfffffffffffff7c2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000200)={0x5, 0xff, 0xc000}) eventfd2(0x9, 0x0) 12:54:36 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:54:36 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x900}, 0x0) [ 2979.611003][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2979.616915][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2979.620999][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2979.628414][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:54:37 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x11000000, 0x0, @remote, 0x9}, 0x1c) 12:54:37 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 12:54:37 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0)=0xfffffffffffffffd, 0x2fc) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000180)={"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"}) 12:54:37 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:54:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x40400, 0x41) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r2, 0x700, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4010) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f00000000c0)={0x100, 0xf, 0x15, "c1c0d684fd72639d83ca752c06d5ebd70889b1986a0a7b60fdc9f921f2d348c3f433896e5e94750b33522d75c5cfff1c700b9e62f6860e5bbdf0359c", 0x1e, "7319cd8944113117ae0eb5652ec6eefdee97d92c9b4cbae8ee6b8e5352c3b20402d87be09ed1a40d43609f4d5eedd40ff15e0de1df2d642105362ad1", 0x40}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1}}) 12:54:37 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0xa00}, 0x0) [ 2979.716015][T27247] Trying to set illegal importance in message [ 2979.752706][T27247] Trying to set illegal importance in message 12:54:37 executing program 3: modify_ldt$read_default(0x2, &(0x7f0000000000)=""/114, 0x72) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x0, 0x100000001}, 0x1c) 12:54:37 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=""/4096}) getpeername$packet(r0, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001100)=0x14) getsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000280)=""/107, &(0x7f0000000300)=0x6b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'teql0\x00', r2}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001140)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000380)=r0, 0x1) preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 12:54:37 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:54:37 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 12:54:37 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0xe00}, 0x0) 12:54:37 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 12:54:38 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x20000, 0x4) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x100000000) 12:54:38 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:54:38 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:54:38 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x1100}, 0x0) 12:54:38 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x18020000, 0x0, @remote, 0x9}, 0x1c) 12:54:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000340)={0x4000}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x10200, 0x0, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000080)={0x0, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}, {&(0x7f00000007c0)=""/126, 0x7e}], 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x680003) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f00000002c0)={0x1, 0x0, {0x22, 0x1e, 0x9, 0xe, 0x5, 0x1000, 0x0, 0xe0}}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000300)=0x9, 0xba) r4 = open(&(0x7f0000000140)='./file0\x00', 0x101000, 0x26) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000500)={0x8, 0x7, @name="bca214a7aaafb4beb7aa0fec705706d772073ac25fb5d7f75130e18ec753ac39"}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:54:38 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0xffffffffffffffac, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x80e5db859e7c7ae0}}, 0xfffffffffffffdcd) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r1, 0x100000}}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x1) 12:54:38 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2980.708341][T12596] Bluetooth: hci0: Frame reassembly failed (-84) 12:54:38 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x1448}, 0x0) 12:54:38 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync(r0) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x402, 0x0) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e695bd8ab1845fb4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0f00"/128]) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(md5-generic)\x00'}, 0x58) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f00000002c0)={r4, 0x3, &(0x7f00000001c0)=[0x81, 0x5d6bdce8, 0x80000001], &(0x7f0000000200)=[0x80], 0x5, 0x3, 0x80000000, &(0x7f0000000240)=[0x1, 0x100, 0xffffffffffffffcd], &(0x7f0000000280)=[0x9, 0x0, 0x0, 0x0]}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000140)={0x20, 0x5, 0x4, 0x5, 0x7, 0x20, 0xfd8}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000680)=0x0, &(0x7f00000006c0), &(0x7f0000000700)) r8 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000740)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000840)=0xe8) r10 = getegid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000880)=0x0) getresuid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)=0x0) stat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = fcntl$getown(r1, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000a40)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000b40)=0xe8) stat(&(0x7f0000000b80)='\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = fcntl$getown(r3, 0x9) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000d00)={0x0, 0x0, 0x0}, &(0x7f0000000d40)=0xc) r20 = getpid() getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002240)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000002340)=0xe8) r22 = getgid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000002380)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000023c0)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000024c0)=0xe8) stat(&(0x7f0000002500)='./file0\x00', &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f0000002640)=[{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)="5a5f997c8134bfa5da50d330b4833f52d4a424793bd41f640a642ed06685f21cf57a44ba5af7dd2ad3606b10bc054b066ba538b925242eb751b025f6ec3ac88c736d43fcb3661746f3507b3dee6e5e391f90782394653eba534ec402a825b0c430a5945f4df58b48740a85b7dbb1930dc51b41f32db8310cfb17586ba433092936d98dd6c3d30feed342", 0x8a}, {&(0x7f0000000440)="d88103c3d65ce0a71b5b77260a25e95dfc16e4d206d526532fd30ce9cbc73179b1dd992c8f2a70d2c67951ff9a7403b218969d48e261cfe81e751d0242265c3ee71bb202b28d26edded40b7cd639d84a85c1a237811086da5cdb685094b56f5416ea88ddf4b6832128043ce132c2c299366842a9c95f1abfb93812eebc4e55238435633c6036d51622a75b574325e3018ff7e7d9267f17332a4e0942120371913bd7550ec8ed42e43775a99e73ff155217c23f17ea", 0xb5}], 0x2, &(0x7f0000000d80)=[@rights={{0x34, 0x1, 0x1, [r1, r0, r3, r1, r3, r2, r3, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x20, 0x1, 0x1, [r2, r0, r3, r1]}}, @rights={{0x30, 0x1, 0x1, [r0, r2, r0, r1, r1, r3, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}], 0x128, 0x41}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)="c02233ff232394307602914956b2aaeecb7400fff5ea2887eca2441811124a51ebc28c97cebe71ff7358fef077234c73030e0bfef3a1737e39d2d282f7b955122846f982463189e9bb3ea38e0fa9264d44722966ff8df7", 0x57}], 0x2, 0x0, 0x0, 0x80}, {&(0x7f0000002000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002200)=[{&(0x7f0000002080)="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", 0xfd}, {&(0x7f0000002180)="0b6e01a874b9f206e2774f9ca344a2ea831bad2e37c7d2476429773c8e18af3a5a6929f7163b73c44ec3e7e3418b6cd6b48e972ab033e88a88811266dd00879364319f805cc431067769a035ba0a642927a4dd77554f5aeab28d5193b043b9ad01cd70f4", 0x64}], 0x2, &(0x7f00000025c0)=[@cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @rights={{0x1c, 0x1, 0x1, [r1, r2, r3]}}, @cred={{0x1c, 0x1, 0x2, {r23, r24, r25}}}, @rights={{0x20, 0x1, 0x1, [r0, r3, r3, r2]}}], 0x80, 0x40800}], 0x3, 0x10) r26 = getpgid(0xffffffffffffffff) r27 = getpgid(0xffffffffffffffff) kcmp(r26, r27, 0x4, r2, r2) 12:54:38 executing program 3: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x800, 0x58) sendmsg$inet6(r0, &(0x7f0000000680)={&(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr="ed74ac728dc08ba8489a73183d53979a"}, 0xd9, 0x0}, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x44, 0x40480) 12:54:38 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x2800}, 0x0) 12:54:38 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:54:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100090e000000000001000000000405000600000000000a0000000000000400000000000000000000de2100000000000100020000000002000100010000000000000200fd000005000500000000000a004872bb01000000000000001309e339be593f770700000001001700410000d5b3c69cf027cf3a532b3ea2fd92a04304b01b531cf0a31320d413b88a92927f2a9929008f2bb30f2628404ad7b37209bef709df0b7fe3f1e7c8b8b8e72362cc2ff11ca3a6eda3fefdafd20d6f384e7d506e404260ffd0effe9cdb1a9408630a63de6a452af668e5be87739e7546d84367e5986c0230e691f15ec5ba8dc62ae431596fb875e8e3433d62620ef3ae85cb3b73e50bb068c60cf96c99b5a61df4018bfc87547e7b20020d39c1a0d41650d4442309303b8a0a4c9f3ea453f86b1d94ff3d3d51b30dd600cea73c88a393dac63101582e30dfc6f06aff8d78be470e6cb3f66d68d1f877e76cf2478971d07884bd99eb865a582731f33684abe511d2e0b204c5ad50684de3ebfe8d32aa3adbdd1012d22ff6fef32f659d4bef33e4b7e4bd7ac00a97f5cf85d0147345d79895b3bca43a6233b401db4cf5642e2f7ec30a88be63df4032b862b1d000cc23e27b825c4508ec8e826dc300"/466], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) [ 2982.730954][T19790] Bluetooth: hci0: command 0x1003 tx timeout [ 2982.737095][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 2983.211006][ C1] net_ratelimit: 5 callbacks suppressed [ 2983.211012][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2983.771010][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2983.771043][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2983.776849][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2984.811041][T10778] Bluetooth: hci0: command 0x1001 tx timeout [ 2984.817188][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 2985.291064][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2985.851006][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2985.851025][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2985.856849][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2985.862676][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2986.891007][T19790] Bluetooth: hci0: command 0x1009 tx timeout [ 2987.371173][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2989.451231][ C1] net_ratelimit: 3 callbacks suppressed [ 2989.451240][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2990.011005][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2990.011025][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2990.016811][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2990.022565][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:54:48 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:54:48 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x4000}, 0x0) 12:54:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r4) uselib(&(0x7f0000000080)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x3c) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r6) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r7, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 12:54:48 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:54:48 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0x2, 0xf000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="ff2392da04e30d1f707f785511cd", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 12:54:48 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x20000000, 0x0, @remote, 0x9}, 0x1c) 12:54:48 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:54:48 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x11, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2991.076618][T21381] Bluetooth: hci0: Frame reassembly failed (-84) 12:54:48 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x4814}, 0x0) 12:54:48 executing program 3: r0 = socket(0x40000000000f, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x22a01, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000680)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x290) 12:54:48 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x300, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2991.244079][T21906] Bluetooth: hci1: sending frame failed (-49) 12:54:48 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x6000}, 0x0) [ 2991.541127][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2992.091008][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2992.091055][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2992.096927][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2993.130980][T10778] Bluetooth: hci0: command 0x1003 tx timeout [ 2993.137154][T21906] Bluetooth: hci0: sending frame failed (-49) [ 2993.290986][T10778] Bluetooth: hci1: command 0x1003 tx timeout [ 2993.297269][T21906] Bluetooth: hci1: sending frame failed (-49) [ 2993.611085][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2995.210997][T10778] Bluetooth: hci0: command 0x1001 tx timeout [ 2995.217301][T21906] Bluetooth: hci0: sending frame failed (-49) [ 2995.371011][T10778] Bluetooth: hci1: command 0x1001 tx timeout [ 2995.377361][T21906] Bluetooth: hci1: sending frame failed (-49) [ 2995.691030][ C1] net_ratelimit: 4 callbacks suppressed [ 2995.691036][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2996.250987][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2996.250992][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2996.251037][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2996.256901][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2997.290969][T19790] Bluetooth: hci0: command 0x1009 tx timeout [ 2997.451059][T19790] Bluetooth: hci1: command 0x1009 tx timeout [ 2997.771044][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2998.331128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2998.331238][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2998.337196][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2998.343259][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:54:58 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:54:58 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1b1b, 0x81) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002680)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x74000000, [0x4b564d03], [0xc1]}) 12:54:58 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x500, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:54:58 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x34000}, 0x0) 12:54:58 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3f000000, 0x0, @remote, 0x9}, 0x1c) 12:54:58 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x700, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 3001.276371][T16957] Bluetooth: hci0: Frame reassembly failed (-84) 12:54:59 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:54:59 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x400300}, 0x0) 12:54:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/unix\x00') setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e22, 0xffffffffffffff01, @local, 0x2}, {0xa, 0x4e23, 0x5, @ipv4={[], [], @broadcast}, 0x9f63}, 0x100, [0x8, 0xa097, 0x2, 0x1, 0x0, 0xffffffffffff8000, 0x1, 0x2]}, 0x5c) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = epoll_create(0xe) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f00000000c0)={'security\x00', 0x69, "9a0d3c900b3e8e852f06f7b16fac8a52d72c7519908a4d472171cc4c70dd0708e925876fc0982cd18ed420836333cb6bb221bdc34f114d4015f29e01ea22a6c06cef2933c24144a189fe9b6cc63088a2b635f1c2f86ddc7e56677cee97613179daf812d14bfdf1a187"}, &(0x7f0000000180)=0x8d) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000040)={0x90000001}) epoll_wait(r4, &(0x7f0000000080)=[{}], 0x3b0, 0xfffffffffffffffb) write$P9_RSTAT(r3, &(0x7f00000001c0)={0x55, 0x7d, 0x1, {0x0, 0x4e, 0x1, 0x9f3a, {0x2a, 0x2, 0x5}, 0x180000, 0x8, 0x5, 0x7, 0x9, 'security\x00', 0x9, 'security\x00', 0x9, 'security\x00'}}, 0x55) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 12:54:59 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0xf00, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:54:59 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x1000000}, 0x0) [ 3001.931018][ C1] net_ratelimit: 5 callbacks suppressed [ 3001.931026][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3001.959656][T21381] Bluetooth: hci1: Frame reassembly failed (-84) 12:54:59 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x1100, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 3002.490995][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3002.491000][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3002.491038][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3002.496832][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3003.291084][T10778] Bluetooth: hci0: command 0x1003 tx timeout [ 3003.297270][T21906] Bluetooth: hci0: sending frame failed (-49) [ 3004.011025][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3004.017009][T10778] Bluetooth: hci1: command 0x1003 tx timeout [ 3004.023166][T21906] Bluetooth: hci1: sending frame failed (-49) [ 3004.571020][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3004.571082][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3004.576854][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3005.371050][ T7114] Bluetooth: hci0: command 0x1001 tx timeout [ 3005.377218][T21906] Bluetooth: hci0: sending frame failed (-49) [ 3006.091030][ T7114] Bluetooth: hci1: command 0x1001 tx timeout [ 3006.091058][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3006.103021][T21906] Bluetooth: hci1: sending frame failed (-49) [ 3007.450983][T10778] Bluetooth: hci0: command 0x1009 tx timeout [ 3008.171020][ C1] net_ratelimit: 3 callbacks suppressed [ 3008.171026][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3008.182685][T10778] Bluetooth: hci1: command 0x1009 tx timeout [ 3008.730988][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3008.731663][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3008.736809][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3008.742542][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3010.251857][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3010.811044][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3010.811086][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3010.816903][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:55:09 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:55:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x0, 0x2) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000040)) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000001c0)={r2, r3, 0x5}) 12:55:09 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x2000000}, 0x0) 12:55:09 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x3f00, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:55:09 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x40000000, 0x0, @remote, 0x9}, 0x1c) [ 3011.506359][T29916] vivid-001: ================= START STATUS ================= [ 3011.527304][T29916] vivid-001: Radio HW Seek Mode: Bounded [ 3011.533856][T29916] vivid-001: Radio Programmable HW Seek: false [ 3011.540582][T29916] vivid-001: RDS Rx I/O Mode: Block I/O [ 3011.548189][T29916] vivid-001: Generate RBDS Instead of RDS: false [ 3011.555706][T29916] vivid-001: RDS Reception: true [ 3011.562311][T29916] vivid-001: RDS Program Type: 0 inactive [ 3011.568751][T29916] vivid-001: RDS PS Name: [ 3011.568968][T16957] Bluetooth: hci0: Frame reassembly failed (-84) [ 3011.569106][T29916] inactive [ 3011.575903][T16957] Bluetooth: hci0: Frame reassembly failed (-84) [ 3011.581081][T29916] vivid-001: RDS Radio Text: inactive [ 3011.597044][T29916] vivid-001: RDS Traffic Announcement: false inactive 12:55:09 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x4000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 3011.604642][T29916] vivid-001: RDS Traffic Program: false inactive [ 3011.611572][T29916] vivid-001: RDS Music: false inactive [ 3011.617571][T29916] vivid-001: ================== END STATUS ================== 12:55:09 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:55:09 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x3000000}, 0x0) 12:55:09 executing program 3: open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000000280)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x858, 0x20003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f00000000c0)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='cpuset\'*$#\x00', r0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={0x6}, 0x8, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x8, 0x0, 0x2}, 0x5}}, 0x18) r2 = dup(r1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)=0x0) ptrace$setregs(0xd, r3, 0x101, &(0x7f0000000540)="e9c3ef68d673d6e50f8ccd92508d06fd82b12d54d9fb5a6e2e1447c1e90ada4d1de83adeb879fa21d0094580fdb7d36aace812257fbf892baf635effcd69e51c5e1c8f9d8fcf777f02aba7f0ee6760e5603b16b80298704fee9d5cc06d984a33aa82fa9436e4a1c2728a3f51ec3573e2a29bef48ff0532429d807b71298ddaa74375a5745f58f97dc5495a443670e770c6eb1051f0d063c605765a34f1dd53ca2eee1c09ab62d3a5cbb9b75cdfb9b02605b71f280ffe0f27438e42863b85ae9f901ae644ae39c8a20f99082d321002b6d73b5d") ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) process_vm_writev(r3, &(0x7f0000000200)=[{&(0x7f0000000380)=""/181, 0xb5}], 0x1, &(0x7f00000002c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000006c0)="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") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r2, r4, 0x0, 0x8000fffffffe) 12:55:09 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x1000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:55:09 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x4000000}, 0x0) 12:55:09 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x2000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 3012.331062][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3013.610960][ T7114] Bluetooth: hci0: command 0x1003 tx timeout [ 3013.617312][T21906] Bluetooth: hci0: sending frame failed (-49) [ 3014.170972][T10644] Bluetooth: hci1: command 0x1003 tx timeout [ 3014.177202][T21906] Bluetooth: hci1: sending frame failed (-49) [ 3014.411041][ C1] net_ratelimit: 3 callbacks suppressed [ 3014.411047][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3014.971026][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3014.977525][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3014.980990][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3014.989821][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3015.690969][ T7114] Bluetooth: hci0: command 0x1001 tx timeout [ 3015.697265][T21906] Bluetooth: hci0: sending frame failed (-49) [ 3016.250995][ T7114] Bluetooth: hci1: command 0x1001 tx timeout [ 3016.257290][T21906] Bluetooth: hci1: sending frame failed (-49) [ 3016.491066][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3017.051009][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3017.051017][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3017.051062][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3017.056845][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3017.771091][T10644] Bluetooth: hci0: command 0x1009 tx timeout [ 3018.331138][T10644] Bluetooth: hci1: command 0x1009 tx timeout [ 3020.651037][ C1] net_ratelimit: 5 callbacks suppressed [ 3020.657857][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3021.211016][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3021.211034][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3021.217593][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3021.224360][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:55:19 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:55:19 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x7000000}, 0x0) 12:55:19 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x40020000, 0x0, @remote, 0x9}, 0x1c) 12:55:19 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x3000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:55:19 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x0, 0x3, 0x99ea, 0x0, 0x4}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(md5-generic)\x00'}, 0x58) [ 3021.728049][T30354] Unknown ioctl -1072409599 [ 3021.754275][T30354] Unknown ioctl -1072409599 12:55:19 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x9000000}, 0x0) [ 3021.780986][T12596] Bluetooth: hci0: Frame reassembly failed (-84) 12:55:19 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:55:19 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x5, 0x400000) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000080)={0x0, 0x0, 0x200000000000100}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x1fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f0000000100)="3058020af10c", 0x6, 0xfffffffffffffffd) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x81) sync_file_range(r1, 0xfd, 0x3f, 0x7) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000000)) 12:55:19 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x4000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:55:19 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0xa000000}, 0x0) 12:55:19 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:55:20 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x5000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 3022.741042][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3023.291000][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3023.291020][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3023.297878][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3023.303625][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3023.850975][ T7114] Bluetooth: hci0: command 0x1003 tx timeout [ 3023.857269][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 3025.930977][T10644] Bluetooth: hci0: command 0x1001 tx timeout [ 3025.937245][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 3026.891022][ C1] net_ratelimit: 4 callbacks suppressed [ 3026.891028][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3027.450985][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3027.451022][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3027.456997][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3027.462718][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3028.011004][ T7114] Bluetooth: hci0: command 0x1009 tx timeout [ 3028.971047][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3029.530976][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3029.530982][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3029.531060][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3029.536875][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:55:29 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:55:29 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0xe000000}, 0x0) 12:55:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000340)={@dev={0xac, 0x14, 0x14, 0xf}, @empty}, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000005, &(0x7f00000000c0)=0x74, 0xfffffffffffffea1) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000003900)=[{{&(0x7f0000000100)=@tipc=@id, 0x80, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/143, 0x8f}], 0x1, &(0x7f0000000480)=""/4096, 0x1000}, 0x6d7}, {{0x0, 0x0, 0x0}}], 0x2, 0x1, &(0x7f0000003a00)={0x0, 0x989680}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x223, 0x200007fa, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='htcp\x00', 0x5) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000240)=""/233) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1017f) 12:55:29 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:55:29 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x7000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:55:29 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x48000000, 0x0, @remote, 0x9}, 0x1c) 12:55:29 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 12:55:29 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x10000000}, 0x0) [ 3032.011416][T16957] Bluetooth: hci0: Frame reassembly failed (-84) 12:55:29 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:55:29 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 12:55:29 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 12:55:29 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 3032.262273][T21381] Bluetooth: hci1: Frame reassembly failed (-84) [ 3033.131089][ C1] net_ratelimit: 5 callbacks suppressed [ 3033.131097][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3033.691061][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3033.691093][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3033.696957][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3034.091000][T10644] Bluetooth: hci0: command 0x1003 tx timeout [ 3034.097168][T21906] Bluetooth: hci0: sending frame failed (-49) [ 3034.330985][T19790] Bluetooth: hci1: command 0x1003 tx timeout [ 3034.337169][T21906] Bluetooth: hci1: sending frame failed (-49) [ 3035.211042][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3035.770988][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3035.771076][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3035.777173][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3035.783092][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3036.171011][T19790] Bluetooth: hci0: command 0x1001 tx timeout [ 3036.177502][T21906] Bluetooth: hci0: sending frame failed (-49) [ 3036.411114][T19790] Bluetooth: hci1: command 0x1001 tx timeout [ 3036.417951][T21906] Bluetooth: hci1: sending frame failed (-49) [ 3037.291037][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3038.251026][T10644] Bluetooth: hci0: command 0x1009 tx timeout [ 3038.491006][T10644] Bluetooth: hci1: command 0x1009 tx timeout [ 3039.371077][ C1] net_ratelimit: 4 callbacks suppressed [ 3039.377400][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3039.931025][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3039.931046][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3039.937418][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3039.943397][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3041.451021][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3042.010990][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3042.010996][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3042.011069][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3042.016823][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:55:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:55:39 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0xf000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:55:39 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x11000000}, 0x0) 12:55:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fallocate(r2, 0x69, 0x0, 0x4) 12:55:39 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4c000000, 0x0, @remote, 0x9}, 0x1c) 12:55:39 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x11000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:55:39 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x14480000}, 0x0) [ 3042.224326][T16957] Bluetooth: hci0: Frame reassembly failed (-84) 12:55:39 executing program 3: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) fchmod(r0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='\xbeC\x99\xca\xa7(\x85#*\xd3x\xab8\xb5system.pdefault\x00', 0x0, 0x0, 0x0) 12:55:39 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x28000000}, 0x0) 12:55:39 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x3f000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:55:40 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x40000000}, 0x0) 12:55:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 3042.853741][T12596] Bluetooth: hci1: Frame reassembly failed (-84) [ 3044.251062][ T7114] Bluetooth: hci0: command 0x1003 tx timeout [ 3044.257234][T21906] Bluetooth: hci0: sending frame failed (-49) [ 3044.890973][ T7114] Bluetooth: hci1: command 0x1003 tx timeout [ 3044.897152][T21906] Bluetooth: hci1: sending frame failed (-49) [ 3045.611020][ C1] net_ratelimit: 4 callbacks suppressed [ 3045.611027][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3046.171003][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3046.171327][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3046.176878][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3046.182582][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3046.331136][ T7114] Bluetooth: hci0: command 0x1001 tx timeout [ 3046.337272][T21906] Bluetooth: hci0: sending frame failed (-49) [ 3046.970982][T10778] Bluetooth: hci1: command 0x1001 tx timeout [ 3046.977136][T21906] Bluetooth: hci1: sending frame failed (-49) [ 3047.691024][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3048.251014][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3048.251044][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3048.256870][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3048.262824][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3048.411049][T10778] Bluetooth: hci0: command 0x1009 tx timeout [ 3049.051103][ T7114] Bluetooth: hci1: command 0x1009 tx timeout [ 3051.851029][ C1] net_ratelimit: 5 callbacks suppressed [ 3051.851038][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:55:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:55:50 executing program 3: 12:55:50 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x60000000}, 0x0) 12:55:50 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x40000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:55:50 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x58000000, 0x0, @remote, 0x9}, 0x1c) [ 3052.411041][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3052.411088][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3052.416882][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3052.422584][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:55:50 executing program 3: 12:55:50 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0xffffff7f}, 0x0) 12:55:50 executing program 3: 12:55:50 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:55:50 executing program 3: 12:55:50 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x40030000000000}, 0x0) 12:55:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 3053.931000][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3054.491056][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3054.491096][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3054.499438][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3054.506052][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3054.571204][T10778] Bluetooth: hci0: command 0x1003 tx timeout [ 3054.577559][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 3056.651078][T10778] Bluetooth: hci0: command 0x1001 tx timeout [ 3056.657224][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 3058.091030][ C1] net_ratelimit: 5 callbacks suppressed [ 3058.091039][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3058.651014][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3058.651345][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3058.656873][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3058.662598][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3058.730994][ T7114] Bluetooth: hci0: command 0x1009 tx timeout [ 3060.171701][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3060.731069][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3060.731376][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3060.736892][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3060.742632][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:56:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:56:00 executing program 3: 12:56:00 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:56:00 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x100000000000000}, 0x0) 12:56:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:56:00 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x68000000, 0x0, @remote, 0x9}, 0x1c) 12:56:00 executing program 3: 12:56:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:56:00 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x200000000000000}, 0x0) 12:56:00 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:56:00 executing program 3: 12:56:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 3064.331007][ C1] net_ratelimit: 4 callbacks suppressed [ 3064.331013][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3064.810980][T10644] Bluetooth: hci0: command 0x1003 tx timeout [ 3064.817483][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 3064.891023][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3064.897003][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3064.900966][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3064.908884][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3066.411013][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3066.891029][ T7114] Bluetooth: hci0: command 0x1001 tx timeout [ 3066.897183][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 3066.970994][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3066.971027][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3066.976852][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3068.491032][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3068.970993][T10644] Bluetooth: hci0: command 0x1009 tx timeout [ 3070.571004][ C1] net_ratelimit: 4 callbacks suppressed [ 3070.571010][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3071.131018][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3071.131024][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3071.131096][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3071.136881][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3072.651032][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:56:10 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:56:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0x0, 0x1, 'sh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 12:56:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:56:10 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x300000000000000}, 0x0) 12:56:10 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:56:10 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x6c000000, 0x0, @remote, 0x9}, 0x1c) 12:56:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:56:10 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 3072.993845][T16957] Bluetooth: hci0: Frame reassembly failed (-84) 12:56:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x46a, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x4000) 12:56:10 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x400000000000000}, 0x0) 12:56:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 3073.150410][ T700] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 12:56:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 3073.210989][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3073.210995][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3073.211082][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3073.217014][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3075.050978][T19790] Bluetooth: hci0: command 0x1003 tx timeout [ 3075.057247][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 3076.811015][ C1] net_ratelimit: 5 callbacks suppressed [ 3076.811028][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3077.131006][T19790] Bluetooth: hci0: command 0x1001 tx timeout [ 3077.137729][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 3077.370982][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3077.371011][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3077.376938][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3077.382837][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3078.891019][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3079.211003][T10778] Bluetooth: hci0: command 0x1009 tx timeout [ 3079.451028][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3079.451110][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3079.457082][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3079.462867][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3083.051032][ C1] net_ratelimit: 5 callbacks suppressed [ 3083.056845][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:56:20 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:56:20 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:56:20 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x700000000000000}, 0x0) 12:56:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:56:20 executing program 3: rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4, 0x0, 0xa30000, 0xa30000}, 0x3}, 0x20, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) 12:56:20 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x74000000, 0x0, @remote, 0x9}, 0x1c) 12:56:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:56:20 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x10, 0x3, 0xc) [ 3083.219232][T16957] Bluetooth: hci0: Frame reassembly failed (-84) 12:56:20 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:56:20 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x900000000000000}, 0x0) 12:56:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:56:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000000)=""/22) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) [ 3083.610992][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3083.611031][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3083.616838][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3085.131019][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3085.291007][T19790] Bluetooth: hci0: command 0x1003 tx timeout [ 3085.297151][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 3085.691013][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3085.691063][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3085.696835][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3085.702593][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3087.211027][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3087.371072][T10644] Bluetooth: hci0: command 0x1001 tx timeout [ 3087.377417][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 3089.291038][ C1] net_ratelimit: 4 callbacks suppressed [ 3089.296631][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3089.451034][T19790] Bluetooth: hci0: command 0x1009 tx timeout [ 3089.851052][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3089.851370][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3089.856945][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3089.862665][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3091.371005][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3091.930998][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3091.931032][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3091.937074][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:56:30 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:56:30 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0xf00000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:56:30 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0xa00000000000000}, 0x0) 12:56:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:56:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") setrlimit(0x400000000000007, &(0x7f0000000000)) 12:56:30 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x7a000000, 0x0, @remote, 0x9}, 0x1c) 12:56:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) [ 3093.451011][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:56:31 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x1100000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:56:31 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0xe00000000000000}, 0x0) 12:56:31 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_robust_list(&(0x7f0000000080), 0x18) 12:56:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 12:56:31 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 3095.531077][ C1] net_ratelimit: 4 callbacks suppressed [ 3095.531083][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3095.543577][T10644] Bluetooth: hci0: command 0x1003 tx timeout [ 3095.549767][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 3096.091001][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3096.091007][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3096.091078][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3096.096857][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3097.611024][T19790] Bluetooth: hci0: command 0x1001 tx timeout [ 3097.611055][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3097.621159][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 3098.171002][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3098.171008][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3098.171069][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3098.176890][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3099.691076][T19790] Bluetooth: hci0: command 0x1009 tx timeout [ 3101.771046][ C1] net_ratelimit: 5 callbacks suppressed [ 3101.776682][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3102.331054][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3102.331060][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3102.331138][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3102.336905][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:56:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:56:41 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x1000000000000000}, 0x0) 12:56:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 12:56:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:56:41 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:56:41 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x80040200, 0x0, @remote, 0x9}, 0x1c) 12:56:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:56:41 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 12:56:41 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x1100000000000000}, 0x0) [ 3103.812440][T21381] Bluetooth: hci0: Frame reassembly failed (-84) [ 3103.851003][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:56:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) fchown(r1, 0x0, 0x0) [ 3103.871779][T21381] Bluetooth: hci1: Frame reassembly failed (-84) 12:56:41 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0}]) 12:56:41 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x1448000000000000}, 0x0) [ 3104.411013][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3104.411020][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3104.411098][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3104.416858][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3105.850972][T19790] Bluetooth: hci0: command 0x1003 tx timeout [ 3105.857714][T21906] Bluetooth: hci0: sending frame failed (-49) [ 3105.930987][T19790] Bluetooth: hci1: command 0x1003 tx timeout [ 3105.937255][T21906] Bluetooth: hci1: sending frame failed (-49) [ 3107.930998][T19790] Bluetooth: hci0: command 0x1001 tx timeout [ 3107.937149][T21906] Bluetooth: hci0: sending frame failed (-49) [ 3108.011008][T19790] Bluetooth: hci1: command 0x1001 tx timeout [ 3108.011342][ C1] net_ratelimit: 5 callbacks suppressed [ 3108.011373][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3108.028525][T21906] Bluetooth: hci1: sending frame failed (-49) [ 3108.570995][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3108.571309][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3108.576887][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3108.582565][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3110.011013][T10778] Bluetooth: hci0: command 0x1009 tx timeout [ 3110.091064][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3110.097037][T10778] Bluetooth: hci1: command 0x1009 tx timeout [ 3110.651018][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3110.651063][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3110.657113][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3110.663153][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:56:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:56:51 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0}]) 12:56:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") setresgid(0x0, 0x0, 0x0) 12:56:51 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x2800000000000000}, 0x0) 12:56:51 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x8dffffff, 0x0, @remote, 0x9}, 0x1c) 12:56:51 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0}]) [ 3113.945157][T12596] Bluetooth: hci0: Frame reassembly failed (-84) [ 3114.251045][ C1] net_ratelimit: 4 callbacks suppressed [ 3114.251053][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:56:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:56:52 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x4000000000000000}, 0x0) 12:56:52 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa811dc2479b4dd5e8d48545bbc7ad5e7008062ef9e9df8fb35f3dea5df3260001080006040001ffffffffffffffff00"/65], 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f00000000c0)={0x0, 0x4, 0x3016, 0x1}) 12:56:52 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 12:56:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000000)=0x100005) umount2(&(0x7f0000000040)='./file0\x00', 0x8) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000680)={[], 0x0, 0x340}) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, './file1\x00'}, 0x6e) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 3114.556877][T21381] Bluetooth: hci1: Frame reassembly failed (-84) 12:56:52 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0}]) [ 3114.700784][ T3267] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 3114.810989][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3114.810996][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3114.811051][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3114.816798][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3116.011082][T19790] Bluetooth: hci0: command 0x1003 tx timeout [ 3116.018633][T21906] Bluetooth: hci0: sending frame failed (-49) [ 3116.331415][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3116.570990][T19790] Bluetooth: hci1: command 0x1003 tx timeout [ 3116.577158][T21906] Bluetooth: hci1: sending frame failed (-49) [ 3116.890990][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3116.890996][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3116.891076][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3116.896801][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3118.091019][T10778] Bluetooth: hci0: command 0x1001 tx timeout [ 3118.097175][T21906] Bluetooth: hci0: sending frame failed (-49) [ 3118.650994][T10778] Bluetooth: hci1: command 0x1001 tx timeout [ 3118.657165][T21906] Bluetooth: hci1: sending frame failed (-49) [ 3120.171045][T19790] Bluetooth: hci0: command 0x1009 tx timeout [ 3120.491690][ C1] net_ratelimit: 5 callbacks suppressed [ 3120.497382][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3120.730968][T19790] Bluetooth: hci1: command 0x1009 tx timeout [ 3121.051006][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3121.051066][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3121.056851][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3122.571140][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3123.131104][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3123.131145][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3123.138140][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3123.144555][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:57:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:57:01 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x6000000000000000}, 0x0) 12:57:01 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) 12:57:01 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x91ffffff, 0x0, @remote, 0x9}, 0x1c) 12:57:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x1fc000000, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000340)={'nat\x00', 0x0, 0x3, 0x5e, [], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=""/94}, &(0x7f0000000240)=0x78) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket$tipc(0x1e, 0x7, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000005c0)={0x0, @empty, @local}, &(0x7f0000000600)=0xc) connect$can_bcm(r3, &(0x7f0000000640)={0x1d, r4}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0x1000000000054}, 0x98) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$l2tp(r3, &(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @remote}, 0x1, 0x1, 0x2, 0x4}}, 0x2e) r6 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x101080) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000040)={"6ec30b56be6e1f904ef255b3d7fc080c478ed433dab27ae81201a4fa2f863e8c47b6a89e9d45fd35e221870357228f4cebbf2f7c64667faf2c3d74a7e352d4982632caca71b8638b049c71c6181d51c3ccfa7711df1f80c9a058713ac2bdf6a4609514b99cb47cd82fc508fc6a61c55410b3fcbbe57af6800cdcfda399e379623f74a804cbaacc0fbe1c51956c0f0aa5580c4e2a38c0abf95b25335fff095c8977b74e6dc4180c116e0ffba78b8857a1eb9ead3bc884226808046c7ea112d31dfdd9a9b8533c490e48566c66d168717346f13d3e3e57b9c6c460a6195065b38ca5775b2158d890c3c822d49bbba615a006f1488f6a0d19830087a755352365403eb68ebb765d1759152e9d836a7597752a09a2868b13c10fb4a612c54b63eb0d18133b6f4699c9008eb0db057f0391699f55ceeb857d7a926d8fa8cf07e3d086be9345f29efcf1223216a7016e5f195e7e7cce73a2493a6fd1d8a3a4f6e6d21f7ddc12859c3271e453dd0976c799b61236c915a002013ad4decade60c4f61a5ec50b5e23033216ebb8eee8fe86944c16a7fab2b637c19a2a8905de5073af323c29000b7672ba78b77e2be2c911a36d590fc3f10128fd22fbc19d99fc66f6150e0c54ff3d4bae40210a417b4b660792a75158871a86c5bca93981022f6353c6d2b595ca5436455849e3c4a4f3399b9654ac0bf0dece1ac716adce18ab546372d8eb303b74888972e24ee669ad0bca04396e672ad4dfdcef537e591c6d07a465f96753cff7f3c3a6efbc066d2569f08c2cd93638e7d99fdde77800c79fc9441b4bcdee6c846a474cfdb88f0663130d0e8599c95f16b13d81882ff528cd68b7c6872289d28ce2c1da8862278c7aa1fef31aad5110ec38161a83e5f8d839fd0626fdc9de68b2e5ff361df666ce36825342061ef487c38a83e243292d96cc505a2c724872c5246e9a4d9fc6facbf76ec573ff36a011ea96f2841910f066a5860748cdee247d8db5a5d551c0ca9a035e2c4a26c20910e5b7422f4cfd08e5152fdf69d21cf95d52c553d57bc68a166e3f6df81fdf04bf0315e13fb46e1723a3fd96250e0bfa79b4f6db2b3525a875a333ac045e76996b03f8aaf17ae7bb650bbfdee70213171f7e1028eb38aaebc0edd67817abeaa4910e4fac8a6a506220be8b1c7d31a3345791bf6a63a60a4d9b8345dfe5223c167dd79184ca4c8460e43b87794d4c3b2884d574c89796b6cd789342ff2df091c5105e9fa4d08e2f74ecd7de8d0c0b2de9c156860117a834c1fe573d8f70c55397caee306092a4ad9f36d51a53d9019a64e625c07ba5155ad02f042c6ab9aaef17e5676da8091e78699fc1de41e5f0db4826ae1d08d7d8f71a672e3e3d1a7e9704c47f8ff079b41c9f2a5efa798a1031212c1317ce2de83be6066baa7bf511ccceaf9414607e5e80a5db8a1e72aa22"}) fsync(r5) syz_open_dev$usbmon(&(0x7f0000000580)='/dev/usbmon#\x00', 0x2046, 0x0) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r7, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xef}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2404c801) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, r8, 0x0) 12:57:01 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x0}]) [ 3124.185293][T16957] Bluetooth: hci0: Frame reassembly failed (-84) [ 3124.651058][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:57:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:57:02 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0xffffff7f00000000}, 0x0) 12:57:02 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x900, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000040)={@rand_addr, @multicast2, @remote}, &(0x7f0000000080)=0xc) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000100)="dae5c3ad46dc23d661fc4d29389f0001f08044916f60ff66147973965a07bda4fc749f1530bdb4fa9c329ff112c426ec6c496918cbda0bd38d14c86094fa900de6094a1cd044d1aedad934183e6b6ad3cd11da1babfdaf517183a94b07331ed41c76c039b63ef09189d500321928aee7d33e84337a79beb4e0d9f11ba19a773cd9746b0cb61c4e53a5be05f29795c1ff633144d78b47168882") r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x311, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x40) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xa020080}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0xb20, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20040010) fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) r4 = getpgrp(r3) fcntl$setflags(r0, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000480)={0x80, {{0x2, 0x4e21, @rand_addr=0x5}}}, 0x88) semget$private(0x0, 0x3, 0x1) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000540)=""/250) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000680)={{0x4, 0x3, 0x7, 0xff, 'syz1\x00', 0x6}, 0x6, 0x400, 0x3f, r3, 0x4, 0x1ff, 'syz0\x00', &(0x7f0000000640)=['NET_DM\x00', '\x00', 'cpuset\x00', '*\x00'], 0x11, [], [0x1, 0x8, 0x8000, 0x5211]}) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000007c0)="3a9270c47963c606488520af7d28ea01c615514a6909be3f9b23e80764e5dd625887525cdfdd20108117357547bcf301e51e31bb70f32f7f8b1ccc087cc9f1d0a476bc0da7bda8fa1f02394e83d9636096631f6478ec2aa98838a5d31c1d5a73fc2e63334339eae190a0df9391639ef8f06339d48cd82ee3df83fbca66a624a9389ca7004653b4cb13c2d365cf734edc0c645b75a4273cf2d7ccce607499d796c33f693f2bfa9704e4c21012aacf3841e5b24f8eddb4194f7ba4efbcd91a") write$P9_RCREATE(r0, &(0x7f0000000880)={0x18, 0x73, 0x1, {{0x20, 0x3, 0x3}, 0x3f}}, 0x18) lgetxattr(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)=@known='trusted.overlay.upper\x00', &(0x7f0000000940)=""/214, 0xd6) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000a40)={0x0, 0xdad4, 0x1a4, 0x80000001, 0x9, 0x5}, &(0x7f0000000a80)=0x14) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000ac0)={r5, 0x7ff}, 0x8) ptrace$cont(0x9, r4, 0x6, 0x8001) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x40010, r0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r2, 0x200, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x7, 0x5a, @l2={'ib', 0x3a, 'dummy0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000c00)={0x9, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000c40)={0x2, r6, 0x10000, 0x1800}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/fuse\x00', 0x2, 0x0) ptrace$setopts(0x4206, r4, 0x200, 0x1) pipe(&(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(&(0x7f0000003480)='./file0\x00', &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000003540)=[0x0, 0x0, 0x0, 0xee01, 0xffffffffffffffff, 0xee01]) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003580)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000003680)=0xe8) r13 = getegid() ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f00000036c0)=0x0) stat(&(0x7f0000003700)='./file0\x00', &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000037c0)='./file0\x00', &(0x7f0000003800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r9, &(0x7f0000003980)={&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000000d80)="ec6bbfd3090f11fe9e97425a52a6edc6078d3dd07494073982458708ab6df5c228609e2c8ecbc7580c973865db662bea013c2be3ad961e5ed7ea50c2f4464c4fec7652ddf055", 0x46}, {&(0x7f0000000e00)="f61adcb2e276f0293afe13ec6c81fba4b8b7f0b5c02134187369c6b5c430abef621acdcec465b95fa897d634ddf87b0a485789c3e8c67ce2aebbb9fa72643c0541862b9b7c426ecc06b1afe0bddd1cb89d021761fcd7612068debc720811681c95bf95dabd73732ca1a2754ec9a27a642fcb17a7009930e46ae95522bccb2c16b610f76e9d57eb95935b6e684506f05b3f8882c80255e89b820f4a", 0x9b}, {&(0x7f0000000ec0)="8a199bb1586d9f9a396b17dabfc8aff0cfb5c6a8097b96292b37e463b80159bcc54f6246248da8687c1c8f9fdfe8457703cd83b1f2f46370c12d899330afd3bee9245f2f9cd8ee6e2fad6ff665061518c3bfc9f67cbc7aefe37d9850dfc3c9d559c11c64acc1a313b76b2401afddfa01f3c6f6ae32cf86d309f2379ebbddf916d00472e1230fbde6c297b3917014aa0ac29bcf1cd17b90dba01d2e04e28b89f6a330a95597712df7da76384cb435afed4ad6cabff35bd0b37a86c0c262c0e73115478c85b9bccb237b2670619645604f7862e82a3576b9babb", 0xd9}, {&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000001fc0)="add578957c086bd79c5d425bb7b7303bcb6dc0f04877a5dedac2c274f2592dc09b7124661b50a5d7ca1cce7a821d6144b1c14133e10da029e7a55a9a62336b80ce72e98a87ed7204a788b4c085e2197629ae309d2c1c080eb162c468da92afd11eacbe4523fd08c1dd7b979debc14b6d6b21b2b6e7e7eb0b7d4711e743c062aedbdc20071223a645c411eeef119781a4dc04911d29b00189f9a4779060a2e867c3565298845624d8fa26f4e888546b7cad53bd1b1422063e3a71608ee4196e613a0e00f00982f841a96c940cf6568ebc5ddd955d09e00816735b5d", 0xdb}, {&(0x7f00000020c0)="f6bd1c8499581ed978", 0x9}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000003100)="6ee7a96c3901eccf7e09deb50b4c3a232cac08d7bfa713a99f5cc48e7b5aa74c76f7603f068805db37c370f57ed8e781bffb8725932417778577dab9f56427f7d6473e778d0ccc07c228ba6270e09f138ef077e11d013e8b6566b78f33d4c13a53e3dd108d41088b784c3296523fc56630b38b97bb31b78d12fef3a7d6f9133f39035a748773da6989b2fe65be58d4c5971a90313b1af8", 0x97}, {&(0x7f00000031c0)="2c5d8f029de79235515510afcd969fd2f3277c650bf8e6d2f86dad1ed1ecc58e65f16aecba588263b4e8837947732b49261377295c91733e92236bc0d211718cf3db09d028debb24cea107453bc496f2292e7a66f792863acad42549baf49e1a9c049a8011dce2cfebaf2674eb0615113245d91aae6e7d2bf841886fa69784ca7669f225517635e381f1d5fa6315a3db3c6994c4ee29d22931d92f0466f613210c2a205effdf5491a6ad57a28d623aef364e44d811829525d6522e2e92948ccba562b8dd88dd050e", 0xc8}, {&(0x7f00000032c0)="d88827611cd120df6b2969c421ab84b665c1ea399b1984645850a2c4783f1ab58e3dd3155911ba0dc3d2e473d501f0e8568dddcd21e78e427e2351fcca433fa46c21b5603297d8a91fda3895d8bbb059b790620c2ddf53629642c4108eb6508268dadbaa9280e1c91ece972f9a8ec4f3f36b37bb7a87330875a8760225a68fa4b69707a7f4d8687341a72bafcd47f65dc554f9e5403365348dfc5243cbcfbd477c66b91584154260bc0dc116b2880b74e5406394f3c271cd91cc433be7e53750f35d1e461f537081252eb8a3d50cfa7cea987788d83621d92b92", 0xda}], 0xa, &(0x7f0000003880)=[@rights={{0x1c, 0x1, 0x1, [r9, r8, r0]}}, @rights={{0x18, 0x1, 0x1, [r9, r9]}}, @cred={{0x1c, 0x1, 0x2, {r3, r10, r11}}}, @rights={{0x24, 0x1, 0x1, [r7, r0, r0, r9, r9]}}, @cred={{0x1c, 0x1, 0x2, {r3, r12, r13}}}, @rights={{0x34, 0x1, 0x1, [r7, r7, r9, r0, r7, r9, r7, r8, r0]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}], 0xf8, 0x10}, 0x10) 12:57:02 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x11, 0x0, 0xffffffffffffffff, 0x0}]) 12:57:02 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x2}, 0x0) 12:57:02 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x300, 0x0, 0xffffffffffffffff, 0x0}]) [ 3126.251044][T10778] Bluetooth: hci0: command 0x1003 tx timeout [ 3126.259386][T21906] Bluetooth: hci0: sending frame failed (-49) [ 3126.731090][ C1] net_ratelimit: 4 callbacks suppressed [ 3126.731099][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3126.811002][ T7114] Bluetooth: hci1: command 0x1003 tx timeout [ 3126.817824][T21906] Bluetooth: hci1: sending frame failed (-49) [ 3127.291086][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3127.298299][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3127.301099][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3127.311124][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3128.331087][T10778] Bluetooth: hci0: command 0x1001 tx timeout [ 3128.337415][T21906] Bluetooth: hci0: sending frame failed (-49) [ 3128.811067][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3128.891037][T10778] Bluetooth: hci1: command 0x1001 tx timeout [ 3128.897268][T21906] Bluetooth: hci1: sending frame failed (-49) [ 3129.371021][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3129.371084][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3129.376871][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3130.411046][ T7114] Bluetooth: hci0: command 0x1009 tx timeout [ 3130.891119][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3130.970996][ T7114] Bluetooth: hci1: command 0x1009 tx timeout [ 3132.971011][ C1] net_ratelimit: 4 callbacks suppressed [ 3132.977025][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3133.531021][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3133.531077][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3133.537342][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:57:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:57:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="290000002000190000003fffffffda060200000000e80001060000040d000300ea1100000005000400", 0x29}], 0x1) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x800) write$P9_RAUTH(r1, &(0x7f0000000080)={0x14, 0x67, 0x1, {0x8, 0x3, 0x2}}, 0x14) 12:57:11 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x3}, 0x0) 12:57:11 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xe02e0000, 0x0, @remote, 0x9}, 0x1c) 12:57:11 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x500, 0x0, 0xffffffffffffffff, 0x0}]) 12:57:12 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x700, 0x0, 0xffffffffffffffff, 0x0}]) [ 3134.428749][T21381] Bluetooth: hci0: Frame reassembly failed (-84) [ 3134.447969][T21381] Bluetooth: hci0: Frame reassembly failed (-84) 12:57:12 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) 12:57:12 executing program 3: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) 12:57:12 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0xf00, 0x0, 0xffffffffffffffff, 0x0}]) 12:57:12 executing program 5 (fault-call:2 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 3135.051043][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3135.087959][ T4500] FAULT_INJECTION: forcing a failure. [ 3135.087959][ T4500] name failslab, interval 1, probability 0, space 0, times 0 [ 3135.105120][ T4500] CPU: 1 PID: 4500 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3135.113131][ T4500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3135.123331][ T4500] Call Trace: [ 3135.126629][ T4500] dump_stack+0x172/0x1f0 [ 3135.130961][ T4500] should_fail.cold+0xa/0x15 [ 3135.135568][ T4500] ? fault_create_debugfs_attr+0x180/0x180 [ 3135.141370][ T4500] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3135.147626][ T4500] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3135.153863][ T4500] ? debug_smp_processor_id+0x3c/0x214 [ 3135.159328][ T4500] ? ___might_sleep+0x163/0x280 [ 3135.164201][ T4500] __should_failslab+0x121/0x190 [ 3135.169171][ T4500] should_failslab+0x9/0x14 [ 3135.173706][ T4500] __kmalloc+0x2e0/0x770 [ 3135.178174][ T4500] ? mark_held_locks+0xf0/0xf0 [ 3135.183139][ T4500] ? _parse_integer+0x190/0x190 [ 3135.188271][ T4500] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 3135.194612][ T4500] tomoyo_realpath_from_path+0xcd/0x7b0 [ 3135.201070][ T4500] ? tomoyo_path_number_perm+0x193/0x520 [ 3135.207239][ T4500] tomoyo_path_number_perm+0x1dd/0x520 [ 3135.213140][ T4500] ? tomoyo_path_number_perm+0x193/0x520 [ 3135.218790][ T4500] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3135.225332][ T4500] ? perf_trace_lock_acquire+0xf5/0x530 [ 3135.231120][ T4500] ? __kasan_check_read+0x11/0x20 [ 3135.236174][ T4500] ? __fget+0x384/0x560 [ 3135.240342][ T4500] ? ksys_dup3+0x3e0/0x3e0 [ 3135.240360][ T4500] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 12:57:12 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xe8030000, 0x0, @remote, 0x9}, 0x1c) [ 3135.240383][ T4500] ? fput_many+0x12c/0x1a0 [ 3135.251928][ T4500] tomoyo_file_ioctl+0x23/0x30 [ 3135.251948][ T4500] security_file_ioctl+0x77/0xc0 [ 3135.251966][ T4500] ksys_ioctl+0x57/0xd0 [ 3135.251990][ T4500] __x64_sys_ioctl+0x73/0xb0 [ 3135.274992][ T4500] do_syscall_64+0xfd/0x6a0 [ 3135.279518][ T4500] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3135.285423][ T4500] RIP: 0033:0x459829 [ 3135.289342][ T4500] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3135.308968][ T4500] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3135.317477][ T4500] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3135.325801][ T4500] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3135.334047][ T4500] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3135.342096][ T4500] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 12:57:12 executing program 3: openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x800, 0x101000) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x1, 0x700f}) r1 = socket$inet(0xa, 0x801, 0x84) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80010, r0, 0x180000000) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0xb05}, {0xa, 0x4e21, 0x100000000000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}, 0x8, [0x4, 0x800, 0x8cf9, 0xdea, 0x0, 0x1f, 0x1553, 0x3]}, 0x5c) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, 0x0, 0x0) [ 3135.350066][ T4500] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3135.385997][ T4500] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3135.428218][T16957] Bluetooth: hci1: Frame reassembly failed (-84) [ 3135.611023][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3135.611052][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3135.617390][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3135.623166][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3136.491087][T10778] Bluetooth: hci0: command 0x1003 tx timeout [ 3136.497216][T21906] Bluetooth: hci0: sending frame failed (-49) [ 3137.131722][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3137.451012][T10778] Bluetooth: hci1: command 0x1003 tx timeout [ 3137.457171][T21906] Bluetooth: hci1: sending frame failed (-49) [ 3138.570965][T10778] Bluetooth: hci0: command 0x1001 tx timeout [ 3138.577122][T21906] Bluetooth: hci0: sending frame failed (-49) [ 3139.211021][ C1] net_ratelimit: 3 callbacks suppressed [ 3139.211027][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3139.530966][T19790] Bluetooth: hci1: command 0x1001 tx timeout [ 3139.537111][T21906] Bluetooth: hci1: sending frame failed (-49) [ 3139.771000][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3139.771024][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3139.776855][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3139.782575][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3140.651010][T19790] Bluetooth: hci0: command 0x1009 tx timeout [ 3141.291033][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3141.611008][T10778] Bluetooth: hci1: command 0x1009 tx timeout [ 3141.851011][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3141.851074][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3141.856875][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3141.862582][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:57:22 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x1100, 0x0, 0xffffffffffffffff, 0x0}]) 12:57:22 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x7}, 0x0) 12:57:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x48, &(0x7f0000000000), 0x4) socketpair(0x1a, 0x3, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$inet6(r1, &(0x7f0000000080)=""/4096, 0x1000, 0x12062, 0x0, 0x0) 12:57:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:57:22 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xf4010000, 0x0, @remote, 0x9}, 0x1c) 12:57:22 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x3f00, 0x0, 0xffffffffffffffff, 0x0}]) 12:57:22 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x9}, 0x0) 12:57:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x1, 0x8, 0x319}, 0x14}}, 0x0) [ 3144.661972][T12596] Bluetooth: hci0: Frame reassembly failed (-84) 12:57:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x02\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 3145.451040][ C1] net_ratelimit: 5 callbacks suppressed [ 3145.451048][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:57:23 executing program 5 (fault-call:2 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:57:23 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0xa}, 0x0) 12:57:23 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x4000, 0x0, 0xffffffffffffffff, 0x0}]) 12:57:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x8000000000009371, &(0x7f0000000100)="010000000000000018") 12:57:23 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xf5ffffff, 0x0, @remote, 0x9}, 0x1c) [ 3145.933351][ T5466] FAULT_INJECTION: forcing a failure. [ 3145.933351][ T5466] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3145.946702][ T5466] CPU: 1 PID: 5466 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3145.954690][ T5466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3145.964760][ T5466] Call Trace: [ 3145.968078][ T5466] dump_stack+0x172/0x1f0 [ 3145.972433][ T5466] should_fail.cold+0xa/0x15 [ 3145.977051][ T5466] ? fault_create_debugfs_attr+0x180/0x180 [ 3145.982877][ T5466] ? lock_downgrade+0x920/0x920 [ 3145.987747][ T5466] should_fail_alloc_page+0x50/0x60 [ 3145.993389][ T5466] __alloc_pages_nodemask+0x1a1/0x8f0 [ 3145.993406][ T5466] ? __alloc_pages_slowpath+0x2520/0x2520 [ 3145.993420][ T5466] ? kernel_text_address+0x73/0xf0 [ 3145.993449][ T5466] ? debug_smp_processor_id+0x3c/0x214 [ 3145.993468][ T5466] ? fault_create_debugfs_attr+0x180/0x180 [ 3145.993492][ T5466] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3146.004575][ T5466] cache_grow_begin+0x90/0xd20 [ 3146.004593][ T5466] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 3146.004609][ T5466] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3146.004624][ T5466] __kmalloc+0x6b2/0x770 [ 3146.004639][ T5466] ? mark_held_locks+0xf0/0xf0 [ 3146.004653][ T5466] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 3146.004668][ T5466] tomoyo_realpath_from_path+0xcd/0x7b0 [ 3146.004688][ T5466] ? tomoyo_path_number_perm+0x193/0x520 [ 3146.004709][ T5466] tomoyo_path_number_perm+0x1dd/0x520 [ 3146.010998][ C0] protocol 88fb is buggy, dev hsr_slave_0 12:57:23 executing program 3: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1c8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f00000002c0)={0x800, 0x0, 0x0, 0xffffffffffffebe3, 0x8, 0xe3c4, 0x0, 0x8, 0x0, 0x0, 0x901, 0x0, 0x0, 0x74b, 0x0, 0x0, 0x0, 0x2}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0xe000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) [ 3146.015773][ T5466] ? tomoyo_path_number_perm+0x193/0x520 [ 3146.015793][ T5466] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3146.015810][ T5466] ? perf_trace_lock_acquire+0xf5/0x530 [ 3146.015831][ T5466] ? __kasan_check_read+0x11/0x20 [ 3146.021741][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3146.027898][ T5466] ? __fget+0x384/0x560 [ 3146.115177][ T5466] ? ksys_dup3+0x3e0/0x3e0 [ 3146.119590][ T5466] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3146.125843][ T5466] ? fput_many+0x12c/0x1a0 [ 3146.130275][ T5466] tomoyo_file_ioctl+0x23/0x30 [ 3146.135055][ T5466] security_file_ioctl+0x77/0xc0 [ 3146.141503][ T5466] ksys_ioctl+0x57/0xd0 [ 3146.145775][ T5466] __x64_sys_ioctl+0x73/0xb0 [ 3146.150384][ T5466] do_syscall_64+0xfd/0x6a0 [ 3146.155188][ T5466] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3146.161102][ T5466] RIP: 0033:0x459829 [ 3146.165541][ T5466] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3146.185589][ T5466] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3146.194017][ T5466] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3146.202023][ T5466] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3146.202031][ T5466] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3146.202039][ T5466] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3146.202047][ T5466] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3146.202319][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3146.218269][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3146.257421][T16957] Bluetooth: hci1: Frame reassembly failed (-84) [ 3146.730988][T19790] Bluetooth: hci0: command 0x1003 tx timeout [ 3146.737213][T21906] Bluetooth: hci0: sending frame failed (-49) [ 3147.531000][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3148.101073][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3148.106950][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3148.251013][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3148.256947][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3148.340972][T19790] Bluetooth: hci1: command 0x1003 tx timeout [ 3148.347757][T21906] Bluetooth: hci1: sending frame failed (-49) [ 3148.810991][T19790] Bluetooth: hci0: command 0x1001 tx timeout [ 3148.817395][T21906] Bluetooth: hci0: sending frame failed (-49) [ 3150.411094][T19790] Bluetooth: hci1: command 0x1001 tx timeout [ 3150.417451][T21906] Bluetooth: hci1: sending frame failed (-49) [ 3150.891075][T10778] Bluetooth: hci0: command 0x1009 tx timeout [ 3151.691010][ C1] net_ratelimit: 5 callbacks suppressed [ 3151.696888][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3152.251040][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3152.256974][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3152.410979][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3152.416782][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3152.491016][T10778] Bluetooth: hci1: command 0x1009 tx timeout [ 3153.771018][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3154.331002][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3154.336870][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3154.490988][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3154.496829][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:57:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:57:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x100) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f0000000600)) close(0xffffffffffffffff) r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x803, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) socket$inet6(0xa, 0x800000003, 0x5) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000000)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x400000, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) sendto(r1, &(0x7f0000000000)="120000001200e7361c86d2000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) fcntl$getown(0xffffffffffffffff, 0x9) dup3(r2, 0xffffffffffffffff, 0x80000) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x20, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0xc4}, {&(0x7f0000000140)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 12:57:32 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0xe}, 0x0) 12:57:32 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x1000000, 0x0, 0xffffffffffffffff, 0x0}]) 12:57:32 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfc000000, 0x0, @remote, 0x9}, 0x1c) [ 3154.883471][T16957] Bluetooth: hci0: Frame reassembly failed (-84) 12:57:32 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x10}, 0x0) 12:57:34 executing program 5 (fault-call:2 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:57:34 executing program 3: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x68180, 0x1c8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r1, 0x541f, &(0x7f00000002c0)={0x800, 0x0, 0x0, 0xffffffffffffebe3, 0x8, 0xe3c4, 0x0, 0x8, 0x0, 0x0, 0x901, 0x0, 0x0, 0x74b, 0x0, 0x0, 0x39f, 0x2}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x0, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x88070, 0x0, 0x99, 0x3, 0x20, 0x0, 0x0, 0x1, 0x3, 0x8, 0x0, 0x0, 0xffffffff, 0x630, 0x40, 0x7, 0x0, 0x4, 0x8, 0x1, 0x7, 0x81, 0x2, 0x100000001, 0xfff, 0x0, 0x1000, 0x7fffffff, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x2}, 0x0, 0x2, 0x6, 0x6, 0x7ec, 0x6, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x2) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) 12:57:34 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x2000000, 0x0, 0xffffffffffffffff, 0x0}]) 12:57:34 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x11}, 0x0) 12:57:34 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfe800000, 0x0, @remote, 0x9}, 0x1c) 12:57:34 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x16, 0x3, &(0x7f000045c000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x4c}}, &(0x7f0000281ffc)='G\xffL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xffffffff00000000, 0xe, 0x0, &(0x7f00000000c0)="c10e85f98ad0e679055e19f25b0d", 0x0}, 0x28) [ 3156.835918][ T6349] FAULT_INJECTION: forcing a failure. [ 3156.835918][ T6349] name failslab, interval 1, probability 0, space 0, times 0 [ 3156.871161][ T6349] CPU: 1 PID: 6349 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3156.879270][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3156.889349][ T6349] Call Trace: [ 3156.892684][ T6349] dump_stack+0x172/0x1f0 [ 3156.897038][ T6349] should_fail.cold+0xa/0x15 [ 3156.901645][ T6349] ? fault_create_debugfs_attr+0x180/0x180 [ 3156.907469][ T6349] ? ___might_sleep+0x163/0x280 [ 3156.912448][ T6349] __should_failslab+0x121/0x190 [ 3156.917401][ T6349] should_failslab+0x9/0x14 [ 3156.921921][ T6349] __kmalloc+0x2e0/0x770 [ 3156.926206][ T6349] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3156.932556][ T6349] ? d_absolute_path+0x11b/0x170 [ 3156.937592][ T6349] ? __d_path+0x140/0x140 [ 3156.941949][ T6349] ? tomoyo_encode2.part.0+0xf5/0x400 [ 3156.947364][ T6349] tomoyo_encode2.part.0+0xf5/0x400 [ 3156.957009][ T6349] tomoyo_encode+0x2b/0x50 [ 3156.961452][ T6349] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 3156.967925][ T6349] tomoyo_path_number_perm+0x1dd/0x520 [ 3156.977391][ T6349] ? tomoyo_path_number_perm+0x193/0x520 [ 3156.983106][ T6349] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3156.988904][ T6349] ? perf_trace_lock_acquire+0xf5/0x530 [ 3156.994657][ T6349] ? __kasan_check_read+0x11/0x20 [ 3156.999696][ T6349] ? __fget+0x384/0x560 [ 3157.003890][ T6349] ? ksys_dup3+0x3e0/0x3e0 [ 3157.008305][ T6349] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3157.014533][ T6349] ? fput_many+0x12c/0x1a0 [ 3157.018943][ T6349] tomoyo_file_ioctl+0x23/0x30 [ 3157.023701][ T6349] security_file_ioctl+0x77/0xc0 [ 3157.028629][ T6349] ksys_ioctl+0x57/0xd0 [ 3157.032772][ T6349] __x64_sys_ioctl+0x73/0xb0 [ 3157.037351][ T6349] do_syscall_64+0xfd/0x6a0 [ 3157.041843][ T6349] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3157.047810][ T6349] RIP: 0033:0x459829 [ 3157.051694][ T6349] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3157.071637][ T6349] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3157.080085][ T6349] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3157.088184][ T6349] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3157.096340][ T6349] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3157.104438][ T6349] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3157.112877][ T6349] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3157.123261][ T6349] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3157.138944][ T7114] Bluetooth: hci0: command 0x1003 tx timeout [ 3157.156380][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 3157.931044][ C1] net_ratelimit: 5 callbacks suppressed [ 3157.931053][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3158.490993][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3158.496836][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3158.650979][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3158.656781][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3159.210995][ T7114] Bluetooth: hci1: command 0x1003 tx timeout [ 3159.211003][T10778] Bluetooth: hci0: command 0x1001 tx timeout [ 3159.221208][T21906] Bluetooth: hci0: sending frame failed (-49) [ 3159.229234][T21906] Bluetooth: hci1: sending frame failed (-49) [ 3160.011039][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3160.571044][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3160.580507][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3160.731004][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3160.736849][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3161.290997][T10778] Bluetooth: hci1: command 0x1001 tx timeout [ 3161.297333][T10778] Bluetooth: hci0: command 0x1009 tx timeout [ 3161.297442][ T6694] Bluetooth: hci1: sending frame failed (-49) [ 3163.371057][ T7114] Bluetooth: hci1: command 0x1009 tx timeout [ 3164.171051][ C1] net_ratelimit: 5 callbacks suppressed [ 3164.176825][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3164.731205][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3164.737503][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3164.890996][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3164.896800][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:57:42 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x28}, 0x0) 12:57:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:57:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x1, @multicast1}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) 12:57:42 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfec00000, 0x0, @remote, 0x9}, 0x1c) 12:57:42 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0xffffffffffffffff, 0x0}]) 12:57:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3e) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xa7}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 3166.251002][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3166.811004][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3166.816877][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3166.970989][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3166.976987][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3167.141017][T10778] Bluetooth: hci0: command 0x1003 tx timeout [ 3167.147818][ T6694] Bluetooth: hci0: sending frame failed (-49) 12:57:45 executing program 5 (fault-call:2 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:57:45 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x4000000, 0x0, 0xffffffffffffffff, 0x0}]) 12:57:45 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x60}, 0x0) 12:57:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x10) sendmsg$unix(r0, &(0x7f0000000900)={&(0x7f0000000180)=@abs, 0x6e, 0x0}, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@v1={0x2, "437c40b540"}, 0x6, 0x3) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000), 0x4) 12:57:45 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xff000000, 0x0, @remote, 0x9}, 0x1c) [ 3167.696607][ T7041] FAULT_INJECTION: forcing a failure. [ 3167.696607][ T7041] name failslab, interval 1, probability 0, space 0, times 0 [ 3167.723098][ T7041] CPU: 1 PID: 7041 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3167.731257][ T7041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3167.743807][ T7041] Call Trace: [ 3167.747396][ T7041] dump_stack+0x172/0x1f0 [ 3167.751885][ T7041] should_fail.cold+0xa/0x15 [ 3167.756559][ T7041] ? fault_create_debugfs_attr+0x180/0x180 [ 3167.762972][ T7041] ? page_to_nid.part.0+0x20/0x20 [ 3167.768107][ T7041] ? ___might_sleep+0x163/0x280 [ 3167.772959][ T7041] __should_failslab+0x121/0x190 [ 3167.778127][ T7041] should_failslab+0x9/0x14 [ 3167.782651][ T7041] kmem_cache_alloc_trace+0x2d3/0x790 [ 3167.788368][ T7041] ? rwlock_bug.part.0+0x90/0x90 [ 3167.793345][ T7041] ? ___might_sleep+0x163/0x280 [ 3167.798267][ T7041] hci_alloc_dev+0x43/0x1d80 [ 3167.803021][ T7041] hci_uart_tty_ioctl+0x306/0xc00 [ 3167.808148][ T7041] tty_ioctl+0xaf9/0x14f0 [ 3167.813134][ T7041] ? hci_uart_init_work+0x180/0x180 [ 3167.818655][ T7041] ? do_tty_hangup+0x30/0x30 [ 3167.823515][ T7041] ? tomoyo_path_number_perm+0x459/0x520 [ 3167.829159][ T7041] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3167.835412][ T7041] ? tomoyo_path_number_perm+0x263/0x520 [ 3167.841056][ T7041] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3167.847089][ T7041] ? __kasan_check_read+0x11/0x20 [ 3167.852227][ T7041] ? do_tty_hangup+0x30/0x30 [ 3167.856817][ T7041] do_vfs_ioctl+0xdb6/0x13e0 [ 3167.861404][ T7041] ? ioctl_preallocate+0x210/0x210 [ 3167.866652][ T7041] ? __fget+0x384/0x560 [ 3167.870914][ T7041] ? ksys_dup3+0x3e0/0x3e0 [ 3167.875321][ T7041] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3167.881545][ T7041] ? fput_many+0x12c/0x1a0 [ 3167.886038][ T7041] ? tomoyo_file_ioctl+0x23/0x30 [ 3167.891054][ T7041] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3167.897285][ T7041] ? security_file_ioctl+0x8d/0xc0 [ 3167.902392][ T7041] ksys_ioctl+0xab/0xd0 [ 3167.906559][ T7041] __x64_sys_ioctl+0x73/0xb0 [ 3167.911161][ T7041] do_syscall_64+0xfd/0x6a0 [ 3167.915702][ T7041] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3167.921600][ T7041] RIP: 0033:0x459829 [ 3167.925500][ T7041] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:57:45 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() msgctl$IPC_SET(0x0, 0x1, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xc}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:57:45 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x300}, 0x0) [ 3167.945629][ T7041] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3167.954035][ T7041] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3167.954044][ T7041] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3167.954053][ T7041] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3167.954061][ T7041] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3167.954078][ T7041] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3168.023595][ T7041] Bluetooth: Can't allocate HCI device [ 3169.210972][T10778] Bluetooth: hci0: command 0x1001 tx timeout [ 3169.217193][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 3170.411047][ C1] net_ratelimit: 5 callbacks suppressed [ 3170.416654][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3170.971000][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3170.976815][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3171.131070][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3171.136876][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3171.290960][T19790] Bluetooth: hci0: command 0x1009 tx timeout [ 3172.491039][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3173.051038][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3173.056854][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3173.211006][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3173.216808][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:57:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:57:52 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000500)=""/224, 0x200005e0) 12:57:52 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x5000000, 0x0, 0xffffffffffffffff, 0x0}]) 12:57:52 executing program 5 (fault-call:2 fault-nth:4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:57:52 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x700}, 0x0) 12:57:52 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xff0f0000, 0x0, @remote, 0x9}, 0x1c) [ 3175.354146][ T7543] FAULT_INJECTION: forcing a failure. [ 3175.354146][ T7543] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3175.367425][ T7543] CPU: 1 PID: 7543 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3175.375530][ T7543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3175.385596][ T7543] Call Trace: [ 3175.388920][ T7543] dump_stack+0x172/0x1f0 [ 3175.393278][ T7543] should_fail.cold+0xa/0x15 [ 3175.397887][ T7543] ? fault_create_debugfs_attr+0x180/0x180 12:57:53 executing program 3: io_setup(0x7fff, &(0x7f0000000080)=0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40, 0x0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9, r1, &(0x7f00000001c0)="736631fb66a3de523f3ca7e4ddbef242807d32974d0ff5daa4cfb1f81e371cfc054ece38c9c75c5ce6dccfc6797aeceb8331b8bb0a094cddf5f98115eb0c80c72336b4da7d0eff36887e6ed84de27bc367483e1b26a0b138f1756da027ddce74944c3088c1e9f6feef005242a61d52d1836be1e0e490f312acc4329d8bc6009cf0957e83b8453554b69d3e03eb683a2abbe1f2564b092c54637eeef7c8278f738be8f10cfa53eef4f10f1faf1355dc973c5f830d7a9153473d7bfc2b103499966e4555a56256347ae0f44d10904b1cd8793ec844422f7a0d44c7b2fbe7557e9f92", 0xe1, 0x6, 0x0, 0x0, r2}, &(0x7f0000000140)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000180)='\x00'/11, 0xb) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0xcf) recvmmsg(r4, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}], 0x1}}], 0x1, 0x0, 0x0) [ 3175.403712][ T7543] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3175.409975][ T7543] should_fail_alloc_page+0x50/0x60 [ 3175.415214][ T7543] __alloc_pages_nodemask+0x1a1/0x8f0 [ 3175.420774][ T7543] ? __alloc_pages_slowpath+0x2520/0x2520 [ 3175.426793][ T7543] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 3175.432529][ T7543] ? __kasan_check_read+0x11/0x20 [ 3175.437580][ T7543] ? fault_create_debugfs_attr+0x180/0x180 [ 3175.443486][ T7543] cache_grow_begin+0x90/0xd20 [ 3175.448264][ T7543] ? hci_alloc_dev+0x43/0x1d80 12:57:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) [ 3175.453043][ T7543] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3175.459297][ T7543] kmem_cache_alloc_trace+0x6b3/0x790 [ 3175.464681][ T7543] ? rwlock_bug.part.0+0x90/0x90 [ 3175.469744][ T7543] hci_alloc_dev+0x43/0x1d80 [ 3175.474353][ T7543] hci_uart_tty_ioctl+0x306/0xc00 [ 3175.479400][ T7543] tty_ioctl+0xaf9/0x14f0 [ 3175.483749][ T7543] ? hci_uart_init_work+0x180/0x180 [ 3175.489429][ T7543] ? do_tty_hangup+0x30/0x30 [ 3175.494029][ T7543] ? tomoyo_path_number_perm+0x459/0x520 [ 3175.499944][ T7543] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3175.506400][ T7543] ? tomoyo_path_number_perm+0x263/0x520 [ 3175.512477][ T7543] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3175.512501][ T7543] ? __kasan_check_read+0x11/0x20 [ 3175.512522][ T7543] ? do_tty_hangup+0x30/0x30 [ 3175.512539][ T7543] do_vfs_ioctl+0xdb6/0x13e0 [ 3175.512562][ T7543] ? ioctl_preallocate+0x210/0x210 [ 3175.527960][ T7543] ? __fget+0x384/0x560 [ 3175.527979][ T7543] ? ksys_dup3+0x3e0/0x3e0 [ 3175.527998][ T7543] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3175.528021][ T7543] ? fput_many+0x12c/0x1a0 [ 3175.557187][ T7543] ? tomoyo_file_ioctl+0x23/0x30 [ 3175.562231][ T7543] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3175.568621][ T7543] ? security_file_ioctl+0x8d/0xc0 [ 3175.573731][ T7543] ksys_ioctl+0xab/0xd0 [ 3175.577885][ T7543] __x64_sys_ioctl+0x73/0xb0 [ 3175.582470][ T7543] do_syscall_64+0xfd/0x6a0 [ 3175.586999][ T7543] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3175.592871][ T7543] RIP: 0033:0x459829 [ 3175.596756][ T7543] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3175.616519][ T7543] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3175.625152][ T7543] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3175.633135][ T7543] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3175.641128][ T7543] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 12:57:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0b") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:57:53 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x900}, 0x0) [ 3175.649192][ T7543] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3175.657183][ T7543] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 12:57:53 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x7000000, 0x0, 0xffffffffffffffff, 0x0}]) [ 3175.789108][T21381] Bluetooth: hci1: Frame reassembly failed (-84) 12:57:53 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 12:57:53 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x0}]) 12:57:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0xffff, 0x2, 0x3}) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) socket$isdn_base(0x22, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x5, 0x0, 0x9}, 0xfff7) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000640)={0xb, @sliced={0x0, [0x4, 0x8, 0x80000000, 0x0, 0x80000001, 0x4, 0x9, 0x5, 0x2, 0x0, 0xc7, 0x5, 0x8, 0x7fff, 0x0, 0x80000000, 0x0, 0x40, 0x7, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0x4, 0x9, 0x1, 0x0, 0x0, 0x2, 0x4, 0x0, 0x6, 0x5, 0x3, 0x46c, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x23, 0x100000001, 0x81], 0x9}}) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x207fbbaa8679dc6e, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0xca81, 0x2c, 0xfffffffffffffff8, 0x7f}, 0x10) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000300)={0x1fe000000, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x0, 0x4, [{{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}}, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @remote}}]}, 0x290) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f00000002c0)=0x587) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r2 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x20000) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000140)={0x6, 0x5, 0x6}) 12:57:53 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0xe00}, 0x0) [ 3176.651040][ C1] net_ratelimit: 5 callbacks suppressed [ 3176.651049][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3177.211131][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3177.217847][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3177.371042][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3177.376892][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3177.690964][T10778] Bluetooth: hci0: command 0x1003 tx timeout [ 3177.697128][ T6694] Bluetooth: hci0: sending frame failed (-49) [ 3177.851339][T10778] Bluetooth: hci1: command 0x1003 tx timeout [ 3177.857481][ T6694] Bluetooth: hci1: sending frame failed (-49) [ 3178.731025][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3179.290989][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3179.296812][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3179.451004][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3179.456856][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3179.770966][T10778] Bluetooth: hci0: command 0x1001 tx timeout [ 3179.777103][ T6694] Bluetooth: hci0: sending frame failed (-49) [ 3179.931014][ T7114] Bluetooth: hci1: command 0x1001 tx timeout [ 3179.937169][ T6694] Bluetooth: hci1: sending frame failed (-49) [ 3181.851037][ T7114] Bluetooth: hci0: command 0x1009 tx timeout [ 3182.011007][T10778] Bluetooth: hci1: command 0x1009 tx timeout [ 3182.890999][ C1] net_ratelimit: 5 callbacks suppressed [ 3182.897403][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3183.451104][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3183.457011][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3183.611033][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3183.616886][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3184.971091][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3185.531087][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3185.536884][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3185.690995][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3185.696823][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:58:03 executing program 5 (fault-call:2 fault-nth:5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:58:03 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0xf000000, 0x0, 0xffffffffffffffff, 0x0}]) 12:58:03 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x1100}, 0x0) 12:58:03 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffffff8d, 0x0, @remote, 0x9}, 0x1c) 12:58:03 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES16], 0x2}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) openat$cgroup_type(r1, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 12:58:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0b") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) [ 3186.294185][T12596] Bluetooth: hci0: Frame reassembly failed (-84) [ 3186.304463][T16957] Bluetooth: hci0: Frame reassembly failed (-84) [ 3186.324327][ T8602] FAULT_INJECTION: forcing a failure. [ 3186.324327][ T8602] name failslab, interval 1, probability 0, space 0, times 0 [ 3186.337522][ T8602] CPU: 1 PID: 8602 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3186.345545][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3186.355730][ T8602] Call Trace: [ 3186.359062][ T8602] dump_stack+0x172/0x1f0 [ 3186.365014][ T8602] should_fail.cold+0xa/0x15 [ 3186.369631][ T8602] ? fault_create_debugfs_attr+0x180/0x180 [ 3186.375451][ T8602] ? page_to_nid.part.0+0x20/0x20 [ 3186.380578][ T8602] ? ___might_sleep+0x163/0x280 [ 3186.385443][ T8602] __should_failslab+0x121/0x190 [ 3186.390434][ T8602] should_failslab+0x9/0x14 [ 3186.394929][ T8602] kmem_cache_alloc_trace+0x2d3/0x790 [ 3186.400840][ T8602] ? pm_runtime_init+0x311/0x3b0 [ 3186.405818][ T8602] ? device_initialize+0x1bd/0x460 [ 3186.411296][ T8602] ll_open+0x46/0x380 [ 3186.415738][ T8602] hci_uart_tty_ioctl+0x748/0xc00 [ 3186.420885][ T8602] tty_ioctl+0xaf9/0x14f0 [ 3186.425221][ T8602] ? hci_uart_init_work+0x180/0x180 [ 3186.430419][ T8602] ? do_tty_hangup+0x30/0x30 [ 3186.435026][ T8602] ? tomoyo_path_number_perm+0x459/0x520 [ 3186.440669][ T8602] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3186.447017][ T8602] ? tomoyo_path_number_perm+0x263/0x520 [ 3186.452663][ T8602] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3186.458742][ T8602] ? __kasan_check_read+0x11/0x20 [ 3186.463895][ T8602] ? do_tty_hangup+0x30/0x30 [ 3186.468484][ T8602] do_vfs_ioctl+0xdb6/0x13e0 [ 3186.473092][ T8602] ? ioctl_preallocate+0x210/0x210 [ 3186.478202][ T8602] ? __fget+0x384/0x560 [ 3186.482356][ T8602] ? ksys_dup3+0x3e0/0x3e0 [ 3186.487022][ T8602] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3186.493693][ T8602] ? fput_many+0x12c/0x1a0 [ 3186.498141][ T8602] ? tomoyo_file_ioctl+0x23/0x30 [ 3186.503193][ T8602] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3186.509536][ T8602] ? security_file_ioctl+0x8d/0xc0 [ 3186.514640][ T8602] ksys_ioctl+0xab/0xd0 [ 3186.519073][ T8602] __x64_sys_ioctl+0x73/0xb0 [ 3186.524901][ T8602] do_syscall_64+0xfd/0x6a0 [ 3186.529483][ T8602] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3186.535362][ T8602] RIP: 0033:0x459829 [ 3186.539242][ T8602] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3186.559307][ T8602] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3186.567990][ T8602] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3186.575958][ T8602] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3186.583946][ T8602] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 12:58:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x5, 0x84, 0x101, 0x1}, 0x2c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bpf$BPF_GET_MAP_INFO(0x16, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0xfc, "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"}, &(0x7f00000001c0)=0x104) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r2, 0x9}, &(0x7f0000000240)=0x8) 12:58:04 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x1448}, 0x0) [ 3186.592986][ T8602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3186.600971][ T8602] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 12:58:04 executing program 5 (fault-call:2 fault-nth:6): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:58:04 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x11000000, 0x0, 0xffffffffffffffff, 0x0}]) [ 3186.753196][ T8867] FAULT_INJECTION: forcing a failure. [ 3186.753196][ T8867] name failslab, interval 1, probability 0, space 0, times 0 [ 3186.767351][ T8867] CPU: 0 PID: 8867 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3186.775350][ T8867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3186.785848][ T8867] Call Trace: [ 3186.789159][ T8867] dump_stack+0x172/0x1f0 [ 3186.793518][ T8867] should_fail.cold+0xa/0x15 [ 3186.798132][ T8867] ? fault_create_debugfs_attr+0x180/0x180 [ 3186.803958][ T8867] ? page_to_nid.part.0+0x20/0x20 [ 3186.809000][ T8867] ? ___might_sleep+0x163/0x280 [ 3186.813871][ T8867] __should_failslab+0x121/0x190 [ 3186.813895][ T8867] should_failslab+0x9/0x14 [ 3186.813923][ T8867] __kmalloc+0x2e0/0x770 [ 3186.827784][ T8867] ? alloc_workqueue+0x166/0xf40 [ 3186.827803][ T8867] alloc_workqueue+0x166/0xf40 [ 3186.827825][ T8867] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 3186.827851][ T8867] ? scnprintf+0x140/0x140 [ 3186.847883][ T8867] ? kasan_kmalloc+0x9/0x10 [ 3186.852398][ T8867] ? kmem_cache_alloc_trace+0x346/0x790 [ 3186.857981][ T8867] hci_register_dev+0x1b8/0x8f0 [ 3186.862932][ T8867] ? __raw_spin_lock_init+0x2d/0x100 [ 3186.868246][ T8867] hci_uart_tty_ioctl+0x87e/0xc00 [ 3186.873320][ T8867] tty_ioctl+0xaf9/0x14f0 [ 3186.877690][ T8867] ? hci_uart_init_work+0x180/0x180 [ 3186.882899][ T8867] ? do_tty_hangup+0x30/0x30 [ 3186.887543][ T8867] ? tomoyo_path_number_perm+0x459/0x520 [ 3186.893221][ T8867] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3186.899481][ T8867] ? tomoyo_path_number_perm+0x263/0x520 [ 3186.905421][ T8867] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3186.911248][ T8867] ? __kasan_check_read+0x11/0x20 [ 3186.916289][ T8867] ? do_tty_hangup+0x30/0x30 [ 3186.920975][ T8867] do_vfs_ioctl+0xdb6/0x13e0 [ 3186.925583][ T8867] ? ioctl_preallocate+0x210/0x210 [ 3186.930726][ T8867] ? __fget+0x384/0x560 [ 3186.934893][ T8867] ? ksys_dup3+0x3e0/0x3e0 [ 3186.939322][ T8867] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3186.939339][ T8867] ? fput_many+0x12c/0x1a0 [ 3186.939359][ T8867] ? tomoyo_file_ioctl+0x23/0x30 [ 3186.939381][ T8867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3186.955973][ T8867] ? security_file_ioctl+0x8d/0xc0 [ 3186.955993][ T8867] ksys_ioctl+0xab/0xd0 [ 3186.956010][ T8867] __x64_sys_ioctl+0x73/0xb0 [ 3186.956034][ T8867] do_syscall_64+0xfd/0x6a0 [ 3186.983642][ T8867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3186.989544][ T8867] RIP: 0033:0x459829 [ 3186.993484][ T8867] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3187.013733][ T8867] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3187.022139][ T8867] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3187.030119][ T8867] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3187.038355][ T8867] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3187.046545][ T8867] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 12:58:04 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) bind$can_raw(r1, &(0x7f0000000100)={0x1d, r6}, 0x10) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r4) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) r9 = dup2(r3, r5) ioctl$RTC_WIE_OFF(r9, 0x7010) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000040), 0x211) sendmsg$tipc(r8, &(0x7f0000001040)={&(0x7f0000000300), 0x10, &(0x7f0000000f40)=[{&(0x7f0000000380)="99557f254b608f80b54b17a35e9b87a483300a36e4591a4c4284b03219d3d2288680809799ea3409be0069432cb8cea7cf489199f6f5027f3559c8afd1dcf10fe78e5c27732f698719495ad5f8c3ed87042dc4a221a23a1a3e8d5112d402743db0d228c3d9dffddd33c3aac2ca0df1b8d6e712bb503e247eeffb42a281a31956a3f1a35e99e782c66cd9b0e488a08a1bfd94cc31df24638ca5eb9737990986e33bc224b5d0991088e7c80e17fd248f937eddfb5dfae746a57907be5933", 0xbd}, {&(0x7f0000000440)="f822ae0c3a9df1209e2134959711a740ddcdfac6ad909bc84dc3f8f2c74de41f15b237853f28c9355e2f9cbb", 0x2c}, {&(0x7f0000000d00)="e032d05791be17ed117ddeebd7837d20d4c6ceda49ce3047b6de1e0cc689c352999abf8b3a43a9560c02f3da37d575605768d03d3668fc6aa67bef5b0a0b939750750f291885a842db8c71f0ee22549ea2a418aa09d2f1d86a65c96760880a9aa91709d22763c37ded209e978b580d440a3e2fd63ff011d9f81c1c72a2cdfab38c74f85633d0089dc2f5f5db0d749d3d7d7d47418e2323569b5f", 0x9a}, {&(0x7f0000000dc0)="c9bb2a08668195002fe74568af19e6a9a1310679a07779b727ffb3ba66921c22fdb559aec2ae3a0c746ca6fef595831dde9222bb3a28a1982d4ab7e76857e306637846d4b1939896bd3eccdd9c6a4870f52bfb8d82268a80135fdeccab8e16fc4bba2205bdae5a852e73aa0bc2862e8a1a632331b4866b6fa3552a7a8beb7b665014a04ec87de0ac79bccf205df7f813aac718e0006d2334c94db1f0ecfbf9f6ee753708d5ed005b873ad1f8554f88426255bbfef6babc67a9b9cba43b342a75cfbca2d61f74283b6a259b2d74706fe94c66c833fe972e1d87f24433", 0xdc}, {&(0x7f0000000480)="f526dfb2c73b4866bb990a5d1b7dcc4f8b769f23390cf58ff01d05115cc25e3908c543450dc50fe1388426a28bf527b820b9bacb1297c2a9092f986e5fb10aeedf", 0x41}, {&(0x7f0000001580)="0aa665199b59621af247b8a4f12571f20a80ea7113ec724ad9c2a0584e2bcf4af9a34ce3f2d752c9a6e3aaf965aa7cceeac655f1327e400439b64c4ed0118046f8214e5869a577ec83b742c5af05d29d5ec7e2642b1e3ffb91d4d19d2caeaaf7a20eb0e46556eafaa3814944af32ad40997176891a496bdd6d41918d8f255207f6aefb34d0c56516ffb3e4eec143d2944cbb0d723f83516f3028f20bcb5ffc36edce4d4c7b7e96cb4982260baef3f09168a4f9bef76bb2db794c8136f8ad9eff63f38ad172c6deff4627146f166b87361b98797fceb703b1d90ad8d75a1f0def9848360d149860e09ecdb34d5b5d63e5e9257018b32a5c9107545c88412b5463e21c69ea0ccdad858efd489547edb199f63a7da40aac335a370eb95b71ebd9fd6702d71e421c8a343fcf9eadcdeb694cc841e5da07152ded28af3287c321d485346b5c552119c3a8b4539df5ef0117f9e7709a057f6958315316d465c2655e80600c02eed897c53ef02757ef7bbfd16531cab04811b00ed263fb6550a8277981f22c0a0c4758164879d78a0282ba21df891d387b472fa431c28dcae0397b66d751fb1592a1b32d5c31b7577c252f822dea743abdf0d0a9115634fe8d5cc2943f59e685a538b43ad239704495e1bfc57f00d016be9bc077ceec41200a5d8ba2900c0898d4060889fc0629931b39b0da0be653059db6ce64041cd2f8291d18ff3a045e4eab83d9c58a0677c346d4a7f38862794a8671ff11e0bfc63e3ebc279f78d43fa1393d150a4ed8045d44d1110f12095d91c73c472ee6f79e08a67210307712d7221d5e2eb7b8e34f6753417eece71cf7156685b988235abf427c637eb922a04c8a355fe2834a790bbac58b345868014a7e15db4ae19e009180a51b4b09cb087eada21f6379b4b50df5cbfa24f66348481e3c8a885d4fffc5265a1302011901d875a220bf1b28e904537ae60c19c49f346040b1e1afbf310354842bcf26243b9b58a014dacb4d93a079adbf09032db0d06f9fefa391a814cbfdd3ba34c7bc2dfc04e78400d77682d02fe14d3020ef4b197ad8575777b924f8345f7a35e6c8da339f801c4d99ad8743dea61c0eaa67dffe1c451736b53ed688aebcf373a7577bed4bbd4c4ffe5707d33555a9435eba114dbe6ff140c6e459b0dbb764df00a75b406aa5609c28ccb4abec6404d6f5199c82f0d648bbbfbf0d40d7a87e95e2ce0386e12133323f1720a35589691517b05c1ef094e2923dbb5932662cb16431bf6ad869c132657f216e9e3e4d908498d20cee59b4b74d51a163e895b8eccfaa2bcfa49d3f564e3012a39cbb165b2bfce88a9bdef50b79f16e3ebd6a16df448c79d1a12338d8761fa0e788f3d043fd3558eeece36a5022ac2e48f8f021d5388bf559bbdcb7f805ec0a809ecd808ddb1351d965774c17283299044cb1695db40872eb61ac1c8b85b4a9707c755a8efc63d13c14f18f51c55ef0e185d03b68b14d044d64a454f95208eeaf1b1d907cb9f2a72792abe67dc41dea9928dd93e14bd46ac2a922c4787a3ccc0deccc15673eebe7fa61de2173c4a1459fadd4097d0310fa77ea2e74af0d45c637d186ac50721d45484e0c53204513fedd5fe111b0088eeceffe572ea9ede115bfb677383dc0773b1dfca0a509604c76c07645b15dc0fbaaaa2f0bb8e36f0634f1cb3cd637d8b7c622e40a23f8de718ad1e5181f95154e9d3414d13dd78fc46a7af883f54a38ad8dc450b7fe83ba151f31672e0e1c4dc83ed69b8e03cdcad6623c3ec4eb46cb9cd33d78f7673f5555ebcfa6f8e1828ff514294f07980c32501c9e58c698757679a7a64ba25dfd3b44e6adc500a02ab5209f6c95b4056a1c12f1905b338f456cdefdd4bd0393f88afa1db9acefd7c443751fa32c792fe7553ba0bbc9092bc3013b1f843d817a1cf03461c4424b464a4d07c51b9ae2fa6e0d7228887d53f117276beff8933045aa644c1c4ee68d791ff8c99932930b59a31e9d1bd113b58a550ec39f3aad6d496f6fd13bc69a6edc173e68d37b87a10041312c0122acda498753da982d9a055373a22e1374c974ba6c19a7ba4d04063d5638f6922d266e8134acc6abbb25a8b4d0144a1d9de125355a7bf818662d11e96303db83be70b5be92b41fd52c2f5046511f6c3a4bd1f6b0baf0f66c78dbb74eb56f67f9878bbd540d7f7780b007441312fda18ed9086ea6dd02f04b48c9847ad31cdb2b6ea096439e5f0d0e8b4fff0527164a5bea807c08c8d06138b8b175fb99e4947abc872d7db3d8944e851b78905819ee40ec6d3366dfcb732781305a0dffd19aa5dd399cda42ae1e44d90c2933c0ccfd53ae58b8bca2652bb9549de82997b352fb386b760a3211a0f12bdd7a891ec0093643aea696d6297985485c72e6c3ac3bdf2792afd51a0225633459a915c5e376cbaef6b6584d984e51835b0eb561b96965e4fa75c42d895eef09595826826936d3f20f381f8ac299b5a9135451a1b22a09d4151962f5d1b6151406d21a49b07a9bf90321127f8e5fc90438e733b557535d0587a82d8972b7195182feb02d27fa39de9faa526a5c1cac9482451ca2d6681b875dfeb8df8a8fb49bffc80835e83c0c939caeb390679ee4aa1953cdcffe798699ae6cc3d365a49fb0b018b451efcf6421b568af0ca9edbe9e8db484c3a8358c98b305a8dd59721972248d574844b7476bdddac690634d8ad98e119350d3be8dafe1e8fd28816200765730e0b492d00ca827433b4ea831431da40d61de5960c4004cd969971149fdc3cad68fd7f80d002273d8fa2321c840fd17541723370bff4901e8ce7fb88847e5b3a0b919add5b74b727494bcf723908315b3fb451f8407e7a7998e2e4d61d363175cc3c173edf0a442f131a05ea4329cb607144c75b19c48d44ca96659278c640a8c5bd6e36ac82779421447302c041d57c054e823ba28604d21deff3007d8d23d361630ecf405fdac925934d7a2f6e1ace82b0b106cfa7c485b4167af3cca14fb60a4ec3b38c458905f27b3cad11c7b68ffce24b9e856efdf09762f83299dc6e2a0c68264360f95065ae2aacda4bbe3f79e6174247026e8012179269e71d8dad99338aa9a2ea90e2ceab0ce8ab91bb1ec53c9c4490c8d93d5a4f713e2f6b75f9634657bcd994d3233b3b9350a38cb2d1dd8d661719deb3abe4e1ba94265a14c264b14e4208bb95701bd8b33ab71dce4cddd386c6ca90d23c27ca7a65ce94e6efd9ed2bc4f56c7b68d3d70b8a7d3aa30d6fe206ffc53158253180c33c6c1d98c45cbccf7c3415f93fe2c9942b5abaae773bfed1440494ec29c3e6f9ea520365e767e43be1ef7ac37986caba098e6b0eb268fd8c85af5c81b160e882aebecb6fcb4c631db85ac65fd9e5bdad0c7794103fb2f15fc40993d4b00bee9996be3229f7a182cf61ff2c7f59a3173d24b30bd200bfe429dea80bd6c94bf396d3a813fbaabffd44ab03003c297b5b1e0c4821cf22ea763372421c8577aefbd1673296acccaa1a5b993ae2e42fc85b0a000a19544131bf80eb159320137dc9012a724abefbb75211b18b908c91585de7ef6cd3f305dba9be8a3ae3a9b3fffe60c95abe83414ae92ca3d78513467fdca4fd7a006f27c5f7d2c1d1457138ff7d48101a596750765d5187dfd75885b4e3b2efb06bef1e05dee0403c28a617bccac52cafc905d882cd99beaf795c13731fa67c136a44b1271c4634226de54d1269bf8026c49c848e9504bb54b990a0c47afe6cf1d896c03c913a78d21f43a4a47c234f753dd4c8f5706f96608c0b78d150519c66f017a5fcf014fb0485214167830a4da2302fb56222f2f91f07d69ffedf3100f3163eca3d70ae5b6abad4c1ed81d611d8f961852d3949e6fe87958b7a1a388e88fa5d2cb98c55ea1ea9d0d4c73b433ca9e6777e5da9d5c44c0ef385b1a875db66208a28e1de9458b3fa20aea8eac7cf0cea819c3966535164cbc6685f0ce70c6b15cd588de73dbd7ca0c27d95e10ad468e009d27e2da4ac66a468ac7492cdfbacdd3b44ddec747b6683733d776f77e949d53e53cf5420f8fbc198c1e07ff57c4a7e15e3bc1984645f81a573dded757500fa4a1eae42d13ba0add6b9141de42cbad9c20c668594c9ecbcded22197b75a7a9aacf38d0c1d6e9ecb5f267e48977dfa13b510c7d6b4642b5cb5df5fdb4ab3afcce77f8a38d20465d80eb81c219c98a8a0f298a2eea8a24590c94788718defdc62d18b3d5b390911ca94ba7f8a9e4da5e92924768cfd438ad347a17a03b0e6b0b2f1febf78fe55168e0373fbf45006488be7276287788dd022d84f79587c1dff61db3a262679a758f0239bf9b6f71ff0dc1d6c026ce8957dea437564307419a317d26762e980789060c08ac89ff104edbd314b81ff08ba4f86c7e66575bd40466bc8e2a6ff9e000be314cb9b6f5ee4bd3cdb1a0d7dde5bdc957598b05149502acdcf50ccd8bd5bf962c8254072daff85702210167104a27111e6d6366c3e0e76222a4859b81d64a1353293c5e47777c669a8b2c27d4c498734d31bf1336547470ffc47de519553dd776028ff06575e1de47e0e8bd07d04624b151121cba1b35d3535812da7aa0d5be6419dc286ee8fc863331e2c67d40b28656f392692da038b8ab22e94d6136ddf964c2901cba017e6c858fefec47402da37df7b06f641f2466831595a55708795b6c2c72eba697f342e3c08bad471d4523dc2012dcfd8c00962514aa54c53d72d0375bd9f9cbefd13f0449bf3c8c39f12713587c60bdcaaeb552b8ee567c354c9430c799edb412360c094bab13b4851fa2c91cdb6633e5bdf3ec9147050cf4317930dc4a5975da465f8165d47fa9639fcbbd05e064b5733df9f42903dcb2d6b56e9be5b68f467eadba1770824de2373e81472ba034dcdb15cf4bd6816f366381b2ff6c38be6bfafc55ce3b85162b5e4d582fb3e16748b585868031c415d0c1da24904393f05f86c8d2f319c06c27196ba3ab8632579e1591a7566b01a39c662d6779bed81ce10c427309b79f5594a4eba95759c044c8f4fd4ce47e327d0d8e9dad8ffeb9c939eeaa338f0d43802f7c6285efe5b48acaa35e205b96963e3dd93aee6e8319bbc1d7eb93296c7c7a29feeba64b4efc140836fa005fef414f21dda2d15f5318c16021526d28c8e166df59377a18285d21af930954c0abad13ae2a1521dc88b84bd732f27ecaadb8168f63d3d5b18620519b0f0bc486f7936c873269acd46a8fe075034e110dad49f36856ce21ed023c12634ae56a4941df7c2de3f670ce01e1952228afe280ebad5e54f32dd90c8b714c546ea7d84adb0811ebeaf57adb83bb0e16400d87a78199d560f8d2f991f4aa57d147e9eb7679b54242712cbfcce8e579cf1a7c2c328293d56835d97a9838d20e70557d4238869cb9abd27c62ace64a25b9a9d2452dcc3b394d53b34fffa11b74e56ec2fe8ba2e7be20043ac69fcb0d2273c72a91513d5c137ff05f90e201ed465cf99096b512baddb006f74f69db6bb61587a3808f4fdc888f4f8120c80fc37ce18588d682bd6e396f58b5a4a68a1403b8a2d6ec144b58f530f34df141ee65b5d7d8c9179275017d5301340a318a7feb406c4f100e46341fa6785a7d0450ca4caa24b9a1cafc03c529b5ebffe886f0f1249a57eeb5f55593014c86bf8daa67157ae01c9c74c8f1ba53856d5db656e4e7279bce293e1f5bb1758bb6b380bbe87082543902b1aa5e4bac15676ede4783f0d57f01005bf9c6987a81f274eb6c1cc154e4e9c702b3f2c938e9e8d9e7d1f73d096caa4b7d", 0x1000}, {&(0x7f0000002580)="18f82bab168d4e92da3f2f5377f2e20cfb2878449292927afbae40b6174c0e0fd78ca7e64dd123ab38056e80fd52e0f979ac57d94fba1ecf539e6d994d55684f829caf4fa9291f33ab13d487fec2cce9172dfc111f82d9fc6a8cb818e3c63e9db5d1dea4895a15dea717c33182aa8a96ce6ae2bc755aaa268cc36bf2840eef2b7b3ea880592d9e88223b6daf004f9555fd494ab9d01c122b6dfc91e26aab62e31f612f042846a7a0842dee179a630803be166d624845f53f486d5ee6492cde811e265b1ee4d6a780f733605421d18ce2e4de378a1d0f9c5d74d06547affa9ec6a27b3654711a59e73bbae94b423b76f47b70f2c176cd013fe904c76ab3b01246bd65c2f464581d4cacb045f52785d088b30d73062fd29b64d2e8c6d7d510c84205cd2109383ce963c1e499b730cd8f5080044c74ce324af2c5b431a0039028482f5226f01221c98f24d0e0a520ea0e1321feff5b36f34ed9dc7e5801543afc193dca7dfcb23af6bf6a2d8a44bacb845fa2ef987d70977d89a6d1a8156edfbe09862efbc4bd63a106201c5920053feca031738e115cc4e4b30fc5bbfcfeddd825a47f6912c99399f3b1f6d214a0d8e4d13cd405d58e3c4960425b1a0363f25839f70b07af51aefacd171184f15c4ba9328353318ca963c1e8ec47436e9b55f1335a3f5c3cdbe85c46822d712f43b3c0c87c8e7b1edb610b7e8292a99f4097cf774001307f6bdee27c1f05a03b32a56b65cc2bc3784a494044e77ada8315823745146ac0f4c217431eb80cea7882335c74576c3c0050bc2dbfe3c3e5f5b1f76509d2737937e0eaf39fd7af7b3454f55a6032172c0ec1095fd2fccf1c5d63bdb3260b4caa16e9848629180cd1cff43646f742b50f108e44b5f16eabe3a291c9da5ceb4ad5e54f9442b58e1452a6684fd937b5de084b7fdb32f5a58db6a7766d8e6f3de1c2383a7bf78fc7e34dbabecac6ef53a1908995a38f0480690eb6dade769aa31b798f30a41bf077068d9caeed8927a4dac77d09fbd48790820309004c7625712bd38aba47ece32359f643bd31aaee7da4f82c59ed14ca43140fdcdba596df29ab92a365820190ac71aa4302499b8d8ead6478c4611d2ae97dece9681126898c274aa74ff1c9377747cffb55a1651c234cf4de035e75b7ee1d53997321faffef8dc1ad1aaaa3687acd0f273027ebe07ac434ef04e229dda39e192fe5663b17c6f50b9066df550b8341c443e3334666347f53d9e885e85911dfe3a6e0bc794cc564bf474d78a876d50763136f211a5b6038bea41799860869c0b555369098088adccf1a6d486b56c58632d6918580af6d3d3df82b8955d40e1fe5a2f5bbe404bad09d42c38b62fa310aaec8825f3d18893b99e926ad2dc1c2201bfc7c6cf610569f9e85e0ab01f4a4eaa30848ededa898ff3d304e9efbfba9df56f52096564f6ee7b7c2c0f2e0c5c01628afb4bf77d2b42f8121e0aee344ecc6740d365b829399965db526bf2e353b6e6f49351143a9dcbeb4f30b10d9b67ebbb56a5046d5c05b8088cfc760a4f7e5604d974d33e9768d6bac9c0f262926fb236c4fbf009f2be2aa43a0cde75f49e343d94cd450cc08438a6e55d9a6243d865dc5d9c61b795ad0f57315f02ba3a165fb5765da3d30d0b8016410037a388b3abbfd150ad42aecced9709f8e0b395db8e4f4094b90f0cb20b6ea9024cc1b6725e2e3969444ac8cfc1753267cb1b26de0e0efd9d93cb227bacae02c87787dd0a514ad40925dbb28625f20e87e6963bcd514c6834b55a4acee5eeb1e6112a0a7825b911a75d65c2b895b3778ab462ec2dff79915c0e786aaf1fe704c6550f6612fcecd038e2a591bed2dbeb1c5fb9f5b4a796323fbbf82266d601367b0fb47beb73f776f95ab37b4d5b0486e3bf7f4fd0f74fe739bfb35536554ace2bddb2ae70cf53c283de31312211f0e111f11b7d697a6666f985b8d2ed946230801eb1149c7d02d415dfbd9592f8d31bd47a3de9b8455591a7b2c389da6c5d3777366e392bfb995ca86d43d205e7aaf7fbaa7e3b25849e22e3df6b5a5b103c97581b8e9dcfcd214da6f87a8b7c02b47517079d89ea8ea26c7cadaabe00b4ff13bab650ac34cc487d0955288778b79112da530ef53d809281c61acb81c61210338810572cc7c8a6afd13e45e2e88bd785866cc69662db431239ff586c968c7536301001a3de2c4998fd0a4ec407a8f4133d8c84a286bde974f62cb43e3568617e55ff3bc627b6675e090f2cfd8c60ce6f312b2f0eba85b47c05d8354d0b413e0970d36f39edc666a1f09f24ba33a1d176dd49ea1eafe34a5f1e8b4b6c741a240eec00355a49d0bb49cca1bee26c436fb4ac82f204db7361a6253a1a5b617e3803dcd21595c573abfa96051ec941d2f959bd7175ec8f20c50e2fe6f4bcb8b0b16bfa6e4cdded6c599a22edc21984ff5a3965ce101cd20d61ee92a3c8feb412e8120f894b75ffc6ec3ece343357cd67e64e2674f0670bfa429610ec6234179f08915a8debb290ed61e33f18c9887f6d1c09244ba632ab17194b68d04af7fe4734e9c2481338f48114bc6684c8183e1bbedd015b46efb1dd29e72cb82cca60b5bbcc9ac5599f03c181e29ad1df4a643776e954fc2af927742e9c135349ebe37b12a4706b35972473a76bd97b9aedd2ceb8b8cde3cf9d395767b2a068f9c3da2ab6a7cbdcbffd0b9cb37331b42cfa4f5005406e95f5ea01d002faf5c4d415c87d79dac460feed88c2fa6af0e8b557b676052bb35c21e69d155ae5ba596a452e8ca11527602ff6abe2f348ec612826ceb9a1d36d05dba64853c3432fdbc0afbde73fda4826e2ac99d4d187ce50495be7873ebc9c4d6303bb455883f191be0dc41aaf6d8484ae1c52a556fb0364ce682bb296f44bd8b901473f1045b29a7314a8abf46414b2d975ffcc54b043d36bc6fab2bc4be16fd20dc796ed816a0132c8dd2d3f799362077bbbfa4a333c553fa57201d8961f99ba972f9653580d5663955c747b0f09bc18f2c1de13ffda59462267caf0991136f198627785d15b21e8316a5804f8d8df879dc972f054bcff3d017cce4df424507f36baf501a9afe5f26262b0de5b4faa6c2da0793e0bfa12c2607686dcbaf5e36fb9633d3f00332625c098e48f75ff22860facf3b74b74df03adf6fff37e6f118ecfd9e63201d427ddac30f2c88dd392602577039d9ff4dece2cf31dabdc6d4a2bbe1ffb7b06c1d8abbaca2f9b0b9ea1d33877674ffe99006affd0bd745ceefa613d4d17b386e208117728dd1e815298b6a66d90c9333384a3f813f2e56a3224dfab7351bae7640cc21fe9d2c4cbd53cd5c1c4a3d5bbc59d590020c37b55ee93c91375fe806b1f9e8957348aa323140b5c5b7481798270c6eed2f2687daf4abfeec409db198cc025513479aca4c2e1247fe6197733fc56134a165d193506441fbf396ae35a1d0ce9b99db7388ae8b98def73083cd79c8b7f205699e99a33577aa38391cf05416f33fea5db892b4d163b7a942d1a99087bde14088f51ad4d59bebfcf6704a657b47ea2ddc8ad97cf4b2f0e9a6c8d6963c5f1221cfc36432723d97c71f589fe8354c8e4869a7cf8604d6c27a4711a567bff77306220cf4b5e57c088604dd24cfa47f345898c81d2abcd0ef10d1030609ff80a2ee020caa08b973e4f0efa30d3f91ef43451ef43cd2d8114d1698054d97937ad58b9a7189f5109483091171d37c74d73ab1d1ad020ffda8ca01bb8dcf993cfde06a509cb7eff0bdd0c939a84d73c1ce3db878ef6dc92522425de905e9b5d503bec4bf735f89632c322378d07089dfd98ec17338c82c8685b9b7b23b51696724c8f3baf8fceaa8274250f096b94e4f2ef148cdb14e8a3ef606d6551b5beefaab5666660dc224c8417c3ed1bb2ebf43a540f7e50844a762ce14c794267696346e1801fac1691cc1fca65b98f6e370959c85394cdca9192d18ff71ceb3395f8a617395b1d7727fe53ad259ae1a01a99a22547d946b0454a70edd02563f51dc1d95", 0xb1d}], 0x7}, 0x0) 12:58:04 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000040)={0x0, {0x6, 0x4}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000340)='}\x00N\x06\x94\xe2\xe0\xe3\xab\xe1\x03\x1e\xc8\x8a\x17\x88\';g\xdd\x04r\x0e\x8d\xff{+\a/\xd2\x93\xa7\xcc=6\x15.f\xf4\xa2\x93\x91d&\x17\xc7\x82\x89\xe8\x95\"\xa9W\xbd\x91\x96\xd7=]\x9e\xe6\xf1I\v\x91z\xfa\xeb\xd1\x81\xc2j\x10 v\x93\xc7\xc9+\xc7\x8ds\x8f\x15\x8aR\xc3j\x80\xc3H\xf3%\'4\x11\x85a\xc6\x96\xd0gf*P\xfa\x1aET\x01\x05Y\xcaY\xc0!\xcf\xae\xb1\x9f{\xc0\x14F^\x8f\x8ej\xa17\x02\xdb\xd62\xdc\xadn\t\xa6z\xad\x9b\xbcf\x96\n\x81*\xcf0\x11\xaf\xbd\xd5\v\x1f\x10fuY\xc4\xd3\xf6V8\xc67\x85\xe8\xdfZ4Y\x9c\xdb^\xf9\xe3uv\xc9\xc6s\xde3E\x9c\fE\xd2\xce\xf5\x06\xc0\x8b\x86\xe0h\xae\xce\xb4\x16\x0f\xd4XRr\xcb0{R\"\xf6}\xb1s\xac\x7f\x80\xff{bM\x93\x90\xae\x1d1@G\"n3:5\xba\xbc[6 C\xad\x13\xb6;\xbfHZa\x81h\x91(\xb2\x13\xd6\xbe\xb2u.\xd4J\x9d\x1c\xd7\x8d+\v<]\xb0\xb6a\xe6A\x93\x1c\x98/\xdb\x11\xf7\xd9)\xe9?\xb8\xd1\xfe\x912\x8041\x82\x89\xad\x12v\x12\b%\xd1>\xb8\x99p\xd731\xae`!\xab3\nI\xfc\x03*\xc7\xd1x\xe6\xc3\xf4 d\xa4\xb0\xb2?\xf1\xd7\x81\xb7\xc2\x15\xbd\x8f\xf3\xa6;\br\f4\xfd\xce\x8b\x90\xf6\xf7\x95\xc7\x1f\xe2~\x14\xdf6+P\x10\xb5\x83,\xf6,\x82@b!\xb5N\xfd\xe0\xeek\xe3\x1a\rJjT\xa5\x1cYt2L\x02\x1a.v\xd6\x01\x7fd\xf3*~\b,}\xc3m}\xf8\xe4\xec', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r2, &(0x7f00002e4000)='./file\xff\xff', &(0x7f0000000000)=ANY=[], &(0x7f0000001ffc), 0x1400) 12:58:04 executing program 3: ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$int_in(r0, 0x800000c004500a, 0x0) perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r1, &(0x7f00000002c0)={0x8, "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", 0x121f}, 0x1006) [ 3187.054527][ T8867] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3187.071059][ T8867] Bluetooth: Can't register HCI device 12:58:04 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x3f000000, 0x0, 0xffffffffffffffff, 0x0}]) 12:58:04 executing program 5 (fault-call:2 fault-nth:7): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:58:04 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffffff91, 0x0, @remote, 0x9}, 0x1c) 12:58:04 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x2800}, 0x0) [ 3187.241046][ T9336] FAULT_INJECTION: forcing a failure. [ 3187.241046][ T9336] name failslab, interval 1, probability 0, space 0, times 0 [ 3187.293134][ T9336] CPU: 1 PID: 9336 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3187.301168][ T9336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3187.311320][ T9336] Call Trace: [ 3187.314629][ T9336] dump_stack+0x172/0x1f0 [ 3187.318979][ T9336] should_fail.cold+0xa/0x15 [ 3187.323590][ T9336] ? fault_create_debugfs_attr+0x180/0x180 [ 3187.329411][ T9336] ? page_to_nid.part.0+0x20/0x20 [ 3187.334460][ T9336] ? ___might_sleep+0x163/0x280 [ 3187.339417][ T9336] __should_failslab+0x121/0x190 [ 3187.344448][ T9336] should_failslab+0x9/0x14 [ 3187.349046][ T9336] __kmalloc_track_caller+0x2dc/0x760 [ 3187.354427][ T9336] ? pointer+0x750/0x750 [ 3187.358677][ T9336] ? widen_string+0x2e0/0x2e0 [ 3187.363350][ T9336] ? kasprintf+0xbb/0xf0 [ 3187.367632][ T9336] kvasprintf+0xc8/0x170 [ 3187.372592][ T9336] ? bust_spinlocks+0xe0/0xe0 [ 3187.378073][ T9336] ? page_to_nid.part.0+0x20/0x20 [ 3187.383381][ T9336] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3187.389103][ T9336] ? find_next_bit+0x107/0x130 [ 3187.393874][ T9336] kasprintf+0xbb/0xf0 [ 3187.397939][ T9336] ? kvasprintf_const+0x190/0x190 [ 3187.403108][ T9336] ? is_module_percpu_address+0xb/0x10 [ 3187.408777][ T9336] alloc_workqueue+0x46c/0xf40 [ 3187.413816][ T9336] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 3187.419616][ T9336] hci_register_dev+0x1b8/0x8f0 [ 3187.424537][ T9336] ? __raw_spin_lock_init+0x2d/0x100 [ 3187.430234][ T9336] hci_uart_tty_ioctl+0x87e/0xc00 [ 3187.435297][ T9336] tty_ioctl+0xaf9/0x14f0 [ 3187.439642][ T9336] ? hci_uart_init_work+0x180/0x180 [ 3187.445039][ T9336] ? do_tty_hangup+0x30/0x30 [ 3187.449893][ T9336] ? tomoyo_path_number_perm+0x459/0x520 [ 3187.455535][ T9336] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3187.461867][ T9336] ? tomoyo_path_number_perm+0x263/0x520 [ 3187.467508][ T9336] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3187.473329][ T9336] ? __kasan_check_read+0x11/0x20 [ 3187.473349][ T9336] ? do_tty_hangup+0x30/0x30 [ 3187.473364][ T9336] do_vfs_ioctl+0xdb6/0x13e0 [ 3187.473380][ T9336] ? ioctl_preallocate+0x210/0x210 [ 3187.473393][ T9336] ? __fget+0x384/0x560 [ 3187.473411][ T9336] ? ksys_dup3+0x3e0/0x3e0 [ 3187.473428][ T9336] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3187.473450][ T9336] ? fput_many+0x12c/0x1a0 [ 3187.512107][ T9336] ? tomoyo_file_ioctl+0x23/0x30 [ 3187.517076][ T9336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3187.523342][ T9336] ? security_file_ioctl+0x8d/0xc0 [ 3187.528479][ T9336] ksys_ioctl+0xab/0xd0 [ 3187.532655][ T9336] __x64_sys_ioctl+0x73/0xb0 [ 3187.537249][ T9336] do_syscall_64+0xfd/0x6a0 [ 3187.541755][ T9336] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3187.547675][ T9336] RIP: 0033:0x459829 [ 3187.551583][ T9336] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3187.571487][ T9336] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3187.580008][ T9336] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3187.587966][ T9336] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3187.596292][ T9336] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3187.604262][ T9336] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3187.612237][ T9336] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3188.330992][T10644] Bluetooth: hci0: command 0x1003 tx timeout [ 3188.337184][ T6694] Bluetooth: hci0: sending frame failed (-49) [ 3189.130992][ C1] net_ratelimit: 5 callbacks suppressed [ 3189.130999][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3189.691055][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3189.696926][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3189.703078][T19790] Bluetooth: hci1: command 0x1003 tx timeout [ 3189.710080][ T6694] Bluetooth: hci1: sending frame failed (-49) [ 3189.851057][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3189.856881][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3190.411123][T19790] Bluetooth: hci0: command 0x1001 tx timeout [ 3190.417431][ T6694] Bluetooth: hci0: sending frame failed (-49) [ 3191.211042][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3191.770982][T10644] Bluetooth: hci1: command 0x1001 tx timeout [ 3191.771030][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3191.781141][ T6694] Bluetooth: hci1: sending frame failed (-49) [ 3191.783022][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3191.931061][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3191.936899][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3192.490971][T10644] Bluetooth: hci0: command 0x1009 tx timeout [ 3193.851399][T10644] Bluetooth: hci1: command 0x1009 tx timeout [ 3195.371021][ C1] net_ratelimit: 5 callbacks suppressed [ 3195.371028][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3195.931003][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3195.936832][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3196.091077][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3196.096921][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:58:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0b") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:58:14 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x40000000, 0x0, 0xffffffffffffffff, 0x0}]) 12:58:14 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 12:58:14 executing program 3: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/250, 0xfa}, {&(0x7f00000003c0)=""/221, 0xdd}, {&(0x7f00000000c0)}], 0x3, &(0x7f00000004c0)=""/202, 0xca}, 0x40000000) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000180)={0x1, 0x4, 0x7fffffff, 0x6, 0x7fff, 0x81}) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000200)={0x5, 0x10004, 0x2, 0x43, 0xffffffffffffffff}) socket$kcm(0x29, 0x1e427bb3a9b63458, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001e000503ed0080647e6394f20500d2000500fc3711407f480f0001002700000002000000f88000f01700", 0x2e}], 0x1}, 0x0) gettid() 12:58:14 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfffffff5, 0x0, @remote, 0x9}, 0x1c) [ 3196.460449][ T9652] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3196.475236][ T9652] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3196.496219][T12596] Bluetooth: hci0: Frame reassembly failed (-84) 12:58:14 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x4814}, 0x0) 12:58:14 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0xffffffffffffffff, 0x0}]) 12:58:14 executing program 3: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video1\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x349046b306f8fb64) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101800, 0x0) getpid() 12:58:14 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x6000}, 0x0) [ 3197.451032][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:58:15 executing program 5 (fault-call:2 fault-nth:8): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:58:15 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0xffffffffffffffff, 0x0}]) 12:58:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000980400005001000048020000480200000000000048020000c8030000c8030000c8030000c8030000c803000004000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b736a7304"], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010015001000000000000000000000000000000000000000000000000480068626800000000000000000000000000000000000000000000000000000071920000040106008100270800006500ffff01800900ff07b3ae64b2040000000000faff0000080040004c4f4700000000000000000000000000000000000000000000000000000000026317608be3079a0eaf261651c9659855d9feaefddea59ebbc8d1dc31d9b7ff010000000000000000000000000001fe8000000000000000000000000000aaff000000000000ffffffff00000000ff000000ff00000000ff000000ffffffff0000000000000000000000000000000069703667726530000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000003a00ff0420000000000000000000000000000000c800f8000000000000000000000000000000000000000000000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001000000007f00000005000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005801800100000000000000000000000000000000000000000000000090007372680000000000000000000000000000000000000000000000000000012f5f0209010000000000000000000000000000000000000100000000000000000000ffff00000000fe8000000000000000000000000000bbffffff00ff000000ffffffffffffff00ffffffff00000000ffffffffffffff0000000000ffffffff000000ffffffffff0010183400000000280053594e50524f58590000000000000000000000000000000000000000000000140300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00"/1176], 0x4f8) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x48000, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000240)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/cachefiles\x00', 0x40002, 0x0) write$FUSE_LSEEK(r3, &(0x7f0000000040)={0x18, 0x0, 0x5, {0x8001}}, 0x18) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="2100000080827d0507"]) [ 3197.761431][T10286] FAULT_INJECTION: forcing a failure. [ 3197.761431][T10286] name failslab, interval 1, probability 0, space 0, times 0 [ 3197.775517][T10286] CPU: 1 PID: 10286 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3197.783818][T10286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3197.793884][T10286] Call Trace: [ 3197.797196][T10286] dump_stack+0x172/0x1f0 [ 3197.801586][T10286] should_fail.cold+0xa/0x15 [ 3197.806285][T10286] ? fault_create_debugfs_attr+0x180/0x180 [ 3197.812108][T10286] ? page_to_nid.part.0+0x20/0x20 [ 3197.817138][T10286] ? ___might_sleep+0x163/0x280 [ 3197.822003][T10286] __should_failslab+0x121/0x190 [ 3197.827046][T10286] should_failslab+0x9/0x14 [ 3197.831737][T10286] __kmalloc_track_caller+0x2dc/0x760 [ 3197.837135][T10286] ? pointer+0x750/0x750 [ 3197.837156][T10286] ? kasprintf+0xbb/0xf0 [ 3197.837175][T10286] kvasprintf+0xc8/0x170 [ 3197.845644][T10286] ? bust_spinlocks+0xe0/0xe0 [ 3197.845664][T10286] ? preempt_schedule_irq+0xf3/0x160 [ 3197.845687][T10286] kasprintf+0xbb/0xf0 [ 3197.864400][T10286] ? kvasprintf_const+0x190/0x190 [ 3197.869708][T10286] ? is_module_percpu_address+0xb/0x10 [ 3197.875201][T10286] alloc_workqueue+0x46c/0xf40 [ 3197.879980][T10286] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 3197.885728][T10286] ? kasan_kmalloc+0x9/0x10 [ 3197.890220][T10286] ? kmem_cache_alloc_trace+0x346/0x790 [ 3197.895889][T10286] hci_register_dev+0x1b8/0x8f0 [ 3197.900752][T10286] ? __raw_spin_lock_init+0x2d/0x100 [ 3197.906317][T10286] hci_uart_tty_ioctl+0x87e/0xc00 [ 3197.911429][T10286] tty_ioctl+0xaf9/0x14f0 [ 3197.915747][T10286] ? hci_uart_init_work+0x180/0x180 [ 3197.921460][T10286] ? do_tty_hangup+0x30/0x30 [ 3197.926132][T10286] ? tomoyo_path_number_perm+0x459/0x520 [ 3197.932274][T10286] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3197.938506][T10286] ? tomoyo_path_number_perm+0x263/0x520 [ 3197.944131][T10286] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3197.949939][T10286] ? __kasan_check_read+0x11/0x20 [ 3197.956262][T10286] ? do_tty_hangup+0x30/0x30 [ 3197.960844][T10286] do_vfs_ioctl+0xdb6/0x13e0 [ 3197.965463][T10286] ? ioctl_preallocate+0x210/0x210 [ 3197.970822][T10286] ? __fget+0x384/0x560 [ 3197.974970][T10286] ? ksys_dup3+0x3e0/0x3e0 [ 3197.979390][T10286] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3197.985741][T10286] ? fput_many+0x12c/0x1a0 [ 3197.990289][T10286] ? tomoyo_file_ioctl+0x23/0x30 [ 3197.995246][T10286] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3198.001651][T10286] ? security_file_ioctl+0x8d/0xc0 [ 3198.006772][T10286] ksys_ioctl+0xab/0xd0 [ 3198.010926][T10286] __x64_sys_ioctl+0x73/0xb0 [ 3198.015526][T10286] do_syscall_64+0xfd/0x6a0 [ 3198.020047][T10286] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3198.026028][T10286] RIP: 0033:0x459829 [ 3198.030193][T10286] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3198.050077][T10286] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3198.058477][T10286] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3198.067096][T10286] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3198.075063][T10286] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3198.083808][T10286] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3198.091945][T10286] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3198.101120][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3198.106999][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3198.114620][ T6694] Bluetooth: hci1: sending frame failed (-49) [ 3198.171043][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3198.177405][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3198.570961][T19790] Bluetooth: hci0: command 0x1003 tx timeout [ 3198.577169][ T6694] Bluetooth: hci0: sending frame failed (-49) [ 3200.180978][T10644] Bluetooth: hci1: command 0x1003 tx timeout [ 3200.187376][ T6694] Bluetooth: hci1: sending frame failed (-49) [ 3200.651011][T10644] Bluetooth: hci0: command 0x1001 tx timeout [ 3200.657384][ T6694] Bluetooth: hci0: sending frame failed (-49) [ 3201.611020][ C1] net_ratelimit: 5 callbacks suppressed [ 3201.611026][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3202.251040][T10644] Bluetooth: hci1: command 0x1001 tx timeout [ 3202.251109][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3202.261185][ T6694] Bluetooth: hci1: sending frame failed (-49) [ 3202.263386][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3202.331030][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3202.336848][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3202.730988][T10644] Bluetooth: hci0: command 0x1009 tx timeout [ 3203.691032][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3204.331052][T10644] Bluetooth: hci1: command 0x1009 tx timeout [ 3204.331060][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3204.331130][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3204.410992][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3204.417233][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:58:24 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000000, 0x0, @remote, 0x9}, 0x1c) 12:58:24 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x34000}, 0x0) 12:58:24 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5500000018007f", 0x7}], 0x1}, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1700000068"], 0x1}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x11, &(0x7f0000000100)}], 0x492492492492805, 0x0) 12:58:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47b") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:58:24 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0xffffffffffffffff, 0x0}]) 12:58:24 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x400300}, 0x0) 12:58:24 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0xffffffffffffffff, 0x0}]) [ 3206.716740][T16957] Bluetooth: hci0: Frame reassembly failed (-84) 12:58:24 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 12:58:24 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x80000000020001, 0x4) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x109000, 0x0) [ 3207.851019][ C1] net_ratelimit: 5 callbacks suppressed [ 3207.851027][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3208.491018][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3208.497143][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:58:26 executing program 5 (fault-call:2 fault-nth:9): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:58:26 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0xffffffffffffffff, 0x0}]) 12:58:26 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) 12:58:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x10, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x4603000000000000]}}}}, 0x108) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000001c0)={0x5, 0x6, 0x100000000, 0x4, 0x8}) r1 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x401, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000400)={0x58, ""/88}) r2 = dup(r0) setsockopt$inet_dccp_buf(r2, 0x21, 0xd, &(0x7f00000002c0)="c580e6260ec951aa52267b80e50457bfa5c1f2a442e546bbb3272dc7140586f4fc966f2567ce70c2b5876e5757895989f4d1450ba5ce323d5761ff351484002e9a0e346f439df12f58abc0bb676a55d5751fd7ef12f35d6c3c8828bcbd7c435717fcf57c0e603e684dce044b0f7da9e2a33a1897f75331791dd5ac9a0fcb0de2b98b7b4441112ed8da89e66e468d3295df8ddf854aba961b8d80c34cc1d6de23df4a7200e2f7472e907889a28675b0279e48854d901f62d39a5ccce761ca8c8faa6ea3cde50c0fcd4da7941fb96fbcd123229e07c4942bb5c6210cac51d09cbf6906a71954", 0xe5) r3 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x800000000, 0x1) write$9p(r3, &(0x7f0000000200)="93488992d5a4d2263622bcd7f14757468af93ae8ba5e1967667bbf857f2a1ec430481ed90b9215b770d5945b39cffc43825706e3ec7af621c5c33ceef7abab995242d303b54a649a870fbf5b15bcc82bad9e838544c8593ca3cf183abff0a9582a8a303b4e29cb4af2f37e69a61689feaf524ff9fa0ae1773b41f73f1185cbdc96d491544ca7bb07f39f1c652c97c306244220cdadef3f78507eb57e4e7f13c9f60287ab5a776b2546cf56", 0xab) write$P9_RCREATE(r3, &(0x7f0000000180)={0x18, 0x73, 0x2, {{0x80, 0x2}, 0x7}}, 0x18) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:58:26 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x100000000000, 0x0, @remote, 0x9}, 0x1c) [ 3208.571024][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3208.577286][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:58:26 executing program 3: r0 = socket$inet6(0x10, 0x1, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x6, @empty, 0xedc}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r1, 0x2}, &(0x7f0000000180)=0x8) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f2500fe01b2a4a280930a060001fe800014040000003900090023005000080000001900054003000000000022dc1338d54400009b84136ef75afb83de4411280100c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 3208.630402][T11084] FAULT_INJECTION: forcing a failure. [ 3208.630402][T11084] name failslab, interval 1, probability 0, space 0, times 0 [ 3208.645500][T11084] CPU: 1 PID: 11084 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3208.654651][T11084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3208.665894][T11084] Call Trace: [ 3208.669186][T11084] dump_stack+0x172/0x1f0 [ 3208.669206][T11084] should_fail.cold+0xa/0x15 [ 3208.678305][T11084] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3208.685001][T11084] ? fault_create_debugfs_attr+0x180/0x180 [ 3208.690800][T11084] ? page_to_nid.part.0+0x20/0x20 [ 3208.695942][T11084] ? ___might_sleep+0x163/0x280 [ 3208.700916][T11084] __should_failslab+0x121/0x190 [ 3208.705865][T11084] should_failslab+0x9/0x14 [ 3208.710828][T11084] kmem_cache_alloc_trace+0x2d3/0x790 [ 3208.716399][T11084] ? kasan_kmalloc+0x9/0x10 [ 3208.722651][T11084] ? __kmalloc+0x351/0x770 [ 3208.727360][T11084] ? mutex_lock_io_nested+0x1260/0x1260 [ 3208.730961][T19790] Bluetooth: hci0: command 0x1003 tx timeout [ 3208.733073][T11084] alloc_workqueue_attrs+0x3d/0xc0 [ 3208.733084][T11084] apply_wqattrs_prepare+0xbe/0x960 [ 3208.733096][T11084] ? lock_acquire+0x190/0x410 [ 3208.733111][T11084] ? alloc_workqueue+0x8d8/0xf40 [ 3208.739597][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 3208.744756][T11084] apply_workqueue_attrs_locked+0xcf/0x120 [ 3208.744768][T11084] alloc_workqueue+0x8f1/0xf40 [ 3208.744780][T11084] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 3208.744793][T11084] ? kasan_kmalloc+0x9/0x10 [ 3208.744800][T11084] ? kmem_cache_alloc_trace+0x346/0x790 [ 3208.744812][T11084] hci_register_dev+0x1b8/0x8f0 [ 3208.744830][T11084] ? __raw_spin_lock_init+0x2d/0x100 [ 3208.744851][T11084] hci_uart_tty_ioctl+0x87e/0xc00 [ 3208.817456][T11084] tty_ioctl+0xaf9/0x14f0 [ 3208.821804][T11084] ? hci_uart_init_work+0x180/0x180 [ 3208.827007][T11084] ? do_tty_hangup+0x30/0x30 [ 3208.831969][T11084] ? tomoyo_path_number_perm+0x459/0x520 [ 3208.837816][T11084] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3208.844148][T11084] ? tomoyo_path_number_perm+0x263/0x520 [ 3208.851131][T11084] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3208.857479][T11084] ? __kasan_check_read+0x11/0x20 [ 3208.862597][T11084] ? do_tty_hangup+0x30/0x30 [ 3208.867283][T11084] do_vfs_ioctl+0xdb6/0x13e0 [ 3208.871961][T11084] ? ioctl_preallocate+0x210/0x210 [ 3208.877244][T11084] ? __fget+0x384/0x560 [ 3208.881486][T11084] ? ksys_dup3+0x3e0/0x3e0 [ 3208.886328][T11084] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3208.892579][T11084] ? fput_many+0x12c/0x1a0 [ 3208.897078][T11084] ? tomoyo_file_ioctl+0x23/0x30 [ 3208.902543][T11084] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3208.908785][T11084] ? security_file_ioctl+0x8d/0xc0 [ 3208.914038][T11084] ksys_ioctl+0xab/0xd0 [ 3208.918594][T11084] __x64_sys_ioctl+0x73/0xb0 [ 3208.923415][T11084] do_syscall_64+0xfd/0x6a0 [ 3208.928034][T11084] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3208.934008][T11084] RIP: 0033:0x459829 [ 3208.937983][T11084] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3208.965182][T11084] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3208.973986][T11084] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3208.982168][T11084] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3208.990479][T11084] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3208.998547][T11084] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3209.006854][T11084] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3209.017462][T11084] Bluetooth: Can't register HCI device [ 3209.931013][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3210.571217][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3210.577673][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3210.651051][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3210.656978][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3210.810992][ T7114] Bluetooth: hci0: command 0x1001 tx timeout [ 3210.817163][ T6504] Bluetooth: hci0: sending frame failed (-49) [ 3212.890986][T10644] Bluetooth: hci0: command 0x1009 tx timeout [ 3214.091087][ C1] net_ratelimit: 5 callbacks suppressed [ 3214.091094][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3214.731050][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3214.736885][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3214.811009][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3214.816865][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3216.171019][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3216.810994][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3216.816850][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:58:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47b") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:58:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x5, @broadcast, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffe, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xff, 0x2002) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0xa0000000}) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) close(r1) 12:58:34 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x3000000}, 0x0) 12:58:34 executing program 5 (fault-call:2 fault-nth:10): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:58:34 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0xffffffffffffffff, 0x0}]) 12:58:34 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5000000000000, 0x0, @remote, 0x9}, 0x1c) [ 3216.891144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3216.897104][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3216.957833][T11507] FAULT_INJECTION: forcing a failure. [ 3216.957833][T11507] name failslab, interval 1, probability 0, space 0, times 0 [ 3216.994477][T11507] CPU: 0 PID: 11507 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3217.002831][T11507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3217.013081][T11507] Call Trace: [ 3217.016397][T11507] dump_stack+0x172/0x1f0 [ 3217.020746][T11507] should_fail.cold+0xa/0x15 [ 3217.025353][T11507] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3217.031716][T11507] ? fault_create_debugfs_attr+0x180/0x180 [ 3217.037546][T11507] ? page_to_nid.part.0+0x20/0x20 [ 3217.042589][T11507] ? ___might_sleep+0x163/0x280 [ 3217.047483][T11507] __should_failslab+0x121/0x190 [ 3217.052898][T11507] should_failslab+0x9/0x14 [ 3217.057396][T11507] kmem_cache_alloc_trace+0x2d3/0x790 [ 3217.062753][T11507] ? kasan_kmalloc+0x9/0x10 [ 3217.067259][T11507] ? __kmalloc+0x351/0x770 [ 3217.071693][T11507] ? mutex_lock_io_nested+0x1260/0x1260 [ 3217.077267][T11507] ? mark_held_locks+0xf0/0xf0 [ 3217.082042][T11507] alloc_workqueue_attrs+0x3d/0xc0 [ 3217.087143][T11507] apply_wqattrs_prepare+0xb6/0x960 [ 3217.092351][T11507] ? lock_acquire+0x190/0x410 [ 3217.097550][T11507] ? alloc_workqueue+0x8d8/0xf40 [ 3217.102621][T11507] apply_workqueue_attrs_locked+0xcf/0x120 [ 3217.108512][T11507] alloc_workqueue+0x8f1/0xf40 [ 3217.113304][T11507] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 3217.119034][T11507] ? kasan_kmalloc+0x9/0x10 [ 3217.123531][T11507] ? kmem_cache_alloc_trace+0x346/0x790 [ 3217.129109][T11507] hci_register_dev+0x1b8/0x8f0 [ 3217.133975][T11507] ? __raw_spin_lock_init+0x2d/0x100 [ 3217.139287][T11507] hci_uart_tty_ioctl+0x87e/0xc00 [ 3217.144344][T11507] tty_ioctl+0xaf9/0x14f0 [ 3217.148902][T11507] ? hci_uart_init_work+0x180/0x180 [ 3217.154110][T11507] ? do_tty_hangup+0x30/0x30 [ 3217.158799][T11507] ? tomoyo_path_number_perm+0x459/0x520 [ 3217.164691][T11507] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3217.170945][T11507] ? tomoyo_path_number_perm+0x263/0x520 [ 3217.176729][T11507] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3217.182675][T11507] ? __kasan_check_read+0x11/0x20 [ 3217.188142][T11507] ? do_tty_hangup+0x30/0x30 [ 3217.192859][T11507] do_vfs_ioctl+0xdb6/0x13e0 [ 3217.197467][T11507] ? ioctl_preallocate+0x210/0x210 [ 3217.202918][T11507] ? __fget+0x384/0x560 [ 3217.207196][T11507] ? ksys_dup3+0x3e0/0x3e0 [ 3217.211758][T11507] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3217.218387][T11507] ? fput_many+0x12c/0x1a0 [ 3217.222970][T11507] ? tomoyo_file_ioctl+0x23/0x30 [ 3217.228291][T11507] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3217.234572][T11507] ? security_file_ioctl+0x8d/0xc0 [ 3217.239886][T11507] ksys_ioctl+0xab/0xd0 [ 3217.244583][T11507] __x64_sys_ioctl+0x73/0xb0 [ 3217.249672][T11507] do_syscall_64+0xfd/0x6a0 [ 3217.254585][T11507] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3217.262848][T11507] RIP: 0033:0x459829 [ 3217.267263][T11507] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3217.288464][T11507] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3217.297689][T11507] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 12:58:34 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 3217.308297][T11507] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3217.317846][T11507] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3217.327218][T11507] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3217.337287][T11507] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3217.354089][T11507] Bluetooth: Can't register HCI device 12:58:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) splice(r2, 0x0, r1, 0x0, 0x200000000000fff, 0x0) 12:58:35 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0xffffffffffffffff, 0x0}]) [ 3217.384962][T12596] Bluetooth: hci1: Frame reassembly failed (-84) 12:58:35 executing program 5 (fault-call:2 fault-nth:11): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:58:35 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x7000000}, 0x0) [ 3217.540419][T11834] FAULT_INJECTION: forcing a failure. [ 3217.540419][T11834] name failslab, interval 1, probability 0, space 0, times 0 [ 3217.559660][T11834] CPU: 0 PID: 11834 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3217.570677][T11834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3217.582042][T11834] Call Trace: [ 3217.586199][T11834] dump_stack+0x172/0x1f0 [ 3217.591418][T11834] should_fail.cold+0xa/0x15 [ 3217.596864][T11834] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3217.604215][T11834] ? fault_create_debugfs_attr+0x180/0x180 [ 3217.611913][T11834] ? page_to_nid.part.0+0x20/0x20 [ 3217.617850][T11834] ? ___might_sleep+0x163/0x280 [ 3217.623578][T11834] __should_failslab+0x121/0x190 [ 3217.628909][T11834] should_failslab+0x9/0x14 [ 3217.633986][T11834] kmem_cache_alloc_trace+0x2d3/0x790 [ 3217.641233][T11834] ? kasan_kmalloc+0x9/0x10 [ 3217.647251][T11834] ? __kmalloc+0x351/0x770 [ 3217.652161][T11834] ? mutex_lock_io_nested+0x1260/0x1260 [ 3217.658811][T11834] alloc_workqueue_attrs+0x3d/0xc0 [ 3217.665890][T11834] apply_wqattrs_prepare+0xbe/0x960 [ 3217.672917][T11834] ? lock_acquire+0x190/0x410 [ 3217.678600][T11834] ? alloc_workqueue+0x8d8/0xf40 [ 3217.684658][T11834] apply_workqueue_attrs_locked+0xcf/0x120 [ 3217.691892][T11834] alloc_workqueue+0x8f1/0xf40 [ 3217.698209][T11834] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 3217.705299][T11834] ? kasan_kmalloc+0x9/0x10 [ 3217.710915][T11834] ? kmem_cache_alloc_trace+0x346/0x790 [ 3217.717628][T11834] hci_register_dev+0x1b8/0x8f0 [ 3217.723372][T11834] ? __raw_spin_lock_init+0x2d/0x100 [ 3217.729759][T11834] hci_uart_tty_ioctl+0x87e/0xc00 [ 3217.735565][T11834] tty_ioctl+0xaf9/0x14f0 [ 3217.740413][T11834] ? hci_uart_init_work+0x180/0x180 [ 3217.748721][T11834] ? do_tty_hangup+0x30/0x30 [ 3217.754506][T11834] ? tomoyo_path_number_perm+0x459/0x520 [ 3217.761467][T11834] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3217.769844][T11834] ? tomoyo_path_number_perm+0x263/0x520 [ 3217.776678][T11834] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3217.782660][T11834] ? __kasan_check_read+0x11/0x20 [ 3217.787801][T11834] ? do_tty_hangup+0x30/0x30 [ 3217.792774][T11834] do_vfs_ioctl+0xdb6/0x13e0 [ 3217.798302][T11834] ? ioctl_preallocate+0x210/0x210 [ 3217.806627][T11834] ? __fget+0x384/0x560 [ 3217.816608][T11834] ? ksys_dup3+0x3e0/0x3e0 [ 3217.823987][T11834] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3217.833493][T11834] ? fput_many+0x12c/0x1a0 [ 3217.833515][T11834] ? tomoyo_file_ioctl+0x23/0x30 [ 3217.833542][T11834] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3217.845987][T11834] ? security_file_ioctl+0x8d/0xc0 [ 3217.846004][T11834] ksys_ioctl+0xab/0xd0 [ 3217.846017][T11834] __x64_sys_ioctl+0x73/0xb0 [ 3217.846035][T11834] do_syscall_64+0xfd/0x6a0 [ 3217.846053][T11834] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3217.846065][T11834] RIP: 0033:0x459829 12:58:35 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000000000, 0x0, @remote, 0x9}, 0x1c) [ 3217.846083][T11834] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3217.846090][T11834] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3217.846104][T11834] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3217.846113][T11834] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3217.846129][T11834] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3217.958242][T11834] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3217.970628][T11834] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3217.990702][T11834] Bluetooth: Can't register HCI device [ 3219.451104][ T7114] Bluetooth: hci1: command 0x1003 tx timeout [ 3219.457979][ T6504] Bluetooth: hci1: sending frame failed (-49) [ 3220.331092][ C1] net_ratelimit: 5 callbacks suppressed [ 3220.331102][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3220.981108][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3220.988516][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3221.051029][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3221.058281][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3221.531760][T10778] Bluetooth: hci1: command 0x1001 tx timeout [ 3221.542073][ T6504] Bluetooth: hci1: sending frame failed (-49) [ 3222.411157][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3223.051117][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3223.057979][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3223.131560][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3223.139015][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3223.611103][T10778] Bluetooth: hci1: command 0x1009 tx timeout [ 3226.571119][ C1] net_ratelimit: 5 callbacks suppressed [ 3226.571128][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3227.211086][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3227.218278][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3227.291365][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3227.298431][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:58:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47b") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:58:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x0, 0x0, 0x0, 0xa}, 0xd6395efb82189a3f) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0xfffffffffffffff8, 0x0) setsockopt(r1, 0x0, 0x40, &(0x7f0000000000), 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000000c0)={'filter\x00', 0x91, "2571303ecd192bb6a3b2b1866834db632b989d35fdae59e020ab8cca97c419b4199d86f917dab04afd58e6c56e43e50676a8225e74605c186f2d8773026e32421d8071fe3e02bb2459819cf0efeeda15815d18bd5b7dd9e4dc70f25291dd5dcb36a93eb4513551c3d952bda8a68cefb683068b3e645614af5cf6c6fd4c6a43d78677a86f62bdced21f92cfc0e5c063585d"}, &(0x7f0000000000)=0xb5) 12:58:45 executing program 5 (fault-call:2 fault-nth:12): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:58:45 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0xf00000000000000, 0x0, 0xffffffffffffffff, 0x0}]) 12:58:45 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x9000000}, 0x0) 12:58:45 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x100000000000000, 0x0, @remote, 0x9}, 0x1c) [ 3227.817585][T12257] FAULT_INJECTION: forcing a failure. [ 3227.817585][T12257] name failslab, interval 1, probability 0, space 0, times 0 [ 3227.890382][T12257] CPU: 1 PID: 12257 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3227.898643][T12257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3227.908713][T12257] Call Trace: [ 3227.912041][T12257] dump_stack+0x172/0x1f0 [ 3227.916394][T12257] should_fail.cold+0xa/0x15 [ 3227.921004][T12257] ? fault_create_debugfs_attr+0x180/0x180 [ 3227.926857][T12257] ? page_to_nid.part.0+0x20/0x20 [ 3227.931893][T12257] ? ___might_sleep+0x163/0x280 [ 3227.936767][T12257] __should_failslab+0x121/0x190 [ 3227.941817][T12257] should_failslab+0x9/0x14 [ 3227.946342][T12257] kmem_cache_alloc_node+0x268/0x740 [ 3227.951644][T12257] alloc_unbound_pwq+0x4c5/0xcb0 [ 3227.956632][T12257] apply_wqattrs_prepare+0x354/0x960 [ 3227.961932][T12257] ? alloc_workqueue+0x8d8/0xf40 [ 3227.966888][T12257] apply_workqueue_attrs_locked+0xcf/0x120 [ 3227.972711][T12257] alloc_workqueue+0x8f1/0xf40 [ 3227.977486][T12257] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 3227.977518][T12257] ? kasan_kmalloc+0x9/0x10 12:58:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/146, 0x92}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2002) r2 = dup3(r1, r0, 0x0) writev(r2, &(0x7f0000001680)=[{&(0x7f0000000080)="3997", 0x2}, {&(0x7f00000000c0)="8a79c54adad9d8242282d3d95fa0120f31d0137f047a7676a88e3d96670dd4fbb1e2059d2f05055a9e6278580044b3bf75808bce84161f0cef517ffd6b91d81750cd876a4119cfd48f59e614f4b0c69209168f894e060e37b678fb73426bcc9cc516cf", 0x63}, {0x0}], 0x3) [ 3227.988103][T12257] ? kmem_cache_alloc_trace+0x346/0x790 [ 3227.993664][T12257] hci_register_dev+0x1b8/0x8f0 [ 3227.998538][T12257] ? __raw_spin_lock_init+0x2d/0x100 [ 3228.003848][T12257] hci_uart_tty_ioctl+0x87e/0xc00 [ 3228.009062][T12257] tty_ioctl+0xaf9/0x14f0 [ 3228.013410][T12257] ? hci_uart_init_work+0x180/0x180 [ 3228.018623][T12257] ? do_tty_hangup+0x30/0x30 [ 3228.023257][T12257] ? tomoyo_path_number_perm+0x459/0x520 [ 3228.028900][T12257] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3228.035163][T12257] ? tomoyo_path_number_perm+0x263/0x520 [ 3228.040815][T12257] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3228.046652][T12257] ? __kasan_check_read+0x11/0x20 [ 3228.051696][T12257] ? do_tty_hangup+0x30/0x30 [ 3228.056383][T12257] do_vfs_ioctl+0xdb6/0x13e0 [ 3228.060986][T12257] ? ioctl_preallocate+0x210/0x210 [ 3228.066191][T12257] ? __fget+0x384/0x560 [ 3228.070370][T12257] ? ksys_dup3+0x3e0/0x3e0 [ 3228.074780][T12257] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3228.081020][T12257] ? fput_many+0x12c/0x1a0 [ 3228.085448][T12257] ? tomoyo_file_ioctl+0x23/0x30 [ 3228.090384][T12257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3228.096902][T12257] ? security_file_ioctl+0x8d/0xc0 [ 3228.102098][T12257] ksys_ioctl+0xab/0xd0 [ 3228.106266][T12257] __x64_sys_ioctl+0x73/0xb0 [ 3228.110868][T12257] do_syscall_64+0xfd/0x6a0 [ 3228.116083][T12257] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3228.121984][T12257] RIP: 0033:0x459829 12:58:45 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffff7f7fffffff}]}) r0 = socket$packet(0x11, 0x3, 0x300) recvmsg(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x330}, 0x0) [ 3228.125886][T12257] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3228.146381][T12257] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3228.154819][T12257] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3228.162925][T12257] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3228.170936][T12257] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3228.179099][T12257] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 12:58:45 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0xa000000}, 0x0) 12:58:45 executing program 5 (fault-call:2 fault-nth:13): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:58:45 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x1100000000000000, 0x0, 0xffffffffffffffff, 0x0}]) [ 3228.187093][T12257] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3228.200543][T12257] Bluetooth: Can't register HCI device [ 3228.340293][T12641] FAULT_INJECTION: forcing a failure. [ 3228.340293][T12641] name failslab, interval 1, probability 0, space 0, times 0 [ 3228.382401][T12641] CPU: 0 PID: 12641 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3228.390535][T12641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3228.400705][T12641] Call Trace: [ 3228.404029][T12641] dump_stack+0x172/0x1f0 [ 3228.408391][T12641] should_fail.cold+0xa/0x15 [ 3228.412995][T12641] ? lock_downgrade+0x920/0x920 [ 3228.417864][T12641] ? fault_create_debugfs_attr+0x180/0x180 [ 3228.423688][T12641] ? page_to_nid.part.0+0x20/0x20 [ 3228.428756][T12641] ? ___might_sleep+0x163/0x280 [ 3228.433623][T12641] __should_failslab+0x121/0x190 [ 3228.438576][T12641] should_failslab+0x9/0x14 [ 3228.443092][T12641] __kmalloc+0x2e0/0x770 [ 3228.447351][T12641] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 3228.453140][T12641] ? pwq_adjust_max_active+0x3b6/0x5c0 [ 3228.458626][T12641] ? alloc_workqueue+0x166/0xf40 [ 3228.463572][T12641] alloc_workqueue+0x166/0xf40 [ 3228.463594][T12641] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 3228.463617][T12641] ? kasan_kmalloc+0x9/0x10 12:58:46 executing program 3: syz_emit_ethernet(0x154f49, &(0x7f0000000000)={@local, @random="63bff63490bb", [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300049, 0x0, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 3228.463636][T12641] ? kmem_cache_alloc_trace+0x346/0x790 [ 3228.474213][T12641] hci_register_dev+0x209/0x8f0 [ 3228.474237][T12641] hci_uart_tty_ioctl+0x87e/0xc00 [ 3228.474255][T12641] tty_ioctl+0xaf9/0x14f0 [ 3228.474271][T12641] ? hci_uart_init_work+0x180/0x180 [ 3228.474285][T12641] ? do_tty_hangup+0x30/0x30 [ 3228.474310][T12641] ? tomoyo_path_number_perm+0x459/0x520 [ 3228.514050][T12641] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3228.520279][T12641] ? tomoyo_path_number_perm+0x263/0x520 [ 3228.525896][T12641] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3228.531689][T12641] ? __kasan_check_read+0x11/0x20 [ 3228.536716][T12641] ? do_tty_hangup+0x30/0x30 [ 3228.541305][T12641] do_vfs_ioctl+0xdb6/0x13e0 [ 3228.545888][T12641] ? ioctl_preallocate+0x210/0x210 [ 3228.550997][T12641] ? __fget+0x384/0x560 [ 3228.555146][T12641] ? ksys_dup3+0x3e0/0x3e0 [ 3228.559548][T12641] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3228.565988][T12641] ? fput_many+0x12c/0x1a0 [ 3228.570400][T12641] ? tomoyo_file_ioctl+0x23/0x30 [ 3228.575688][T12641] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3228.581914][T12641] ? security_file_ioctl+0x8d/0xc0 [ 3228.587030][T12641] ksys_ioctl+0xab/0xd0 [ 3228.591204][T12641] __x64_sys_ioctl+0x73/0xb0 [ 3228.595797][T12641] do_syscall_64+0xfd/0x6a0 [ 3228.600341][T12641] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3228.606238][T12641] RIP: 0033:0x459829 [ 3228.610146][T12641] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3228.629765][T12641] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3228.638194][T12641] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3228.646179][T12641] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3228.654160][T12641] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3228.662345][T12641] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3228.670422][T12641] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3228.673831][T12641] Bluetooth: Can't register HCI device [ 3228.678697][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3229.290990][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3229.297052][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3229.370975][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3229.376782][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3230.251075][ T7114] Bluetooth: hci1: command 0x1003 tx timeout [ 3230.257209][ T6504] Bluetooth: hci1: sending frame failed (-49) [ 3232.331143][T10644] Bluetooth: hci1: command 0x1001 tx timeout [ 3232.337570][ T6504] Bluetooth: hci1: sending frame failed (-49) [ 3232.811050][ C1] net_ratelimit: 5 callbacks suppressed [ 3232.816651][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3233.451052][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3233.457255][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3233.531009][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3233.536923][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3234.411001][ T7114] Bluetooth: hci1: command 0x1009 tx timeout [ 3234.891055][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3235.531043][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3235.536970][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3235.611003][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3235.616834][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:58:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf0") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:58:56 executing program 3: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x30, &(0x7f0000a1aff7)={@remote}, 0x14) 12:58:56 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x103000000000000, 0x0, @remote, 0x9}, 0x1c) 12:58:56 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0xe000000}, 0x0) 12:58:56 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0xffffffffffffffff, 0x0}]) 12:58:56 executing program 5 (fault-call:2 fault-nth:14): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 3238.715445][T12915] FAULT_INJECTION: forcing a failure. [ 3238.715445][T12915] name failslab, interval 1, probability 0, space 0, times 0 [ 3238.748474][T12915] CPU: 0 PID: 12915 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3238.756602][T12915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3238.767213][T12915] Call Trace: [ 3238.770608][T12915] dump_stack+0x172/0x1f0 [ 3238.774997][T12915] should_fail.cold+0xa/0x15 [ 3238.779607][T12915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3238.779628][T12915] ? fault_create_debugfs_attr+0x180/0x180 [ 3238.779648][T12915] ? page_to_nid.part.0+0x20/0x20 [ 3238.779667][T12915] ? ___might_sleep+0x163/0x280 [ 3238.779692][T12915] __should_failslab+0x121/0x190 [ 3238.791994][T12915] should_failslab+0x9/0x14 [ 3238.792011][T12915] kmem_cache_alloc_trace+0x2d3/0x790 [ 3238.792031][T12915] ? kasan_kmalloc+0x9/0x10 [ 3238.792043][T12915] ? __kmalloc+0x351/0x770 [ 3238.792061][T12915] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 3238.792081][T12915] alloc_workqueue_attrs+0x3d/0xc0 [ 3238.792102][T12915] alloc_workqueue+0x18b/0xf40 [ 3238.807418][T12915] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 3238.807441][T12915] ? kasan_kmalloc+0x9/0x10 [ 3238.807461][T12915] ? kmem_cache_alloc_trace+0x346/0x790 [ 3238.817452][T12915] hci_register_dev+0x209/0x8f0 12:58:56 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0xffffff7f7fffffff}]}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/72, 0x48) [ 3238.817475][T12915] hci_uart_tty_ioctl+0x87e/0xc00 [ 3238.817494][T12915] tty_ioctl+0xaf9/0x14f0 [ 3238.817509][T12915] ? hci_uart_init_work+0x180/0x180 [ 3238.817528][T12915] ? do_tty_hangup+0x30/0x30 [ 3238.826547][T12915] ? tomoyo_path_number_perm+0x459/0x520 [ 3238.826570][T12915] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3238.826585][T12915] ? tomoyo_path_number_perm+0x263/0x520 [ 3238.826603][T12915] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3238.826632][T12915] ? __kasan_check_read+0x11/0x20 [ 3238.837451][T12915] ? do_tty_hangup+0x30/0x30 [ 3238.837469][T12915] do_vfs_ioctl+0xdb6/0x13e0 [ 3238.837486][T12915] ? ioctl_preallocate+0x210/0x210 [ 3238.837500][T12915] ? __fget+0x384/0x560 [ 3238.837518][T12915] ? ksys_dup3+0x3e0/0x3e0 [ 3238.837546][T12915] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3238.848040][T12915] ? fput_many+0x12c/0x1a0 [ 3238.848060][T12915] ? tomoyo_file_ioctl+0x23/0x30 [ 3238.848077][T12915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3238.848094][T12915] ? security_file_ioctl+0x8d/0xc0 [ 3238.848115][T12915] ksys_ioctl+0xab/0xd0 [ 3238.858147][T12915] __x64_sys_ioctl+0x73/0xb0 [ 3238.858167][T12915] do_syscall_64+0xfd/0x6a0 [ 3238.858187][T12915] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3238.858198][T12915] RIP: 0033:0x459829 [ 3238.858216][T12915] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3238.858237][T12915] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3238.868259][T12915] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3238.868267][T12915] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3238.868275][T12915] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3238.868284][T12915] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3238.868292][T12915] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3238.886672][T12915] Bluetooth: Can't register HCI device 12:58:56 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0xffffffffffffffff, 0x0}]) 12:58:56 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) 12:58:56 executing program 5 (fault-call:2 fault-nth:15): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 3239.058795][ C1] net_ratelimit: 5 callbacks suppressed [ 3239.058803][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:58:56 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xffffffffffffffff, 0x0}]) [ 3239.194364][T13265] FAULT_INJECTION: forcing a failure. [ 3239.194364][T13265] name failslab, interval 1, probability 0, space 0, times 0 [ 3239.207725][T13265] CPU: 1 PID: 13265 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3239.215820][T13265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3239.225902][T13265] Call Trace: [ 3239.229334][T13265] dump_stack+0x172/0x1f0 [ 3239.229363][T13265] should_fail.cold+0xa/0x15 [ 3239.238654][T13265] ? fault_create_debugfs_attr+0x180/0x180 [ 3239.244468][T13265] ? page_to_nid.part.0+0x20/0x20 [ 3239.244487][T13265] ? ___might_sleep+0x163/0x280 [ 3239.244507][T13265] __should_failslab+0x121/0x190 [ 3239.244536][T13265] should_failslab+0x9/0x14 [ 3239.244564][T13265] __kmalloc_track_caller+0x2dc/0x760 [ 3239.273981][T13265] ? pointer+0x750/0x750 [ 3239.278253][T13265] ? widen_string+0x2e0/0x2e0 [ 3239.282946][T13265] ? kasprintf+0xbb/0xf0 [ 3239.287198][T13265] kvasprintf+0xc8/0x170 12:58:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) [ 3239.291451][T13265] ? bust_spinlocks+0xe0/0xe0 [ 3239.296177][T13265] ? page_to_nid.part.0+0x20/0x20 [ 3239.301411][T13265] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3239.307487][T13265] ? find_next_bit+0x107/0x130 [ 3239.312612][T13265] kasprintf+0xbb/0xf0 [ 3239.316695][T13265] ? kvasprintf_const+0x190/0x190 [ 3239.321738][T13265] ? is_module_percpu_address+0xb/0x10 [ 3239.327224][T13265] alloc_workqueue+0x46c/0xf40 [ 3239.332094][T13265] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 3239.337829][T13265] ? kasan_kmalloc+0x9/0x10 [ 3239.342360][T13265] ? kmem_cache_alloc_trace+0x346/0x790 [ 3239.347928][T13265] hci_register_dev+0x209/0x8f0 [ 3239.353059][T13265] hci_uart_tty_ioctl+0x87e/0xc00 [ 3239.353077][T13265] tty_ioctl+0xaf9/0x14f0 [ 3239.353091][T13265] ? hci_uart_init_work+0x180/0x180 [ 3239.353103][T13265] ? do_tty_hangup+0x30/0x30 [ 3239.353120][T13265] ? tomoyo_path_number_perm+0x459/0x520 [ 3239.353140][T13265] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3239.353155][T13265] ? tomoyo_path_number_perm+0x263/0x520 [ 3239.353172][T13265] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3239.353195][T13265] ? __kasan_check_read+0x11/0x20 [ 3239.353215][T13265] ? do_tty_hangup+0x30/0x30 [ 3239.368465][T13265] do_vfs_ioctl+0xdb6/0x13e0 [ 3239.368484][T13265] ? ioctl_preallocate+0x210/0x210 [ 3239.368498][T13265] ? __fget+0x384/0x560 [ 3239.368528][T13265] ? ksys_dup3+0x3e0/0x3e0 [ 3239.424840][T13265] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3239.431098][T13265] ? fput_many+0x12c/0x1a0 [ 3239.435535][T13265] ? tomoyo_file_ioctl+0x23/0x30 [ 3239.440487][T13265] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3239.446839][T13265] ? security_file_ioctl+0x8d/0xc0 [ 3239.451972][T13265] ksys_ioctl+0xab/0xd0 [ 3239.456137][T13265] __x64_sys_ioctl+0x73/0xb0 [ 3239.460744][T13265] do_syscall_64+0xfd/0x6a0 [ 3239.465441][T13265] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3239.471399][T13265] RIP: 0033:0x459829 [ 3239.475774][T13265] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3239.495483][T13265] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3239.503922][T13265] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3239.512262][T13265] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3239.520246][T13265] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3239.528230][T13265] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3239.536236][T13265] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3239.571290][T16957] Bluetooth: hci0: Frame reassembly failed (-84) [ 3239.578934][T16957] Bluetooth: hci0: Frame reassembly failed (-84) [ 3239.691015][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3239.697881][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3239.774641][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3239.782325][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3240.891005][T10644] Bluetooth: hci1: command 0x1003 tx timeout [ 3240.897263][ T6694] Bluetooth: hci1: sending frame failed (-49) [ 3241.131032][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3241.610978][ T7114] Bluetooth: hci0: command 0x1003 tx timeout [ 3241.617144][ T6694] Bluetooth: hci0: sending frame failed (-49) [ 3241.771070][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3241.776880][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3241.850964][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3241.856807][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3242.971011][ T7114] Bluetooth: hci1: command 0x1001 tx timeout [ 3242.977297][ T6694] Bluetooth: hci1: sending frame failed (-49) [ 3243.691062][ T7114] Bluetooth: hci0: command 0x1001 tx timeout [ 3243.697231][ T6694] Bluetooth: hci0: sending frame failed (-49) [ 3245.053342][T10644] Bluetooth: hci1: command 0x1009 tx timeout [ 3245.291044][ C1] net_ratelimit: 5 callbacks suppressed [ 3245.296860][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3245.771690][T10644] Bluetooth: hci0: command 0x1009 tx timeout [ 3245.931033][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3245.936864][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3246.011186][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3246.016997][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3247.371059][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3248.011068][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3248.016917][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3248.090960][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3248.096760][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:59:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf0") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:59:06 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 12:59:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 12:59:06 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0}]) 12:59:06 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x200000000000000, 0x0, @remote, 0x9}, 0x1c) 12:59:06 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0}]) 12:59:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x259, &(0x7f0000000040)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa2830020200a0009000200121d85680c1baba20400057e", 0x24}], 0x1}, 0x0) [ 3248.976317][T16957] Bluetooth: hci1: Frame reassembly failed (-84) 12:59:06 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x14480000}, 0x0) 12:59:06 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x225) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000140)=""/79, &(0x7f00000001c0)=0x4f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000300), 0x7fff) fcntl$getown(r3, 0x9) getgid() getpid() getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000002e40)) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000200)=0xfff, 0x0) 12:59:07 executing program 5 (fault-call:2 fault-nth:16): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:59:07 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0}]) 12:59:07 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x28000000}, 0x0) [ 3250.232947][T14219] FAULT_INJECTION: forcing a failure. [ 3250.232947][T14219] name failslab, interval 1, probability 0, space 0, times 0 [ 3250.247918][T14219] CPU: 1 PID: 14219 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3250.255996][T14219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3250.266086][T14219] Call Trace: [ 3250.269400][T14219] dump_stack+0x172/0x1f0 [ 3250.273734][T14219] should_fail.cold+0xa/0x15 [ 3250.278319][T14219] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3250.284556][T14219] ? fault_create_debugfs_attr+0x180/0x180 [ 3250.290437][T14219] ? page_to_nid.part.0+0x20/0x20 [ 3250.295461][T14219] ? ___might_sleep+0x163/0x280 [ 3250.300306][T14219] __should_failslab+0x121/0x190 [ 3250.305368][T14219] should_failslab+0x9/0x14 [ 3250.309888][T14219] kmem_cache_alloc_trace+0x2d3/0x790 [ 3250.315276][T14219] ? kasan_kmalloc+0x9/0x10 [ 3250.319763][T14219] ? __kmalloc+0x351/0x770 [ 3250.324546][T14219] ? mutex_lock_io_nested+0x1260/0x1260 [ 3250.330083][T14219] ? mark_held_locks+0xf0/0xf0 [ 3250.334853][T14219] alloc_workqueue_attrs+0x3d/0xc0 [ 3250.340559][T14219] apply_wqattrs_prepare+0xb6/0x960 [ 3250.345751][T14219] ? lock_acquire+0x190/0x410 [ 3250.350520][T14219] ? alloc_workqueue+0x8d8/0xf40 [ 3250.355475][T14219] apply_workqueue_attrs_locked+0xcf/0x120 [ 3250.361301][T14219] alloc_workqueue+0x8f1/0xf40 [ 3250.366091][T14219] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 3250.371815][T14219] ? kasan_kmalloc+0x9/0x10 [ 3250.376300][T14219] ? kmem_cache_alloc_trace+0x346/0x790 [ 3250.382027][T14219] hci_register_dev+0x209/0x8f0 [ 3250.386970][T14219] hci_uart_tty_ioctl+0x87e/0xc00 [ 3250.392006][T14219] tty_ioctl+0xaf9/0x14f0 [ 3250.396323][T14219] ? hci_uart_init_work+0x180/0x180 [ 3250.401515][T14219] ? do_tty_hangup+0x30/0x30 [ 3250.406129][T14219] ? tomoyo_path_number_perm+0x459/0x520 [ 3250.411766][T14219] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3250.418471][T14219] ? tomoyo_path_number_perm+0x263/0x520 [ 3250.424120][T14219] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3250.429946][T14219] ? __kasan_check_read+0x11/0x20 [ 3250.434966][T14219] ? do_tty_hangup+0x30/0x30 [ 3250.439909][T14219] do_vfs_ioctl+0xdb6/0x13e0 [ 3250.448180][T14219] ? ioctl_preallocate+0x210/0x210 [ 3250.453309][T14219] ? __fget+0x384/0x560 [ 3250.457465][T14219] ? ksys_dup3+0x3e0/0x3e0 [ 3250.461891][T14219] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3250.468574][T14219] ? fput_many+0x12c/0x1a0 [ 3250.472982][T14219] ? tomoyo_file_ioctl+0x23/0x30 [ 3250.478002][T14219] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3250.484248][T14219] ? security_file_ioctl+0x8d/0xc0 [ 3250.489369][T14219] ksys_ioctl+0xab/0xd0 [ 3250.493571][T14219] __x64_sys_ioctl+0x73/0xb0 [ 3250.498375][T14219] do_syscall_64+0xfd/0x6a0 [ 3250.502891][T14219] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3250.508773][T14219] RIP: 0033:0x459829 [ 3250.512652][T14219] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3250.532240][T14219] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3250.540730][T14219] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3250.549430][T14219] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3250.557397][T14219] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3250.565372][T14219] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3250.573510][T14219] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3250.586083][T14219] Bluetooth: Can't register HCI device [ 3251.050939][ T2058] Bluetooth: hci1: command 0x1003 tx timeout [ 3251.057128][ T6504] Bluetooth: hci1: sending frame failed (-49) [ 3251.531018][ C1] net_ratelimit: 5 callbacks suppressed [ 3251.531024][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3252.171031][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3252.176852][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3252.251001][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3252.256885][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3253.130964][T10778] Bluetooth: hci1: command 0x1001 tx timeout [ 3253.137500][ T6504] Bluetooth: hci1: sending frame failed (-49) [ 3253.611027][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3254.250996][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3254.256859][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3254.330982][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3254.336959][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3255.210997][ T2058] Bluetooth: hci1: command 0x1009 tx timeout [ 3257.771014][ C1] net_ratelimit: 5 callbacks suppressed [ 3257.777935][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3258.411069][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3258.416925][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3258.491015][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3258.497242][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:59:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf0") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:59:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x4000000) recvmmsg(0xffffffffffffff9c, &(0x7f0000008880)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/62, 0x3e}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x10009) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', 0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='status\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) sched_setaffinity(0x0, 0xffffffc1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) syz_genetlink_get_family_id$tipc(0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) sched_rr_get_interval(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000180)={0x1, 0x7, 0x0, 0x200, 0x0, 0x1, 0x4}, 0x0, 0x0, 0x0) lstat(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}, {&(0x7f00000003c0)=""/68, 0x44}], 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0) 12:59:16 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x300000000000000, 0x0, @remote, 0x9}, 0x1c) 12:59:16 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0}]) 12:59:16 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x40000000}, 0x0) 12:59:16 executing program 5 (fault-call:2 fault-nth:17): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 3259.171439][T14297] FAULT_INJECTION: forcing a failure. [ 3259.171439][T14297] name failslab, interval 1, probability 0, space 0, times 0 [ 3259.206218][T14297] CPU: 1 PID: 14297 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3259.214452][T14297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3259.224538][T14297] Call Trace: [ 3259.227852][T14297] dump_stack+0x172/0x1f0 [ 3259.232462][T14297] should_fail.cold+0xa/0x15 [ 3259.237150][T14297] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3259.243406][T14297] ? fault_create_debugfs_attr+0x180/0x180 [ 3259.249229][T14297] ? page_to_nid.part.0+0x20/0x20 [ 3259.254284][T14297] ? ___might_sleep+0x163/0x280 [ 3259.259149][T14297] __should_failslab+0x121/0x190 [ 3259.264192][T14297] should_failslab+0x9/0x14 [ 3259.268811][T14297] kmem_cache_alloc_trace+0x2d3/0x790 [ 3259.274812][T14297] ? kasan_kmalloc+0x9/0x10 [ 3259.279403][T14297] ? __kmalloc+0x351/0x770 [ 3259.284625][T14297] ? mutex_lock_io_nested+0x1260/0x1260 [ 3259.291143][T14297] ? mark_held_locks+0xf0/0xf0 [ 3259.296257][T14297] alloc_workqueue_attrs+0x3d/0xc0 [ 3259.301506][T14297] apply_wqattrs_prepare+0xb6/0x960 [ 3259.306745][T14297] ? lock_acquire+0x190/0x410 [ 3259.312006][T14297] ? alloc_workqueue+0x8d8/0xf40 [ 3259.317048][T14297] apply_workqueue_attrs_locked+0xcf/0x120 [ 3259.322867][T14297] alloc_workqueue+0x8f1/0xf40 [ 3259.327635][T14297] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 3259.333375][T14297] ? kasan_kmalloc+0x9/0x10 [ 3259.337903][T14297] ? kmem_cache_alloc_trace+0x346/0x790 [ 3259.343474][T14297] hci_register_dev+0x209/0x8f0 [ 3259.348438][T14297] hci_uart_tty_ioctl+0x87e/0xc00 [ 3259.353488][T14297] tty_ioctl+0xaf9/0x14f0 [ 3259.358185][T14297] ? hci_uart_init_work+0x180/0x180 [ 3259.363401][T14297] ? do_tty_hangup+0x30/0x30 12:59:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000020000000001, 0x0) execve(0x0, 0x0, &(0x7f0000000500)) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x17f) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) [ 3259.368018][T14297] ? tomoyo_path_number_perm+0x459/0x520 [ 3259.373856][T14297] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3259.380108][T14297] ? tomoyo_path_number_perm+0x263/0x520 [ 3259.386032][T14297] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3259.391876][T14297] ? __kasan_check_read+0x11/0x20 [ 3259.397506][T14297] ? do_tty_hangup+0x30/0x30 [ 3259.402220][T14297] do_vfs_ioctl+0xdb6/0x13e0 [ 3259.402240][T14297] ? ioctl_preallocate+0x210/0x210 [ 3259.402260][T14297] ? __fget+0x384/0x560 [ 3259.412288][T14297] ? ksys_dup3+0x3e0/0x3e0 [ 3259.412304][T14297] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3259.412319][T14297] ? fput_many+0x12c/0x1a0 [ 3259.412337][T14297] ? tomoyo_file_ioctl+0x23/0x30 [ 3259.412352][T14297] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3259.412368][T14297] ? security_file_ioctl+0x8d/0xc0 [ 3259.412384][T14297] ksys_ioctl+0xab/0xd0 [ 3259.412400][T14297] __x64_sys_ioctl+0x73/0xb0 [ 3259.412425][T14297] do_syscall_64+0xfd/0x6a0 [ 3259.462493][T14297] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3259.468594][T14297] RIP: 0033:0x459829 [ 3259.472506][T14297] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3259.495188][T14297] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3259.503700][T14297] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3259.511667][T14297] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 12:59:17 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x60000000}, 0x0) [ 3259.519874][T14297] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3259.528441][T14297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3259.536515][T14297] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3259.553702][T16957] Bluetooth: hci1: Frame reassembly failed (-84) [ 3259.566766][T14297] Bluetooth: Can't register HCI device 12:59:17 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0}]) 12:59:17 executing program 5 (fault-call:2 fault-nth:18): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:59:17 executing program 3: r0 = socket$inet6(0xa, 0x10000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, 0x1c) [ 3259.777457][T14655] FAULT_INJECTION: forcing a failure. [ 3259.777457][T14655] name failslab, interval 1, probability 0, space 0, times 0 [ 3259.801685][T14655] CPU: 1 PID: 14655 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3259.809867][T14655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3259.819945][T14655] Call Trace: 12:59:17 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0}]) [ 3259.819979][T14655] dump_stack+0x172/0x1f0 [ 3259.820009][T14655] should_fail.cold+0xa/0x15 [ 3259.820032][T14655] ? fault_create_debugfs_attr+0x180/0x180 [ 3259.820054][T14655] ? page_to_nid.part.0+0x20/0x20 [ 3259.820075][T14655] ? ___might_sleep+0x163/0x280 [ 3259.820109][T14655] __should_failslab+0x121/0x190 [ 3259.820131][T14655] should_failslab+0x9/0x14 [ 3259.820158][T14655] kmem_cache_alloc+0x2aa/0x710 [ 3259.862858][T14655] __d_alloc+0x2e/0x8c0 [ 3259.867199][T14655] d_alloc+0x4d/0x280 [ 3259.871195][T14655] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3259.877446][T14655] d_alloc_parallel+0xf4/0x1c30 [ 3259.882395][T14655] ? save_stack+0x5c/0x90 [ 3259.886920][T14655] ? mark_held_locks+0xf0/0xf0 [ 3259.891693][T14655] ? __d_lookup_rcu+0x6c0/0x6c0 [ 3259.891715][T14655] ? lockdep_init_map+0x1be/0x6d0 [ 3259.891732][T14655] ? lockdep_init_map+0x1be/0x6d0 [ 3259.891752][T14655] __lookup_slow+0x1ab/0x500 [ 3259.891768][T14655] ? vfs_unlink+0x620/0x620 [ 3259.891787][T14655] ? lookup_dcache+0x23/0x140 [ 3259.891807][T14655] ? d_lookup+0x19e/0x260 [ 3259.891828][T14655] lookup_one_len+0x16d/0x1a0 [ 3259.891848][T14655] ? lookup_one_len_unlocked+0x100/0x100 [ 3259.911410][T14655] ? do_raw_spin_unlock+0x57/0x270 [ 3259.911428][T14655] ? mntput+0x74/0xa0 [ 3259.911509][T14655] start_creating+0xc5/0x1d0 [ 3259.911527][T14655] debugfs_create_dir+0x26/0x380 [ 3259.911553][T14655] hci_register_dev+0x299/0x8f0 [ 3259.960547][T14655] hci_uart_tty_ioctl+0x87e/0xc00 [ 3259.965585][T14655] tty_ioctl+0xaf9/0x14f0 [ 3259.970013][T14655] ? hci_uart_init_work+0x180/0x180 [ 3259.975317][T14655] ? do_tty_hangup+0x30/0x30 [ 3259.979929][T14655] ? tomoyo_path_number_perm+0x459/0x520 [ 3259.985577][T14655] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3259.991832][T14655] ? tomoyo_path_number_perm+0x263/0x520 [ 3260.000906][T14655] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3260.006820][T14655] ? __kasan_check_read+0x11/0x20 [ 3260.011993][T14655] ? do_tty_hangup+0x30/0x30 [ 3260.016860][T14655] do_vfs_ioctl+0xdb6/0x13e0 [ 3260.021467][T14655] ? ioctl_preallocate+0x210/0x210 [ 3260.026716][T14655] ? __fget+0x384/0x560 [ 3260.030882][T14655] ? ksys_dup3+0x3e0/0x3e0 [ 3260.035314][T14655] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3260.041569][T14655] ? fput_many+0x12c/0x1a0 [ 3260.046117][T14655] ? tomoyo_file_ioctl+0x23/0x30 [ 3260.051337][T14655] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3260.057630][T14655] ? security_file_ioctl+0x8d/0xc0 [ 3260.063082][T14655] ksys_ioctl+0xab/0xd0 [ 3260.067258][T14655] __x64_sys_ioctl+0x73/0xb0 [ 3260.072148][T14655] do_syscall_64+0xfd/0x6a0 [ 3260.076927][T14655] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3260.083007][T14655] RIP: 0033:0x459829 [ 3260.086905][T14655] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3260.106782][T14655] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3260.115219][T14655] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3260.123573][T14655] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3260.131553][T14655] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3260.139793][T14655] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3260.139801][T14655] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3260.140042][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3260.491027][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3260.498420][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3260.571080][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3260.577037][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3261.621015][T10644] Bluetooth: hci1: command 0x1003 tx timeout [ 3261.627169][ T6694] Bluetooth: hci1: sending frame failed (-49) [ 3262.171090][T10644] Bluetooth: hci0: command 0x1003 tx timeout [ 3262.178767][ T6694] Bluetooth: hci0: sending frame failed (-49) [ 3263.691031][T10644] Bluetooth: hci1: command 0x1001 tx timeout [ 3263.697175][ T6694] Bluetooth: hci1: sending frame failed (-49) [ 3264.251039][ T2058] Bluetooth: hci0: command 0x1001 tx timeout [ 3264.251438][ C1] net_ratelimit: 5 callbacks suppressed [ 3264.251446][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3264.261200][ T6694] Bluetooth: hci0: sending frame failed (-49) [ 3264.651010][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3264.656873][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3264.731104][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3264.736911][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3265.770983][ T2058] Bluetooth: hci1: command 0x1009 tx timeout [ 3266.331012][ T2058] Bluetooth: hci0: command 0x1009 tx timeout [ 3266.331047][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3266.730988][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3266.736793][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3266.811096][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3266.816960][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:59:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:59:27 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x400000000000000, 0x0, @remote, 0x9}, 0x1c) 12:59:27 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 12:59:27 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0}]) 12:59:27 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000008880)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/62, 0x3e}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x10009) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='status\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) sched_setaffinity(0x0, 0xffffffc1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) syz_genetlink_get_family_id$tipc(0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) sched_rr_get_interval(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgrqup2\x00', 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40), 0x8}) lstat(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0}, {0x0}], 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0) 12:59:27 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x40030000000000}, 0x0) 12:59:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:59:27 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x11, 0xffffffffffffffff, 0x0}]) 12:59:27 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x100000000000000}, 0x0) [ 3270.491019][ C1] net_ratelimit: 5 callbacks suppressed [ 3270.491028][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:59:28 executing program 5 (fault-call:2 fault-nth:19): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:59:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/146, 0x92}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x7}) r1 = syz_open_pts(r0, 0x2002) dup3(r1, r0, 0x0) write(r0, &(0x7f0000000680)='=', 0x1) 12:59:28 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x300, 0xffffffffffffffff, 0x0}]) 12:59:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) [ 3270.716944][T15381] FAULT_INJECTION: forcing a failure. [ 3270.716944][T15381] name failslab, interval 1, probability 0, space 0, times 0 [ 3270.741467][T15381] CPU: 1 PID: 15381 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3270.749681][T15381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3270.759759][T15381] Call Trace: [ 3270.763077][T15381] dump_stack+0x172/0x1f0 [ 3270.767431][T15381] should_fail.cold+0xa/0x15 [ 3270.772036][T15381] ? fault_create_debugfs_attr+0x180/0x180 [ 3270.778006][T15381] ? page_to_nid.part.0+0x20/0x20 [ 3270.783076][T15381] ? ___might_sleep+0x163/0x280 [ 3270.787930][T15381] __should_failslab+0x121/0x190 [ 3270.792883][T15381] should_failslab+0x9/0x14 [ 3270.797391][T15381] kmem_cache_alloc+0x2aa/0x710 [ 3270.802251][T15381] __d_alloc+0x2e/0x8c0 [ 3270.806480][T15381] d_alloc+0x4d/0x280 [ 3270.810461][T15381] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3270.816702][T15381] d_alloc_parallel+0xf4/0x1c30 [ 3270.821559][T15381] ? save_stack+0x5c/0x90 [ 3270.825912][T15381] ? mark_held_locks+0xf0/0xf0 [ 3270.830692][T15381] ? __d_lookup_rcu+0x6c0/0x6c0 [ 3270.835552][T15381] ? lockdep_init_map+0x1be/0x6d0 [ 3270.840649][T15381] ? lockdep_init_map+0x1be/0x6d0 [ 3270.845684][T15381] __lookup_slow+0x1ab/0x500 [ 3270.850269][T15381] ? vfs_unlink+0x620/0x620 [ 3270.854760][T15381] ? lookup_dcache+0x23/0x140 [ 3270.859427][T15381] ? d_lookup+0x19e/0x260 [ 3270.863752][T15381] lookup_one_len+0x16d/0x1a0 [ 3270.868415][T15381] ? lookup_one_len_unlocked+0x100/0x100 [ 3270.874061][T15381] ? do_raw_spin_unlock+0x57/0x270 [ 3270.879160][T15381] ? mntput+0x74/0xa0 [ 3270.883128][T15381] start_creating+0xc5/0x1d0 [ 3270.887703][T15381] debugfs_create_dir+0x26/0x380 [ 3270.892642][T15381] hci_register_dev+0x299/0x8f0 [ 3270.897539][T15381] hci_uart_tty_ioctl+0x87e/0xc00 [ 3270.902562][T15381] tty_ioctl+0xaf9/0x14f0 [ 3270.906880][T15381] ? hci_uart_init_work+0x180/0x180 [ 3270.912065][T15381] ? do_tty_hangup+0x30/0x30 [ 3270.916662][T15381] ? tomoyo_path_number_perm+0x459/0x520 [ 3270.922369][T15381] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3270.928592][T15381] ? tomoyo_path_number_perm+0x263/0x520 [ 3270.934232][T15381] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3270.940046][T15381] ? __kasan_check_read+0x11/0x20 [ 3270.945057][T15381] ? do_tty_hangup+0x30/0x30 [ 3270.949630][T15381] do_vfs_ioctl+0xdb6/0x13e0 [ 3270.954226][T15381] ? ioctl_preallocate+0x210/0x210 [ 3270.959336][T15381] ? __fget+0x384/0x560 [ 3270.963486][T15381] ? ksys_dup3+0x3e0/0x3e0 [ 3270.967895][T15381] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3270.974121][T15381] ? fput_many+0x12c/0x1a0 [ 3270.978612][T15381] ? tomoyo_file_ioctl+0x23/0x30 [ 3270.983566][T15381] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3270.989818][T15381] ? security_file_ioctl+0x8d/0xc0 [ 3270.995378][T15381] ksys_ioctl+0xab/0xd0 [ 3270.999517][T15381] __x64_sys_ioctl+0x73/0xb0 [ 3271.004106][T15381] do_syscall_64+0xfd/0x6a0 [ 3271.009080][T15381] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3271.014981][T15381] RIP: 0033:0x459829 [ 3271.018881][T15381] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3271.038735][T15381] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3271.048262][T15381] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3271.056400][T15381] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3271.064359][T15381] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3271.072401][T15381] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3271.080515][T15381] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3271.089026][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3271.091085][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3271.095036][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3271.100721][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3271.122358][T15668] Bluetooth: hci0: Frame reassembly failed (-84) 12:59:28 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x500000000000000, 0x0, @remote, 0x9}, 0x1c) 12:59:28 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x200000000000000}, 0x0) 12:59:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:59:28 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000140)=""/142) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x10}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:59:28 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x500, 0xffffffffffffffff, 0x0}]) 12:59:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:59:28 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sendfile(r0, r1, 0x0, 0x80000001) 12:59:28 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x700, 0xffffffffffffffff, 0x0}]) [ 3272.571010][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3273.131132][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3273.136947][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3273.141069][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3273.148966][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3273.155295][ T2058] Bluetooth: hci0: command 0x1003 tx timeout [ 3273.161414][T24945] Bluetooth: hci0: sending frame failed (-49) [ 3275.221072][T10644] Bluetooth: hci0: command 0x1001 tx timeout [ 3275.227176][T24945] Bluetooth: hci0: sending frame failed (-49) [ 3276.731004][ C1] net_ratelimit: 5 callbacks suppressed [ 3276.736611][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3277.290995][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3277.291042][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3277.296856][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3277.302594][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3277.314119][ T2058] Bluetooth: hci0: command 0x1009 tx timeout [ 3278.811085][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3279.371028][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3279.371056][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3279.377028][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3280.890989][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:59:39 executing program 5 (fault-call:2 fault-nth:20): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:59:39 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x300000000000000}, 0x0) 12:59:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)) getdents(r0, 0x0, 0x0) 12:59:39 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0xf00, 0xffffffffffffffff, 0x0}]) 12:59:39 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x600000000000000, 0x0, @remote, 0x9}, 0x1c) 12:59:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:59:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 12:59:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x4) [ 3281.618956][T15972] FAULT_INJECTION: forcing a failure. [ 3281.618956][T15972] name failslab, interval 1, probability 0, space 0, times 0 12:59:39 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x1100, 0xffffffffffffffff, 0x0}]) [ 3281.716951][T15972] CPU: 0 PID: 15972 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3281.726043][T15972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3281.726049][T15972] Call Trace: [ 3281.726081][T15972] dump_stack+0x172/0x1f0 [ 3281.726109][T15972] should_fail.cold+0xa/0x15 [ 3281.726129][T15972] ? fault_create_debugfs_attr+0x180/0x180 [ 3281.726153][T15972] ? page_to_nid.part.0+0x20/0x20 [ 3281.726180][T15972] ? ___might_sleep+0x163/0x280 [ 3281.766134][T15972] __should_failslab+0x121/0x190 [ 3281.771112][T15972] should_failslab+0x9/0x14 [ 3281.771128][T15972] kmem_cache_alloc+0x2aa/0x710 [ 3281.771146][T15972] ? lookup_one_len+0x10e/0x1a0 [ 3281.771161][T15972] ? lookup_one_len_unlocked+0x100/0x100 [ 3281.771179][T15972] alloc_inode+0x16f/0x1e0 [ 3281.771193][T15972] new_inode_pseudo+0x19/0xf0 [ 3281.771206][T15972] new_inode+0x1f/0x40 [ 3281.771222][T15972] debugfs_get_inode+0x1a/0x130 [ 3281.771241][T15972] debugfs_create_dir+0x7a/0x380 [ 3281.816239][T15972] hci_register_dev+0x299/0x8f0 [ 3281.821206][T15972] hci_uart_tty_ioctl+0x87e/0xc00 [ 3281.826772][T15972] tty_ioctl+0xaf9/0x14f0 [ 3281.831116][T15972] ? hci_uart_init_work+0x180/0x180 [ 3281.836329][T15972] ? do_tty_hangup+0x30/0x30 [ 3281.840937][T15972] ? tomoyo_path_number_perm+0x459/0x520 [ 3281.846581][T15972] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3281.852842][T15972] ? tomoyo_path_number_perm+0x263/0x520 [ 3281.858857][T15972] ? tomoyo_execute_permission+0x4a0/0x4a0 12:59:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000240)={0xfffffffffffffffe, 0x9}) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100001a0001000000000000000000e0000001000000000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00400080000000000000000000000000000005ffdea003c00000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00020000000000000000000e00000000000000000000000000003b7d77102b3ee6a5844e1edac5cc3084bd929aeaa9f9b786d4b1eb9abba1a35ee49cdf16b1ef4a0a6d835a232c37db74a5a8055aff7c499750bd8baf42dbf98f6999f80234a6f2b4282c60a8bea72bbacb0fd5ac91fb035a69a084f2de4c12a3dfa4"], 0x104}}, 0x0) [ 3281.864690][T15972] ? __kasan_check_read+0x11/0x20 [ 3281.869760][T15972] ? do_tty_hangup+0x30/0x30 [ 3281.874362][T15972] do_vfs_ioctl+0xdb6/0x13e0 [ 3281.874381][T15972] ? ioctl_preallocate+0x210/0x210 [ 3281.874401][T15972] ? __fget+0x384/0x560 [ 3281.884096][T15972] ? ksys_dup3+0x3e0/0x3e0 [ 3281.884113][T15972] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3281.884129][T15972] ? fput_many+0x12c/0x1a0 [ 3281.884148][T15972] ? tomoyo_file_ioctl+0x23/0x30 [ 3281.884164][T15972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 12:59:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x4) [ 3281.884182][T15972] ? security_file_ioctl+0x8d/0xc0 [ 3281.884200][T15972] ksys_ioctl+0xab/0xd0 [ 3281.924159][T15972] __x64_sys_ioctl+0x73/0xb0 [ 3281.928768][T15972] do_syscall_64+0xfd/0x6a0 [ 3281.933294][T15972] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3281.939496][T15972] RIP: 0033:0x459829 [ 3281.943415][T15972] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3281.969059][T15972] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3281.977480][T15972] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3281.985461][T15972] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3281.985470][T15972] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3281.985477][T15972] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3281.985484][T15972] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 12:59:39 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x400000000000000}, 0x0) [ 3281.990165][T16149] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3282.041089][T15972] debugfs: out of free dentries, can not create directory 'hci0' [ 3282.073184][T16957] Bluetooth: hci0: Frame reassembly failed (-84) [ 3282.970989][ C1] net_ratelimit: 4 callbacks suppressed [ 3282.970995][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3283.530998][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3283.531030][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3283.536856][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3284.101068][T10644] Bluetooth: hci0: command 0x1003 tx timeout [ 3284.107200][T24945] Bluetooth: hci0: sending frame failed (-49) [ 3285.051380][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3285.611071][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3285.611122][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3285.617243][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3285.622980][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3286.171094][ T7114] Bluetooth: hci0: command 0x1001 tx timeout [ 3286.177254][T24945] Bluetooth: hci0: sending frame failed (-49) [ 3287.131002][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3288.250985][T10644] Bluetooth: hci0: command 0x1009 tx timeout [ 3289.211015][ C1] net_ratelimit: 4 callbacks suppressed [ 3289.216669][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3289.771027][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3289.771055][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3289.776864][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3289.782586][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3291.291049][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3291.851000][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3291.851066][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3291.856801][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:59:50 executing program 5 (fault-call:2 fault-nth:21): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:59:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:59:50 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x3f00, 0xffffffffffffffff, 0x0}]) 12:59:50 executing program 3: mkdir(&(0x7f00000001c0)='./control\x00', 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)={0x4, 0x5}) chdir(&(0x7f0000000140)='./control\x00') symlink(&(0x7f0000000200)='./control\x00', &(0x7f0000000240)='./control\x00') getpid() 12:59:50 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x700000000000000}, 0x0) 12:59:50 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x700000000000000, 0x0, @remote, 0x9}, 0x1c) [ 3292.509261][T16529] FAULT_INJECTION: forcing a failure. [ 3292.509261][T16529] name failslab, interval 1, probability 0, space 0, times 0 [ 3292.523825][T16529] CPU: 0 PID: 16529 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3292.531919][T16529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3292.541979][T16529] Call Trace: [ 3292.545299][T16529] dump_stack+0x172/0x1f0 [ 3292.550180][T16529] should_fail.cold+0xa/0x15 [ 3292.554876][T16529] ? fault_create_debugfs_attr+0x180/0x180 [ 3292.560703][T16529] ? page_to_nid.part.0+0x20/0x20 [ 3292.565737][T16529] ? ___might_sleep+0x163/0x280 [ 3292.570645][T16529] __should_failslab+0x121/0x190 [ 3292.575946][T16529] should_failslab+0x9/0x14 [ 3292.580570][T16529] __kmalloc_track_caller+0x2dc/0x760 [ 3292.586071][T16529] ? __d_instantiate+0x383/0x470 [ 3292.591037][T16529] ? kstrdup_const+0x66/0x80 [ 3292.595639][T16529] kstrdup+0x3a/0x70 [ 3292.599581][T16529] kstrdup_const+0x66/0x80 [ 3292.604029][T16529] kvasprintf_const+0x10e/0x190 12:59:50 executing program 3: bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x11c, &(0x7f0000000000)) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x28, 0x0, 0x95, 0xfaa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffff8, 0x4c, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000440)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000080)=0x5, 0x8) dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 3292.604053][T16529] kobject_set_name_vargs+0x5b/0x150 [ 3292.604089][T16529] dev_set_name+0xbb/0xf0 [ 3292.614199][T16529] ? device_initialize+0x460/0x460 [ 3292.614223][T16529] ? __kasan_check_write+0x14/0x20 [ 3292.628737][T16529] ? up_write+0x9d/0x280 [ 3292.633042][T16529] hci_register_dev+0x2e0/0x8f0 [ 3292.637921][T16529] hci_uart_tty_ioctl+0x87e/0xc00 [ 3292.642982][T16529] tty_ioctl+0xaf9/0x14f0 [ 3292.647346][T16529] ? hci_uart_init_work+0x180/0x180 [ 3292.652559][T16529] ? do_tty_hangup+0x30/0x30 [ 3292.657167][T16529] ? tomoyo_path_number_perm+0x459/0x520 [ 3292.662825][T16529] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3292.669081][T16529] ? tomoyo_path_number_perm+0x263/0x520 [ 3292.674733][T16529] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3292.680590][T16529] ? __kasan_check_read+0x11/0x20 [ 3292.685662][T16529] ? do_tty_hangup+0x30/0x30 [ 3292.690270][T16529] do_vfs_ioctl+0xdb6/0x13e0 [ 3292.694874][T16529] ? ioctl_preallocate+0x210/0x210 [ 3292.699996][T16529] ? __fget+0x384/0x560 [ 3292.704169][T16529] ? ksys_dup3+0x3e0/0x3e0 [ 3292.708597][T16529] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3292.714943][T16529] ? fput_many+0x12c/0x1a0 [ 3292.719405][T16529] ? tomoyo_file_ioctl+0x23/0x30 [ 3292.724388][T16529] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3292.730772][T16529] ? security_file_ioctl+0x8d/0xc0 [ 3292.735894][T16529] ksys_ioctl+0xab/0xd0 [ 3292.740063][T16529] __x64_sys_ioctl+0x73/0xb0 [ 3292.744730][T16529] do_syscall_64+0xfd/0x6a0 [ 3292.749262][T16529] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3292.755170][T16529] RIP: 0033:0x459829 [ 3292.759080][T16529] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3292.778701][T16529] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3292.787121][T16529] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3292.795100][T16529] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 12:59:50 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x4000, 0xffffffffffffffff, 0x0}]) 12:59:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:59:50 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x900000000000000}, 0x0) [ 3292.803164][T16529] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3292.811321][T16529] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3292.819299][T16529] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 12:59:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 12:59:50 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0xffffffffffffffff, 0x0}]) [ 3292.971451][T16529] Bluetooth: Can't register HCI device 12:59:50 executing program 5 (fault-call:2 fault-nth:22): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:59:50 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0xa00000000000000}, 0x0) 12:59:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r1, 0x400455c8, 0x4) [ 3293.167850][T16802] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 3293.176748][T16802] FAULT_INJECTION: forcing a failure. [ 3293.176748][T16802] name failslab, interval 1, probability 0, space 0, times 0 [ 3293.208886][T16802] CPU: 1 PID: 16802 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3293.217080][T16802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3293.227445][T16802] Call Trace: [ 3293.230769][T16802] dump_stack+0x172/0x1f0 [ 3293.235126][T16802] should_fail.cold+0xa/0x15 [ 3293.239713][T16802] ? get_device_parent.isra.0+0xcb/0x560 [ 3293.245522][T16802] ? fault_create_debugfs_attr+0x180/0x180 [ 3293.251513][T16802] ? page_to_nid.part.0+0x20/0x20 12:59:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) [ 3293.256736][T16802] ? ___might_sleep+0x163/0x280 [ 3293.261876][T16802] __should_failslab+0x121/0x190 [ 3293.267426][T16802] should_failslab+0x9/0x14 [ 3293.272211][T16802] kmem_cache_alloc_trace+0x2d3/0x790 [ 3293.277673][T16802] ? __kasan_check_read+0x11/0x20 [ 3293.282918][T16802] ? do_raw_spin_unlock+0x57/0x270 [ 3293.288023][T16802] get_device_parent.isra.0+0x34c/0x560 [ 3293.293714][T16802] device_add+0x2df/0x17a0 [ 3293.293725][T16802] ? get_device_parent.isra.0+0x560/0x560 [ 3293.293734][T16802] ? start_creating+0x116/0x1d0 12:59:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) [ 3293.293745][T16802] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3293.293756][T16802] hci_register_dev+0x2e8/0x8f0 [ 3293.293784][T16802] hci_uart_tty_ioctl+0x87e/0xc00 [ 3293.293799][T16802] tty_ioctl+0xaf9/0x14f0 [ 3293.329604][T16802] ? hci_uart_init_work+0x180/0x180 [ 3293.334810][T16802] ? do_tty_hangup+0x30/0x30 [ 3293.339645][T16802] ? tomoyo_path_number_perm+0x459/0x520 [ 3293.345326][T16802] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3293.351778][T16802] ? tomoyo_path_number_perm+0x263/0x520 [ 3293.357551][T16802] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3293.363428][T16802] ? __kasan_check_read+0x11/0x20 [ 3293.368456][T16802] ? do_tty_hangup+0x30/0x30 [ 3293.373581][T16802] do_vfs_ioctl+0xdb6/0x13e0 [ 3293.378341][T16802] ? ioctl_preallocate+0x210/0x210 [ 3293.384925][T16802] ? __fget+0x384/0x560 [ 3293.389074][T16802] ? ksys_dup3+0x3e0/0x3e0 [ 3293.393887][T16802] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3293.400327][T16802] ? fput_many+0x12c/0x1a0 [ 3293.404738][T16802] ? tomoyo_file_ioctl+0x23/0x30 [ 3293.410035][T16802] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3293.416266][T16802] ? security_file_ioctl+0x8d/0xc0 [ 3293.421372][T16802] ksys_ioctl+0xab/0xd0 [ 3293.425517][T16802] __x64_sys_ioctl+0x73/0xb0 [ 3293.430606][T16802] do_syscall_64+0xfd/0x6a0 [ 3293.435718][T16802] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3293.442008][T16802] RIP: 0033:0x459829 [ 3293.446131][T16802] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3293.466403][T16802] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3293.475069][T16802] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3293.483308][T16802] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3293.491704][T16802] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3293.491710][T16802] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3293.491715][T16802] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3293.492054][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3293.525082][T16802] Bluetooth: Can't register HCI device 12:59:51 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x2000000, 0xffffffffffffffff, 0x0}]) 12:59:51 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) gettid() ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0xfd) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff, 0x0, 0x26}) 12:59:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 12:59:51 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0xe00000000000000}, 0x0) 12:59:51 executing program 5 (fault-call:2 fault-nth:23): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:59:51 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x800000000000000, 0x0, @remote, 0x9}, 0x1c) 12:59:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) [ 3293.664255][T17132] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 3293.691418][T17132] FAULT_INJECTION: forcing a failure. [ 3293.691418][T17132] name failslab, interval 1, probability 0, space 0, times 0 [ 3293.704330][T17132] CPU: 0 PID: 17132 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3293.712533][T17132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3293.712537][T17132] Call Trace: [ 3293.712557][T17132] dump_stack+0x172/0x1f0 [ 3293.712573][T17132] should_fail.cold+0xa/0x15 [ 3293.712583][T17132] ? fault_create_debugfs_attr+0x180/0x180 [ 3293.712594][T17132] ? stack_trace_save+0xac/0xe0 [ 3293.712607][T17132] __should_failslab+0x121/0x190 [ 3293.712628][T17132] should_failslab+0x9/0x14 [ 3293.712644][T17132] kmem_cache_alloc+0x47/0x710 [ 3293.760721][T17132] ? save_stack+0x5c/0x90 [ 3293.765098][T17132] ? save_stack+0x23/0x90 [ 3293.770090][T17132] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 3293.776344][T17132] ? kasan_slab_alloc+0xf/0x20 [ 3293.781228][T17132] radix_tree_node_alloc.constprop.0+0x1eb/0x340 [ 3293.788733][T17132] idr_get_free+0x48e/0x8c0 [ 3293.794034][T17132] idr_alloc_u32+0x19e/0x330 [ 3293.799323][T17132] ? __fprop_inc_percpu_max+0x230/0x230 [ 3293.805025][T17132] ? mark_held_locks+0xf0/0xf0 [ 3293.809790][T17132] ? page_to_nid.part.0+0x20/0x20 [ 3293.815277][T17132] idr_alloc_cyclic+0x132/0x270 [ 3293.820241][T17132] ? idr_alloc+0x150/0x150 [ 3293.824882][T17132] __kernfs_new_node+0x172/0x6c0 [ 3293.829865][T17132] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 3293.835604][T17132] ? debug_smp_processor_id+0x3c/0x214 [ 3293.842450][T17132] ? tick_nohz_tick_stopped+0x1a/0x90 [ 3293.848023][T17132] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3293.854795][T17132] ? __irq_work_queue_local+0xaf/0x170 [ 3293.860252][T17132] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3293.866535][T17132] ? irq_work_queue+0x30/0x90 [ 3293.871262][T17132] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3293.877618][T17132] ? wake_up_klogd+0x99/0xd0 [ 3293.882216][T17132] kernfs_new_node+0x96/0x120 [ 3293.886891][T17132] kernfs_create_dir_ns+0x52/0x160 [ 3293.892087][T17132] sysfs_create_dir_ns+0x136/0x290 [ 3293.897300][T17132] ? sysfs_create_mount_point+0xa0/0xa0 [ 3293.902844][T17132] ? kobject_add_internal+0x177/0x380 [ 3293.908541][T17132] kobject_add_internal.cold+0x116/0x662 [ 3293.914428][T17132] kobject_add+0x150/0x1c0 [ 3293.918957][T17132] ? kset_create_and_add+0x1a0/0x1a0 [ 3293.924235][T17132] ? kasan_kmalloc+0x9/0x10 [ 3293.928818][T17132] ? kmem_cache_alloc_trace+0x346/0x790 [ 3293.934361][T17132] get_device_parent.isra.0+0x413/0x560 [ 3293.939909][T17132] device_add+0x2df/0x17a0 [ 3293.945211][T17132] ? get_device_parent.isra.0+0x560/0x560 [ 3293.951669][T17132] ? start_creating+0x116/0x1d0 [ 3293.959233][T17132] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3293.971677][T17132] hci_register_dev+0x2e8/0x8f0 [ 3293.976531][T17132] hci_uart_tty_ioctl+0x87e/0xc00 [ 3293.981644][T17132] tty_ioctl+0xaf9/0x14f0 [ 3293.986592][T17132] ? hci_uart_init_work+0x180/0x180 [ 3293.992008][T17132] ? do_tty_hangup+0x30/0x30 [ 3293.996943][T17132] ? tomoyo_path_number_perm+0x459/0x520 [ 3294.004082][T17132] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3294.010624][T17132] ? tomoyo_path_number_perm+0x263/0x520 [ 3294.016683][T17132] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3294.022496][T17132] ? __kasan_check_read+0x11/0x20 [ 3294.027616][T17132] ? do_tty_hangup+0x30/0x30 [ 3294.032516][T17132] do_vfs_ioctl+0xdb6/0x13e0 [ 3294.037613][T17132] ? ioctl_preallocate+0x210/0x210 [ 3294.042841][T17132] ? __fget+0x384/0x560 [ 3294.046995][T17132] ? ksys_dup3+0x3e0/0x3e0 [ 3294.051504][T17132] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3294.058200][T17132] ? fput_many+0x12c/0x1a0 [ 3294.062610][T17132] ? tomoyo_file_ioctl+0x23/0x30 [ 3294.067870][T17132] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3294.074540][T17132] ? security_file_ioctl+0x8d/0xc0 [ 3294.079700][T17132] ksys_ioctl+0xab/0xd0 [ 3294.083977][T17132] __x64_sys_ioctl+0x73/0xb0 [ 3294.088860][T17132] do_syscall_64+0xfd/0x6a0 [ 3294.093402][T17132] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3294.099629][T17132] RIP: 0033:0x459829 [ 3294.103687][T17132] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3294.123619][T17132] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3294.132026][T17132] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3294.140558][T17132] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3294.148667][T17132] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3294.156688][T17132] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 12:59:51 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x1000000000000000}, 0x0) 12:59:51 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x5) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0xe21}, 0x10) r2 = dup(r1) r3 = socket$inet(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000eed000)={0x2, 0x4e21, @dev}, 0x10) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') sendfile(r0, r2, 0x0, 0x1000003) [ 3294.165257][T17132] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3294.185071][T15668] Bluetooth: hci0: Frame reassembly failed (-84) 12:59:51 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x3000000, 0xffffffffffffffff, 0x0}]) 12:59:51 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x1100000000000000}, 0x0) 12:59:51 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x4000000, 0xffffffffffffffff, 0x0}]) 12:59:52 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000440)=@ipx, 0x17, 0x0, 0x100000174}}], 0x117, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x5000000, 0xffffffffffffffff, 0x0}]) 12:59:52 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x900000000000000, 0x0, @remote, 0x9}, 0x1c) [ 3295.531015][ C1] net_ratelimit: 4 callbacks suppressed [ 3295.531023][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3296.251032][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3296.251038][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3296.251120][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3296.256870][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3296.262841][ T7114] Bluetooth: hci0: command 0x1003 tx timeout [ 3296.268634][T10778] Bluetooth: hci1: command 0x1003 tx timeout [ 3296.282687][ T6694] Bluetooth: hci0: sending frame failed (-49) [ 3296.286323][T28866] Bluetooth: hci1: sending frame failed (-49) [ 3297.611036][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3298.331063][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3298.331426][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3298.336887][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3298.342621][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3298.348682][ T7114] Bluetooth: hci0: command 0x1001 tx timeout [ 3298.354585][T10778] Bluetooth: hci1: command 0x1001 tx timeout [ 3298.364443][T28866] Bluetooth: hci0: sending frame failed (-49) [ 3298.366532][ T6694] Bluetooth: hci1: sending frame failed (-49) [ 3300.411246][ T7114] Bluetooth: hci1: command 0x1009 tx timeout [ 3300.417316][ T7114] Bluetooth: hci0: command 0x1009 tx timeout [ 3301.771048][ C1] net_ratelimit: 5 callbacks suppressed [ 3301.776673][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3302.491024][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3302.491355][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3302.496856][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3302.502617][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3303.851045][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:00:02 executing program 5 (fault-call:2 fault-nth:24): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 13:00:02 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x2800000000000000}, 0x0) 13:00:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 13:00:02 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x7000000, 0xffffffffffffffff, 0x0}]) 13:00:02 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x20000000003c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x80000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r1, 0x0, 0xff0, 0xe5, &(0x7f0000002340)="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", &(0x7f0000000740)=""/229, 0xffff}, 0x28) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000100)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4) sched_getaffinity(0x0, 0x8, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x21}, 0x6, 0x1, 0xff, 0x9, 0x2, 0x8}, 0x20) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000280)={0x2, 0x1}) syz_open_dev$audion(0x0, 0x1, 0x220003) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value, 0x8) membarrier(0x9, 0x0) memfd_create(0x0, 0x4) removexattr(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)=@random={'security.', 'fuse\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r6 = getpid() sched_setscheduler(r6, 0x7, &(0x7f00000002c0)=0x5) sendfile(r4, r5, 0x0, 0x2808) mount$fuse(0x0, 0x0, &(0x7f0000000740)='fuse\x00', 0x10, 0x0) execve(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) 13:00:02 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xa00000000000000, 0x0, @remote, 0x9}, 0x1c) [ 3304.571049][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3304.571055][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3304.571122][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3304.576898][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:00:02 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x8000000, 0xffffffffffffffff, 0x0}]) [ 3304.719313][T18110] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 3304.733464][T12596] Bluetooth: hci1: Frame reassembly failed (-84) [ 3304.751963][T18110] FAULT_INJECTION: forcing a failure. [ 3304.751963][T18110] name failslab, interval 1, probability 0, space 0, times 0 [ 3304.774677][T18110] CPU: 0 PID: 18110 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3304.783410][T18110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3304.793744][T18110] Call Trace: [ 3304.797081][T18110] dump_stack+0x172/0x1f0 [ 3304.801442][T18110] should_fail.cold+0xa/0x15 [ 3304.806061][T18110] ? fault_create_debugfs_attr+0x180/0x180 [ 3304.811892][T18110] ? page_to_nid.part.0+0x20/0x20 [ 3304.816936][T18110] ? ___might_sleep+0x163/0x280 [ 3304.821798][T18110] __should_failslab+0x121/0x190 [ 3304.826748][T18110] should_failslab+0x9/0x14 [ 3304.831279][T18110] kmem_cache_alloc+0x2aa/0x710 [ 3304.836171][T18110] ? mutex_unlock+0xd/0x10 [ 3304.840604][T18110] __kernfs_new_node+0xf0/0x6c0 [ 3304.845496][T18110] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3304.845545][T18110] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 3304.857233][T18110] ? perf_trace_lock_acquire+0xf5/0x530 [ 3304.862798][T18110] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3304.862821][T18110] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 3304.862836][T18110] ? __kasan_check_read+0x11/0x20 [ 3304.862851][T18110] ? __kasan_check_write+0x14/0x20 [ 3304.862870][T18110] kernfs_new_node+0x96/0x120 [ 3304.862895][T18110] kernfs_create_link+0xd7/0x250 [ 3304.880336][T18110] sysfs_do_create_link_sd.isra.0+0x90/0x130 [ 3304.880354][T18110] sysfs_create_link+0x65/0xc0 [ 3304.880371][T18110] device_add+0x635/0x17a0 [ 3304.880390][T18110] ? get_device_parent.isra.0+0x560/0x560 [ 3304.880412][T18110] ? start_creating+0x116/0x1d0 13:00:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0xffff, 0x2, 0x3}) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) socket$isdn_base(0x22, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x80000000, 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="b7000000070000000b00000040b2a80c3894730e1db38c82645742cc4b48c87e094290f080120000000000000007e7bb9e78c0723cf01ae1161374be53cae76f19cb09273a94c27c2ed3fc8d9da2a3922838e51c3e686d6a0addea8dadf2d10807a07ecc0dadc31c7d43f951da3af75748f401e3ffa353e245ae3b43bec3f3190a8b99bb6fffd10ec4198f2346bd6613b665fc6ad641a9e1254a79b3ba030631d3d537206d175b816454f7d57539b8cc7b2de9136a953a9c00"/197]) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000640)={0xb, @sliced={0x0, [0x4, 0x8, 0x80000000, 0x0, 0x80000001, 0x4, 0x9, 0x5, 0x2, 0x0, 0xc7, 0x5, 0x8, 0x7fff, 0x0, 0x80000000, 0x0, 0x40, 0x7, 0x0, 0x68, 0x0, 0x0, 0x0, 0x4, 0x4, 0x9, 0x1, 0x0, 0x0, 0x2, 0x4, 0x0, 0x6, 0x5, 0x3, 0x46c, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x23, 0x100000001, 0x81], 0x9}}) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x200000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000080)={0xca81, 0x2c, 0xfffffffffffffff8, 0x7f}, 0x10) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000fe0000000002004e24ac14142a000000000000000000000000000000000000000000000000001f000000000000000000000000000d00000000facdc20632733a8b3b0a910000000000000000000000000000000000000000000000004500000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000400000002004e21ac1414f225000000000000000000000000000000000000000000000000000000000000972b4caae550b55c00000000000000004cfe713919a93a1d000000000000000000000000000000000000002a1e7947f5fc33555f5ea49800000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b9d221ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f995537e9e2315b60000000000000000000000009f4200000000000000000000000000000000000002004e24e0000002000000000000000000000000000000000000200000000000000000000000000000000000000000009398ccfa00000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000034c691599d8d2a257a099edd6cd4d2b7e10f1b2c932aea85e23c3766aff75c2b9eb9561e68194a7747ead754208ed56e53d7f2a658321a30039f8e449b3f95cfdcebe7355e1200000000000000"], 0x290) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000140), 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f00000005c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x14) [ 3304.890550][T18110] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3304.890572][T18110] hci_register_dev+0x2e8/0x8f0 [ 3304.890595][T18110] hci_uart_tty_ioctl+0x87e/0xc00 [ 3304.890616][T18110] tty_ioctl+0xaf9/0x14f0 [ 3304.890635][T18110] ? hci_uart_init_work+0x180/0x180 [ 3304.947388][T18110] ? do_tty_hangup+0x30/0x30 [ 3304.947408][T18110] ? tomoyo_path_number_perm+0x459/0x520 [ 3304.947430][T18110] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3304.947446][T18110] ? tomoyo_path_number_perm+0x263/0x520 [ 3304.947464][T18110] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3304.947487][T18110] ? __kasan_check_read+0x11/0x20 [ 3304.957711][T18110] ? do_tty_hangup+0x30/0x30 [ 3304.957729][T18110] do_vfs_ioctl+0xdb6/0x13e0 [ 3304.957747][T18110] ? ioctl_preallocate+0x210/0x210 [ 3304.957761][T18110] ? __fget+0x384/0x560 [ 3304.957779][T18110] ? ksys_dup3+0x3e0/0x3e0 [ 3304.957801][T18110] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3305.010819][T18110] ? fput_many+0x12c/0x1a0 [ 3305.010841][T18110] ? tomoyo_file_ioctl+0x23/0x30 [ 3305.010860][T18110] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3305.010878][T18110] ? security_file_ioctl+0x8d/0xc0 [ 3305.010895][T18110] ksys_ioctl+0xab/0xd0 [ 3305.010914][T18110] __x64_sys_ioctl+0x73/0xb0 [ 3305.020267][T18110] do_syscall_64+0xfd/0x6a0 [ 3305.020287][T18110] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3305.020299][T18110] RIP: 0033:0x459829 [ 3305.020316][T18110] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:00:02 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x4000000000000000}, 0x0) [ 3305.020331][T18110] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3305.054911][T18110] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3305.054920][T18110] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3305.054928][T18110] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3305.054937][T18110] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3305.054946][T18110] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 13:00:02 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0xf000000, 0xffffffffffffffff, 0x0}]) 13:00:02 executing program 5 (fault-call:2 fault-nth:25): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 3305.128133][T18110] Bluetooth: Can't register HCI device 13:00:02 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x6000000000000000}, 0x0) 13:00:02 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) link(&(0x7f0000000140)='./file0\x00', 0x0) 13:00:02 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x11000000, 0xffffffffffffffff, 0x0}]) [ 3305.314159][T18519] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 3305.360329][T18519] FAULT_INJECTION: forcing a failure. [ 3305.360329][T18519] name failslab, interval 1, probability 0, space 0, times 0 [ 3305.436779][T18519] CPU: 1 PID: 18519 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3305.445244][T18519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3305.455314][T18519] Call Trace: [ 3305.458618][T18519] dump_stack+0x172/0x1f0 [ 3305.462972][T18519] should_fail.cold+0xa/0x15 [ 3305.467664][T18519] ? fault_create_debugfs_attr+0x180/0x180 [ 3305.473522][T18519] ? page_to_nid.part.0+0x20/0x20 [ 3305.478584][T18519] ? ___might_sleep+0x163/0x280 [ 3305.483794][T18519] __should_failslab+0x121/0x190 [ 3305.488917][T18519] should_failslab+0x9/0x14 [ 3305.493436][T18519] kmem_cache_alloc+0x2aa/0x710 [ 3305.498302][T18519] ? mutex_unlock+0xd/0x10 [ 3305.502741][T18519] __kernfs_new_node+0xf0/0x6c0 [ 3305.507613][T18519] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3305.515611][T18519] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 3305.521283][T18519] ? perf_trace_lock_acquire+0xf5/0x530 [ 3305.526941][T18519] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3305.535055][T18519] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 3305.541331][T18519] ? __kasan_check_read+0x11/0x20 [ 3305.547166][T18519] ? __kasan_check_write+0x14/0x20 [ 3305.552388][T18519] kernfs_new_node+0x96/0x120 [ 3305.557065][T18519] kernfs_create_link+0xd7/0x250 [ 3305.562016][T18519] sysfs_do_create_link_sd.isra.0+0x90/0x130 [ 3305.567997][T18519] sysfs_create_link+0x65/0xc0 [ 3305.572861][T18519] device_add+0x635/0x17a0 [ 3305.577308][T18519] ? get_device_parent.isra.0+0x560/0x560 [ 3305.583015][T18519] ? start_creating+0x116/0x1d0 [ 3305.587868][T18519] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3305.594106][T18519] hci_register_dev+0x2e8/0x8f0 [ 3305.598989][T18519] hci_uart_tty_ioctl+0x87e/0xc00 [ 3305.604022][T18519] tty_ioctl+0xaf9/0x14f0 [ 3305.608358][T18519] ? hci_uart_init_work+0x180/0x180 [ 3305.613656][T18519] ? do_tty_hangup+0x30/0x30 [ 3305.618244][T18519] ? tomoyo_path_number_perm+0x459/0x520 [ 3305.623880][T18519] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3305.630110][T18519] ? tomoyo_path_number_perm+0x263/0x520 [ 3305.635845][T18519] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3305.641659][T18519] ? __kasan_check_read+0x11/0x20 [ 3305.646786][T18519] ? do_tty_hangup+0x30/0x30 [ 3305.651420][T18519] do_vfs_ioctl+0xdb6/0x13e0 [ 3305.656018][T18519] ? ioctl_preallocate+0x210/0x210 [ 3305.661127][T18519] ? __fget+0x384/0x560 [ 3305.665264][T18519] ? ksys_dup3+0x3e0/0x3e0 [ 3305.669662][T18519] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3305.675896][T18519] ? fput_many+0x12c/0x1a0 [ 3305.680674][T18519] ? tomoyo_file_ioctl+0x23/0x30 [ 3305.685614][T18519] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3305.692021][T18519] ? security_file_ioctl+0x8d/0xc0 [ 3305.697502][T18519] ksys_ioctl+0xab/0xd0 [ 3305.701765][T18519] __x64_sys_ioctl+0x73/0xb0 [ 3305.706356][T18519] do_syscall_64+0xfd/0x6a0 [ 3305.710866][T18519] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3305.716785][T18519] RIP: 0033:0x459829 [ 3305.721619][T18519] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3305.741587][T18519] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3305.749983][T18519] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3305.758037][T18519] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3305.766263][T18519] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3305.774669][T18519] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3305.782712][T18519] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3305.799952][T18519] Bluetooth: Can't register HCI device [ 3306.810980][ T7114] Bluetooth: hci1: command 0x1003 tx timeout [ 3306.817180][T24945] Bluetooth: hci1: sending frame failed (-49) [ 3308.011076][ C1] net_ratelimit: 5 callbacks suppressed [ 3308.016699][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3308.731013][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3308.731037][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3308.731138][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3308.736957][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3308.891055][ T7114] Bluetooth: hci1: command 0x1001 tx timeout [ 3308.897222][T24945] Bluetooth: hci1: sending frame failed (-49) [ 3310.091049][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3310.810998][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3310.811027][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3310.816869][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3310.822594][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3310.971036][T18080] Bluetooth: hci1: command 0x1009 tx timeout [ 3314.251086][ C1] net_ratelimit: 4 callbacks suppressed [ 3314.251093][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:00:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 13:00:12 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x0) 13:00:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000000)=0x2) syz_open_dev$sg(0x0, 0x0, 0x10008002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) poll(&(0x7f0000000240)=[{r2, 0x2}], 0x1, 0x8000) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0x306, 0x844b}) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0xfffffffffffffffe) 13:00:12 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xe00000000000000, 0x0, @remote, 0x9}, 0x1c) 13:00:12 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x3f000000, 0xffffffffffffffff, 0x0}]) 13:00:12 executing program 5 (fault-call:2 fault-nth:26): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 3314.869518][T18742] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 3314.880018][T18742] FAULT_INJECTION: forcing a failure. [ 3314.880018][T18742] name failslab, interval 1, probability 0, space 0, times 0 [ 3314.898358][T18742] CPU: 1 PID: 18742 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3314.906450][T18742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3314.906458][T18742] Call Trace: [ 3314.906487][T18742] dump_stack+0x172/0x1f0 [ 3314.906529][T18742] should_fail.cold+0xa/0x15 [ 3314.919851][T18742] ? page_to_nid.part.0+0x20/0x20 [ 3314.919874][T18742] ? fault_create_debugfs_attr+0x180/0x180 [ 3314.919891][T18742] ? page_to_nid.part.0+0x20/0x20 [ 3314.919909][T18742] ? ___might_sleep+0x163/0x280 [ 3314.919937][T18742] __should_failslab+0x121/0x190 [ 3314.928848][T18742] should_failslab+0x9/0x14 [ 3314.928863][T18742] kmem_cache_alloc+0x2aa/0x710 [ 3314.928876][T18742] ? memcpy+0x46/0x50 [ 3314.928893][T18742] ? kstrdup+0x5a/0x70 [ 3314.928913][T18742] __kernfs_new_node+0xf0/0x6c0 [ 3314.928938][T18742] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 3314.939773][T18742] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3314.939788][T18742] ? irq_work_claim+0x98/0xc0 [ 3314.939805][T18742] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3314.939817][T18742] ? irq_work_queue+0x30/0x90 [ 3314.939833][T18742] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3314.939855][T18742] ? wake_up_klogd+0x99/0xd0 [ 3314.949825][T18742] kernfs_new_node+0x96/0x120 [ 3314.949846][T18742] kernfs_create_dir_ns+0x52/0x160 [ 3314.949865][T18742] sysfs_create_dir_ns+0x136/0x290 [ 3314.949879][T18742] ? sysfs_create_mount_point+0xa0/0xa0 [ 3314.949900][T18742] ? kobject_add_internal+0x177/0x380 [ 3314.949922][T18742] ? class_dir_child_ns_type+0xd/0x60 [ 3314.959558][T18742] kobject_add_internal.cold+0x116/0x662 [ 3314.959580][T18742] kobject_add+0x150/0x1c0 [ 3314.959597][T18742] ? kset_create_and_add+0x1a0/0x1a0 [ 3314.959620][T18742] ? mutex_unlock+0xd/0x10 [ 3314.959638][T18742] device_add+0x3b7/0x17a0 [ 3314.959658][T18742] ? get_device_parent.isra.0+0x560/0x560 [ 3314.968490][T18742] ? start_creating+0x116/0x1d0 [ 3314.968512][T18742] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3314.968539][T18742] hci_register_dev+0x2e8/0x8f0 [ 3314.968562][T18742] hci_uart_tty_ioctl+0x87e/0xc00 [ 3314.968583][T18742] tty_ioctl+0xaf9/0x14f0 [ 3314.977590][T18742] ? hci_uart_init_work+0x180/0x180 [ 3314.977606][T18742] ? do_tty_hangup+0x30/0x30 [ 3314.977625][T18742] ? tomoyo_path_number_perm+0x459/0x520 [ 3314.977644][T18742] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3314.977660][T18742] ? tomoyo_path_number_perm+0x263/0x520 [ 3314.977683][T18742] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3315.140147][T18742] ? __kasan_check_read+0x11/0x20 [ 3315.145202][T18742] ? do_tty_hangup+0x30/0x30 [ 3315.149808][T18742] do_vfs_ioctl+0xdb6/0x13e0 [ 3315.154407][T18742] ? ioctl_preallocate+0x210/0x210 [ 3315.159612][T18742] ? __fget+0x384/0x560 [ 3315.163781][T18742] ? ksys_dup3+0x3e0/0x3e0 13:00:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x10) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) [ 3315.168204][T18742] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3315.174572][T18742] ? fput_many+0x12c/0x1a0 [ 3315.179132][T18742] ? tomoyo_file_ioctl+0x23/0x30 [ 3315.184076][T18742] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3315.190325][T18742] ? security_file_ioctl+0x8d/0xc0 [ 3315.195448][T18742] ksys_ioctl+0xab/0xd0 [ 3315.199725][T18742] __x64_sys_ioctl+0x73/0xb0 [ 3315.204773][T18742] do_syscall_64+0xfd/0x6a0 [ 3315.209313][T18742] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3315.209327][T18742] RIP: 0033:0x459829 [ 3315.209347][T18742] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3315.238895][T18742] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3315.238910][T18742] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3315.238917][T18742] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3315.238925][T18742] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3315.238932][T18742] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3315.238940][T18742] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3315.239261][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3315.247925][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3315.256157][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3315.264419][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3315.276314][T18742] kobject_add_internal failed for hci0 (error: -12 parent: bluetooth) 13:00:12 executing program 5 (fault-call:2 fault-nth:27): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 3315.326476][T18742] Bluetooth: Can't register HCI device 13:00:12 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:13 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x40000000, 0xffffffffffffffff, 0x0}]) [ 3315.429583][T18977] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 3315.446774][T18977] FAULT_INJECTION: forcing a failure. [ 3315.446774][T18977] name failslab, interval 1, probability 0, space 0, times 0 [ 3315.481147][T18977] CPU: 0 PID: 18977 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3315.489572][T18977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3315.499635][T18977] Call Trace: [ 3315.503635][T18977] dump_stack+0x172/0x1f0 [ 3315.507976][T18977] should_fail.cold+0xa/0x15 [ 3315.512574][T18977] ? page_to_nid.part.0+0x20/0x20 [ 3315.517610][T18977] ? fault_create_debugfs_attr+0x180/0x180 [ 3315.523720][T18977] ? page_to_nid.part.0+0x20/0x20 [ 3315.528754][T18977] ? ___might_sleep+0x163/0x280 [ 3315.533713][T18977] __should_failslab+0x121/0x190 [ 3315.538659][T18977] should_failslab+0x9/0x14 [ 3315.543775][T18977] kmem_cache_alloc+0x2aa/0x710 [ 3315.548632][T18977] ? memcpy+0x46/0x50 [ 3315.552732][T18977] ? kstrdup+0x5a/0x70 [ 3315.556810][T18977] __kernfs_new_node+0xf0/0x6c0 [ 3315.561666][T18977] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3315.568111][T18977] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 3315.573836][T18977] ? perf_trace_lock_acquire+0xf5/0x530 [ 3315.579820][T18977] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 3315.585960][T18977] ? __kasan_check_read+0x11/0x20 [ 3315.590982][T18977] ? __kasan_check_write+0x14/0x20 [ 3315.596524][T18977] kernfs_new_node+0x96/0x120 [ 3315.601201][T18977] kernfs_create_link+0xd7/0x250 [ 3315.606147][T18977] sysfs_do_create_link_sd.isra.0+0x90/0x130 [ 3315.612295][T18977] sysfs_create_link+0x65/0xc0 [ 3315.617058][T18977] device_add+0x75c/0x17a0 [ 3315.621475][T18977] ? get_device_parent.isra.0+0x560/0x560 [ 3315.627189][T18977] ? start_creating+0x116/0x1d0 [ 3315.632063][T18977] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3315.638687][T18977] hci_register_dev+0x2e8/0x8f0 [ 3315.643558][T18977] hci_uart_tty_ioctl+0x87e/0xc00 [ 3315.648603][T18977] tty_ioctl+0xaf9/0x14f0 [ 3315.652953][T18977] ? hci_uart_init_work+0x180/0x180 [ 3315.658167][T18977] ? do_tty_hangup+0x30/0x30 [ 3315.662869][T18977] ? tomoyo_path_number_perm+0x459/0x520 [ 3315.668590][T18977] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3315.675141][T18977] ? tomoyo_path_number_perm+0x263/0x520 [ 3315.681301][T18977] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3315.687374][T18977] ? __kasan_check_read+0x11/0x20 [ 3315.692400][T18977] ? do_tty_hangup+0x30/0x30 [ 3315.696993][T18977] do_vfs_ioctl+0xdb6/0x13e0 [ 3315.701808][T18977] ? ioctl_preallocate+0x210/0x210 [ 3315.706925][T18977] ? __fget+0x384/0x560 [ 3315.711375][T18977] ? ksys_dup3+0x3e0/0x3e0 [ 3315.715889][T18977] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3315.722143][T18977] ? fput_many+0x12c/0x1a0 [ 3315.726578][T18977] ? tomoyo_file_ioctl+0x23/0x30 [ 3315.731676][T18977] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3315.737911][T18977] ? security_file_ioctl+0x8d/0xc0 [ 3315.743042][T18977] ksys_ioctl+0xab/0xd0 [ 3315.747223][T18977] __x64_sys_ioctl+0x73/0xb0 [ 3315.751916][T18977] do_syscall_64+0xfd/0x6a0 [ 3315.756406][T18977] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3315.762290][T18977] RIP: 0033:0x459829 [ 3315.766201][T18977] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3315.785795][T18977] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3315.794985][T18977] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3315.802945][T18977] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 3315.811177][T18977] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3315.819139][T18977] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 13:00:13 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) [ 3315.827099][T18977] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3315.837021][T18977] Bluetooth: Can't register HCI device [ 3316.331044][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3316.970970][ T7114] Bluetooth: hci1: command 0x1003 tx timeout [ 3316.977184][T24945] Bluetooth: hci1: sending frame failed (-49) [ 3317.291005][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3317.291047][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3317.296870][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3318.411080][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3319.050978][ T7114] Bluetooth: hci1: command 0x1001 tx timeout [ 3319.057155][T24945] Bluetooth: hci1: sending frame failed (-49) [ 3319.371038][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3319.371346][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3319.376897][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3319.382650][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3320.490996][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3321.131026][T18092] Bluetooth: hci1: command 0x1009 tx timeout [ 3321.451031][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3321.451330][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3321.456879][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3321.462609][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3322.571031][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3324.651053][ C1] net_ratelimit: 4 callbacks suppressed [ 3324.656662][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:00:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 13:00:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'sh\x90\x01\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 13:00:22 executing program 5 (fault-call:2 fault-nth:28): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 13:00:22 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0}]) 13:00:22 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1000000000000000, 0x0, @remote, 0x9}, 0x1c) 13:00:22 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) [ 3325.118599][T19483] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 3325.137228][T19519] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 3325.143779][T19483] FAULT_INJECTION: forcing a failure. [ 3325.143779][T19483] name failslab, interval 1, probability 0, space 0, times 0 [ 3325.163345][T19483] CPU: 0 PID: 19483 Comm: syz-executor.5 Not tainted 5.3.0-rc2+ #109 [ 3325.171456][T19483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3325.181025][T19519] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 3325.181519][T19483] Call Trace: [ 3325.181546][T19483] dump_stack+0x172/0x1f0 [ 3325.181570][T19483] should_fail.cold+0xa/0x15 [ 3325.181592][T19483] ? fault_create_debugfs_attr+0x180/0x180 [ 3325.205880][T19483] ? page_to_nid.part.0+0x20/0x20 [ 3325.211102][T19483] ? ___might_sleep+0x163/0x280 13:00:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0x0, 0x0, 'sh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000006, @broadcast, 0x0, 0x200000001, 'lblcr\x00'}, 0x2c) [ 3325.215987][T19483] __should_failslab+0x121/0x190 [ 3325.220952][T19483] should_failslab+0x9/0x14 [ 3325.225501][T19483] kmem_cache_alloc+0x2aa/0x710 [ 3325.230365][T19483] ? __kasan_check_write+0x14/0x20 [ 3325.235488][T19483] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 3325.241068][T19483] __kernfs_new_node+0xf0/0x6c0 [ 3325.245929][T19483] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3325.252182][T19483] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 3325.257649][T19483] ? mutex_unlock+0xd/0x10 [ 3325.257670][T19483] ? debug_smp_processor_id+0x3c/0x214 [ 3325.257695][T19483] ? perf_trace_lock_acquire+0xf5/0x530 [ 3325.267566][T19483] ? kernfs_add_one+0x131/0x4d0 [ 3325.267595][T19483] kernfs_new_node+0x96/0x120 [ 3325.267614][T19483] __kernfs_create_file+0x51/0x33b [ 3325.267630][T19483] sysfs_add_file_mode_ns+0x222/0x560 [ 3325.267650][T19483] sysfs_create_file_ns+0x141/0x1d0 [ 3325.267716][T19483] ? acpi_unbind_one+0x4a0/0x4a0 [ 3325.267736][T19483] ? sysfs_add_file_mode_ns+0x560/0x560 [ 3325.309043][T19483] ? kset_create_and_add+0x1a0/0x1a0 [ 3325.314362][T19483] ? dev_fwnode+0xd/0x40 [ 3325.318617][T19483] device_create_file+0xf6/0x1e0 [ 3325.323563][T19483] device_add+0x5a3/0x17a0 [ 3325.327994][T19483] ? get_device_parent.isra.0+0x560/0x560 [ 3325.333735][T19483] ? start_creating+0x116/0x1d0 [ 3325.338610][T19483] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3325.344873][T19483] hci_register_dev+0x2e8/0x8f0 [ 3325.349780][T19483] hci_uart_tty_ioctl+0x87e/0xc00 [ 3325.354820][T19483] tty_ioctl+0xaf9/0x14f0 [ 3325.359185][T19483] ? hci_uart_init_work+0x180/0x180 [ 3325.364388][T19483] ? do_tty_hangup+0x30/0x30 13:00:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3325.368992][T19483] ? tomoyo_path_number_perm+0x459/0x520 [ 3325.374647][T19483] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3325.380897][T19483] ? tomoyo_path_number_perm+0x263/0x520 [ 3325.386549][T19483] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3325.392371][T19483] ? __kasan_check_read+0x11/0x20 [ 3325.397407][T19483] ? do_tty_hangup+0x30/0x30 [ 3325.397425][T19483] do_vfs_ioctl+0xdb6/0x13e0 [ 3325.397444][T19483] ? ioctl_preallocate+0x210/0x210 [ 3325.411810][T19483] ? __fget+0x384/0x560 [ 3325.415970][T19483] ? ksys_dup3+0x3e0/0x3e0 [ 3325.415989][T19483] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3325.416005][T19483] ? fput_many+0x12c/0x1a0 [ 3325.416032][T19483] ? tomoyo_file_ioctl+0x23/0x30 [ 3325.416053][T19483] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3325.442379][T19483] ? security_file_ioctl+0x8d/0xc0 [ 3325.447501][T19483] ksys_ioctl+0xab/0xd0 [ 3325.451668][T19483] __x64_sys_ioctl+0x73/0xb0 [ 3325.456270][T19483] do_syscall_64+0xfd/0x6a0 [ 3325.460961][T19483] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3325.466863][T19483] RIP: 0033:0x459829 [ 3325.470891][T19483] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3325.490492][T19483] RSP: 002b:00007f9694df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3325.498893][T19483] RAX: ffffffffffffffda RBX: 00007f9694df8c90 RCX: 0000000000459829 [ 3325.506858][T19483] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 13:00:23 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f000007c000/0x4000)=nil, 0x4000, 0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) socket(0x10, 0x0, 0x0) [ 3325.515037][T19483] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3325.523040][T19483] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9694df96d4 [ 3325.531007][T19483] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000004 [ 3325.559349][T19483] Bluetooth: Can't register HCI device 13:00:23 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0xffffffffffffffff, 0x0}]) [ 3325.610968][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3325.611053][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3325.616806][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:00:23 executing program 5 (fault-call:2 fault-nth:29): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 13:00:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 13:00:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:00:23 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0xffffffffffffffff, 0x0}]) 13:00:23 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:23 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x0}]) 13:00:23 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1100000000000000, 0x0, @remote, 0x9}, 0x1c) 13:00:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:00:23 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup(0xffffffffffffff9c) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f00000000c0)) fsync(r2) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x80000) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendto$packet(r3, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x800) r4 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) dup(r4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r5, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) 13:00:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 13:00:23 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0xffffffffffffffff, 0x0}]) 13:00:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:00:24 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) [ 3326.432872][T20571] debugfs: Directory 'hci0' with parent 'bluetooth' already present! 13:00:24 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0xffffffffffffffff, 0x0}]) [ 3326.535727][T12596] Bluetooth: hci0: Frame reassembly failed (-84) 13:00:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:00:24 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:24 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0xffffffffffffffff, 0x0}]) [ 3326.731011][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:00:24 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0xe000, 0x0) 13:00:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:00:24 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1802000000000000, 0x0, @remote, 0x9}, 0x1c) 13:00:24 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) [ 3327.690993][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3327.696841][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3327.701088][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3327.708360][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3328.570997][ T7114] Bluetooth: hci0: command 0x1003 tx timeout [ 3328.577148][T24945] Bluetooth: hci0: sending frame failed (-49) [ 3328.811049][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3329.771012][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3329.771066][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3329.776861][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3330.650980][ T7114] Bluetooth: hci0: command 0x1001 tx timeout [ 3330.657172][T24945] Bluetooth: hci0: sending frame failed (-49) [ 3330.891022][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3331.850995][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3331.851024][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3331.856816][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3331.862591][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3332.731009][T18092] Bluetooth: hci0: command 0x1009 tx timeout [ 3332.971017][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3333.930994][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3335.051026][ C1] net_ratelimit: 2 callbacks suppressed [ 3335.051033][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3336.010999][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3336.011027][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3336.016826][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3336.022570][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:00:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x2, 0x4) 13:00:34 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0xf00000000000000, 0xffffffffffffffff, 0x0}]) 13:00:34 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x155555555555583b, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00aaff03af1d000000ff01e4caf071"], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:00:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:00:34 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x2000000000000000, 0x0, @remote, 0x9}, 0x1c) 13:00:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:00:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x10, 0x4) 13:00:34 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x1100000000000000, 0xffffffffffffffff, 0x0}]) 13:00:34 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, 0x0) 13:00:34 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0xffffffffffffffff, 0x0}]) 13:00:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:00:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x2403, 0x4) [ 3337.131036][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:00:34 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:00:34 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0}]) 13:00:35 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3f00000000000000, 0x0, @remote, 0x9}, 0x1c) 13:00:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x4b69, 0x4) 13:00:35 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000000c0)=""/208) 13:00:35 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0xffffffffffffffff, 0x0}]) 13:00:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:00:35 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x4c00, 0x4) 13:00:35 executing program 1: 13:00:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:00:35 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2}]) 13:00:35 executing program 1: 13:00:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x4c01, 0x4) [ 3338.090967][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3338.091002][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3338.096869][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:00:36 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4000000000000000, 0x0, @remote, 0x9}, 0x1c) 13:00:36 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:36 executing program 1: 13:00:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:00:36 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}]) 13:00:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5409, 0x4) 13:00:36 executing program 1: 13:00:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:00:36 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4}]) 13:00:36 executing program 1: 13:00:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x540b, 0x4) 13:00:36 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) [ 3339.211047][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:00:37 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4002000000000000, 0x0, @remote, 0x9}, 0x1c) 13:00:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:00:37 executing program 1: 13:00:37 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5}]) 13:00:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x540c, 0x4) 13:00:37 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:37 executing program 1: 13:00:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:00:37 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}]) 13:00:37 executing program 1: 13:00:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x540d, 0x4) 13:00:37 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) [ 3340.171042][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3340.171636][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3340.176880][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3340.183557][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:00:38 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4800000000000000, 0x0, @remote, 0x9}, 0x1c) 13:00:38 executing program 1: 13:00:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:00:38 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8}]) 13:00:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x540e, 0x4) 13:00:38 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:38 executing program 1: 13:00:38 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xf}]) 13:00:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x540f, 0x4) 13:00:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:00:38 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:38 executing program 1: [ 3341.291013][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:00:38 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4c00000000000000, 0x0, @remote, 0x9}, 0x1c) 13:00:38 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x11}]) 13:00:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5410, 0x4) 13:00:38 executing program 1: 13:00:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:00:38 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:39 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000015c0)=ANY=[@ANYBLOB="0500408bc25f463743707ac40e0cddad19c6cc"], 0x1) fcntl$getown(r0, 0x9) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000080)={0x25, 0x3b, 0xe, 0x3, 0x9, 0x8000, 0x3, 0x116, 0x1}) 13:00:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5411, 0x4) 13:00:39 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x300}]) 13:00:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:00:39 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:39 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x500}]) [ 3342.250993][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3342.250999][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3342.251071][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3342.256826][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:00:39 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5800000000000000, 0x0, @remote, 0x9}, 0x1c) 13:00:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5412, 0x4) 13:00:39 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:00:39 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x700}]) 13:00:39 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000006600)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:00:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5413, 0x4) 13:00:40 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xf00}]) 13:00:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:00:40 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5414, 0x4) 13:00:40 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:40 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x6800000000000000, 0x0, @remote, 0x9}, 0x1c) 13:00:40 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1100}]) 13:00:40 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 13:00:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5415, 0x4) 13:00:40 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:40 executing program 1: r0 = perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) flock(r1, 0x2) r2 = epoll_create1(0x0) flock(r2, 0x2) dup3(r0, r1, 0x0) 13:00:40 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 13:00:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5416, 0x4) 13:00:40 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3f00}]) 13:00:41 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) [ 3343.371025][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:00:41 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 13:00:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000005200030f07fffd946fa283bc04eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 13:00:41 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x6c00000000000000, 0x0, @remote, 0x9}, 0x1c) 13:00:41 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:41 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 13:00:41 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4000}]) 13:00:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5418, 0x4) 13:00:41 executing program 1: pipe2(&(0x7f0000000140), 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x0, 0x3f004000}) close(r1) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) fchdir(0xffffffffffffffff) flistxattr(0xffffffffffffffff, 0x0, 0x0) 13:00:41 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 13:00:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x541d, 0x4) 13:00:41 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000}]) 13:00:41 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:41 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 13:00:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x541e, 0x4) 13:00:42 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x7400000000000000, 0x0, @remote, 0x9}, 0x1c) 13:00:42 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:42 executing program 1 (fault-call:4 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 13:00:42 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2000000}]) 13:00:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:00:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x541f, 0x4) 13:00:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3345.082677][T25334] FAULT_INJECTION: forcing a failure. [ 3345.082677][T25334] name failslab, interval 1, probability 0, space 0, times 0 [ 3345.131908][T25334] CPU: 0 PID: 25334 Comm: syz-executor.1 Not tainted 5.3.0-rc2+ #109 [ 3345.140041][T25334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3345.150109][T25334] Call Trace: [ 3345.153431][T25334] dump_stack+0x172/0x1f0 [ 3345.157907][T25334] should_fail.cold+0xa/0x15 [ 3345.162966][T25334] ? fault_create_debugfs_attr+0x180/0x180 [ 3345.162995][T25334] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3345.175123][T25334] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3345.175141][T25334] ? debug_smp_processor_id+0x3c/0x214 [ 3345.175157][T25334] ? ___might_sleep+0x163/0x280 [ 3345.175177][T25334] __should_failslab+0x121/0x190 [ 3345.175196][T25334] should_failslab+0x9/0x14 [ 3345.175209][T25334] __kmalloc+0x2e0/0x770 [ 3345.175232][T25334] ? mark_held_locks+0xf0/0xf0 [ 3345.212514][T25334] ? _parse_integer+0x190/0x190 [ 3345.217394][T25334] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 3345.223127][T25334] tomoyo_realpath_from_path+0xcd/0x7b0 [ 3345.228691][T25334] ? tomoyo_path_number_perm+0x193/0x520 [ 3345.234350][T25334] tomoyo_path_number_perm+0x1dd/0x520 [ 3345.239898][T25334] ? tomoyo_path_number_perm+0x193/0x520 [ 3345.245649][T25334] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3345.251482][T25334] ? perf_trace_lock_acquire+0xf5/0x530 [ 3345.257061][T25334] ? __kasan_check_read+0x11/0x20 [ 3345.262214][T25334] ? __fget+0x384/0x560 [ 3345.266392][T25334] ? ksys_dup3+0x3e0/0x3e0 [ 3345.271111][T25334] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3345.277379][T25334] ? fput_many+0x12c/0x1a0 [ 3345.281826][T25334] tomoyo_file_ioctl+0x23/0x30 [ 3345.286605][T25334] security_file_ioctl+0x77/0xc0 [ 3345.291557][T25334] ksys_ioctl+0x57/0xd0 [ 3345.295708][T25334] __x64_sys_ioctl+0x73/0xb0 [ 3345.300309][T25334] do_syscall_64+0xfd/0x6a0 [ 3345.304832][T25334] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3345.310747][T25334] RIP: 0033:0x459829 13:00:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:00:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5420, 0x4) [ 3345.314647][T25334] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3345.334260][T25334] RSP: 002b:00007fa15ff8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3345.342773][T25334] RAX: ffffffffffffffda RBX: 00007fa15ff8ac90 RCX: 0000000000459829 [ 3345.342781][T25334] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000004 [ 3345.342788][T25334] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3345.342795][T25334] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa15ff8b6d4 13:00:42 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:43 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3000000}]) [ 3345.342803][T25334] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000005 13:00:43 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 3345.436611][T25334] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3345.451032][ C1] net_ratelimit: 4 callbacks suppressed [ 3345.451039][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3345.477477][T25334] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 3345.520365][T12596] Bluetooth: hci0: Frame reassembly failed (-84) 13:00:43 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x7a00000000000000, 0x0, @remote, 0x9}, 0x1c) 13:00:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5421, 0x4) [ 3346.411202][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3346.417045][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3346.421056][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3346.428551][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3347.531025][T19790] Bluetooth: hci0: command 0x1003 tx timeout [ 3347.531071][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3347.537216][T24945] Bluetooth: hci0: sending frame failed (-49) [ 3348.491024][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3348.491632][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3348.496870][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3348.502612][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3349.610997][T19790] Bluetooth: hci0: command 0x1001 tx timeout [ 3349.617182][T24945] Bluetooth: hci0: sending frame failed (-49) [ 3350.571004][ C0] net_ratelimit: 1 callbacks suppressed [ 3350.571631][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3350.576649][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3350.582410][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3350.588133][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3351.691040][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3351.696973][T18092] Bluetooth: hci0: command 0x1009 tx timeout [ 3352.651016][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3352.651133][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3352.656844][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3352.662598][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3353.771077][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:00:53 executing program 1 (fault-call:4 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 13:00:53 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 13:00:53 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4000000}]) 13:00:53 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:00:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5422, 0x4) 13:00:53 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x8000000000000000, 0x0, @remote, 0x9}, 0x1c) [ 3355.848837][T25805] FAULT_INJECTION: forcing a failure. [ 3355.848837][T25805] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3355.862127][T25805] CPU: 0 PID: 25805 Comm: syz-executor.1 Not tainted 5.3.0-rc2+ #109 [ 3355.870210][T25805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3355.880372][T25805] Call Trace: [ 3355.883713][T25805] dump_stack+0x172/0x1f0 [ 3355.888160][T25805] should_fail.cold+0xa/0x15 [ 3355.892782][T25805] ? fault_create_debugfs_attr+0x180/0x180 [ 3355.898811][T25805] ? lock_downgrade+0x920/0x920 [ 3355.903786][T25805] should_fail_alloc_page+0x50/0x60 [ 3355.908986][T25805] __alloc_pages_nodemask+0x1a1/0x8f0 [ 3355.909004][T25805] ? __alloc_pages_slowpath+0x2520/0x2520 [ 3355.909026][T25805] ? kernel_text_address+0x73/0xf0 [ 3355.909052][T25805] ? debug_smp_processor_id+0x3c/0x214 [ 3355.920135][T25805] ? fault_create_debugfs_attr+0x180/0x180 [ 3355.920154][T25805] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3355.920173][T25805] cache_grow_begin+0x90/0xd20 13:00:53 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 3355.920195][T25805] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 3355.953784][T25805] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3355.960143][T25805] __kmalloc+0x6b2/0x770 [ 3355.964431][T25805] ? mark_held_locks+0xf0/0xf0 [ 3355.969215][T25805] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 3355.974961][T25805] tomoyo_realpath_from_path+0xcd/0x7b0 [ 3355.980529][T25805] ? tomoyo_path_number_perm+0x193/0x520 [ 3355.986456][T25805] tomoyo_path_number_perm+0x1dd/0x520 [ 3355.992390][T25805] ? tomoyo_path_number_perm+0x193/0x520 13:00:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3355.998937][T25805] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3356.005674][T25805] ? perf_trace_lock_acquire+0xf5/0x530 [ 3356.011328][T25805] ? __kasan_check_read+0x11/0x20 [ 3356.016488][T25805] ? __fget+0x384/0x560 [ 3356.020761][T25805] ? ksys_dup3+0x3e0/0x3e0 [ 3356.025305][T25805] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3356.031553][T25805] ? fput_many+0x12c/0x1a0 [ 3356.031573][T25805] tomoyo_file_ioctl+0x23/0x30 [ 3356.031592][T25805] security_file_ioctl+0x77/0xc0 [ 3356.031616][T25805] ksys_ioctl+0x57/0xd0 [ 3356.045711][T25805] __x64_sys_ioctl+0x73/0xb0 [ 3356.045732][T25805] do_syscall_64+0xfd/0x6a0 [ 3356.045752][T25805] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3356.045770][T25805] RIP: 0033:0x459829 [ 3356.069050][T25805] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3356.088782][T25805] RSP: 002b:00007fa15ff8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:00:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5423, 0x4) 13:00:53 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) [ 3356.097204][T25805] RAX: ffffffffffffffda RBX: 00007fa15ff8ac90 RCX: 0000000000459829 [ 3356.097212][T25805] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000004 [ 3356.097219][T25805] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3356.097227][T25805] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa15ff8b6d4 [ 3356.097235][T25805] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000005 [ 3356.105475][ C1] net_ratelimit: 4 callbacks suppressed [ 3356.105484][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:00:53 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5000000}]) [ 3356.169593][T25805] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 3356.190013][T24945] Bluetooth: hci0: sending frame failed (-49) 13:00:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5424, 0x4) [ 3356.811049][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3356.811627][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3356.816886][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3356.822623][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3358.171101][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3358.251076][T18080] Bluetooth: hci0: command 0x1003 tx timeout [ 3358.257996][T24945] Bluetooth: hci0: sending frame failed (-49) [ 3358.890980][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3358.891010][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3358.897245][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3358.903499][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3360.331045][ T7114] Bluetooth: hci0: command 0x1001 tx timeout [ 3360.337205][T24945] Bluetooth: hci0: sending frame failed (-49) [ 3362.331151][ C1] net_ratelimit: 5 callbacks suppressed [ 3362.331160][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3362.411028][T18080] Bluetooth: hci0: command 0x1009 tx timeout [ 3363.050998][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3363.051032][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3363.056927][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3364.411048][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3365.130983][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3365.131004][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3365.137014][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3365.142886][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3366.491054][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:01:04 executing program 1 (fault-call:4 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 13:01:04 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:01:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:04 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7000000}]) 13:01:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5425, 0x4) 13:01:04 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x8004020000000000, 0x0, @remote, 0x9}, 0x1c) 13:01:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5427, 0x4) 13:01:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:04 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8000000}]) 13:01:04 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) [ 3366.869960][T26317] FAULT_INJECTION: forcing a failure. [ 3366.869960][T26317] name failslab, interval 1, probability 0, space 0, times 0 [ 3366.934052][T26317] CPU: 0 PID: 26317 Comm: syz-executor.1 Not tainted 5.3.0-rc2+ #109 [ 3366.942369][T26317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3366.956719][T26317] Call Trace: [ 3366.956752][T26317] dump_stack+0x172/0x1f0 [ 3366.956777][T26317] should_fail.cold+0xa/0x15 [ 3366.956801][T26317] ? fault_create_debugfs_attr+0x180/0x180 [ 3366.956825][T26317] ? ___might_sleep+0x163/0x280 [ 3366.956849][T26317] __should_failslab+0x121/0x190 [ 3366.969367][T26317] should_failslab+0x9/0x14 [ 3366.969382][T26317] __kmalloc+0x2e0/0x770 [ 3366.969400][T26317] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3366.969416][T26317] ? d_absolute_path+0x11b/0x170 [ 3366.969435][T26317] ? __d_path+0x140/0x140 [ 3367.009512][T26317] ? tomoyo_encode2.part.0+0xf5/0x400 [ 3367.014891][T26317] tomoyo_encode2.part.0+0xf5/0x400 [ 3367.020094][T26317] tomoyo_encode+0x2b/0x50 [ 3367.024507][T26317] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 3367.030161][T26317] tomoyo_path_number_perm+0x1dd/0x520 [ 3367.035649][T26317] ? tomoyo_path_number_perm+0x193/0x520 [ 3367.041376][T26317] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3367.047537][T26317] ? perf_trace_lock_acquire+0xf5/0x530 [ 3367.053116][T26317] ? __kasan_check_read+0x11/0x20 [ 3367.058153][T26317] ? __fget+0x384/0x560 [ 3367.062315][T26317] ? ksys_dup3+0x3e0/0x3e0 [ 3367.066739][T26317] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3367.072987][T26317] ? fput_many+0x12c/0x1a0 [ 3367.077428][T26317] tomoyo_file_ioctl+0x23/0x30 [ 3367.082210][T26317] security_file_ioctl+0x77/0xc0 [ 3367.087381][T26317] ksys_ioctl+0x57/0xd0 [ 3367.096232][T26317] __x64_sys_ioctl+0x73/0xb0 [ 3367.101524][T26317] do_syscall_64+0xfd/0x6a0 [ 3367.106746][T26317] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3367.112637][T26317] RIP: 0033:0x459829 [ 3367.116532][T26317] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3367.136450][T26317] RSP: 002b:00007fa15ff8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3367.145493][T26317] RAX: ffffffffffffffda RBX: 00007fa15ff8ac90 RCX: 0000000000459829 [ 3367.153475][T26317] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000004 [ 3367.161536][T26317] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3367.169611][T26317] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa15ff8b6d4 13:01:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5428, 0x4) 13:01:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3367.177584][T26317] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000005 [ 3367.199537][T26317] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3367.216693][T26317] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 3368.571114][ C1] net_ratelimit: 3 callbacks suppressed [ 3368.571123][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3369.291068][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3369.291358][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3369.296888][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3369.302611][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3369.308430][T19790] Bluetooth: hci0: command 0x1003 tx timeout [ 3369.320139][T24945] Bluetooth: hci0: sending frame failed (-49) [ 3370.651120][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3371.371008][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3371.371032][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3371.371144][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3371.376992][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3371.382930][T19790] Bluetooth: hci0: command 0x1001 tx timeout [ 3371.400453][T24945] Bluetooth: hci0: sending frame failed (-49) [ 3373.451208][T18080] Bluetooth: hci0: command 0x1009 tx timeout [ 3374.811336][ C1] net_ratelimit: 5 callbacks suppressed [ 3374.816947][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3375.531034][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3375.531055][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3375.537059][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3376.891222][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:01:15 executing program 1 (fault-call:4 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 13:01:15 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xf000000}]) 13:01:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5429, 0x4) 13:01:15 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:01:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:15 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x8dffffff00000000, 0x0, @remote, 0x9}, 0x1c) 13:01:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5437, 0x4) [ 3377.610984][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3377.610992][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3377.611053][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3377.616845][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3377.678301][T26651] FAULT_INJECTION: forcing a failure. [ 3377.678301][T26651] name failslab, interval 1, probability 0, space 0, times 0 [ 3377.714288][T26651] CPU: 1 PID: 26651 Comm: syz-executor.1 Not tainted 5.3.0-rc2+ #109 13:01:15 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x11000000}]) [ 3377.722492][T26651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3377.733695][T26651] Call Trace: [ 3377.737027][T26651] dump_stack+0x172/0x1f0 [ 3377.741409][T26651] should_fail.cold+0xa/0x15 [ 3377.746628][T26651] ? fault_create_debugfs_attr+0x180/0x180 [ 3377.752459][T26651] ? page_to_nid.part.0+0x20/0x20 [ 3377.757528][T26651] ? ___might_sleep+0x163/0x280 [ 3377.762396][T26651] __should_failslab+0x121/0x190 [ 3377.767622][T26651] should_failslab+0x9/0x14 13:01:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5441, 0x4) [ 3377.774041][T26651] kmem_cache_alloc_trace+0x2d3/0x790 [ 3377.779740][T26651] ? rwlock_bug.part.0+0x90/0x90 [ 3377.784876][T26651] ? ___might_sleep+0x163/0x280 [ 3377.789825][T26651] hci_alloc_dev+0x43/0x1d80 [ 3377.794610][T26651] hci_uart_tty_ioctl+0x306/0xc00 [ 3377.794630][T26651] tty_ioctl+0xaf9/0x14f0 [ 3377.794643][T26651] ? hci_uart_init_work+0x180/0x180 [ 3377.794655][T26651] ? do_tty_hangup+0x30/0x30 [ 3377.794673][T26651] ? tomoyo_path_number_perm+0x459/0x520 [ 3377.794691][T26651] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 13:01:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3377.794704][T26651] ? tomoyo_path_number_perm+0x263/0x520 [ 3377.794719][T26651] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3377.794739][T26651] ? __kasan_check_read+0x11/0x20 [ 3377.794756][T26651] ? do_tty_hangup+0x30/0x30 [ 3377.794772][T26651] do_vfs_ioctl+0xdb6/0x13e0 [ 3377.794791][T26651] ? ioctl_preallocate+0x210/0x210 [ 3377.809953][T26651] ? __fget+0x384/0x560 [ 3377.809972][T26651] ? ksys_dup3+0x3e0/0x3e0 [ 3377.838362][T26651] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3377.838387][T26651] ? fput_many+0x12c/0x1a0 [ 3377.878449][T26651] ? tomoyo_file_ioctl+0x23/0x30 [ 3377.883402][T26651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3377.889857][T26651] ? security_file_ioctl+0x8d/0xc0 [ 3377.894984][T26651] ksys_ioctl+0xab/0xd0 [ 3377.899178][T26651] __x64_sys_ioctl+0x73/0xb0 [ 3377.904052][T26651] do_syscall_64+0xfd/0x6a0 [ 3377.908756][T26651] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3377.908769][T26651] RIP: 0033:0x459829 [ 3377.908786][T26651] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3377.908794][T26651] RSP: 002b:00007fa15ff8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3377.939220][T26651] RAX: ffffffffffffffda RBX: 00007fa15ff8ac90 RCX: 0000000000459829 [ 3377.939229][T26651] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000004 [ 3377.939237][T26651] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 13:01:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5450, 0x4) 13:01:15 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) [ 3377.939246][T26651] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa15ff8b6d4 [ 3377.939254][T26651] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000005 [ 3377.984652][T26651] Bluetooth: Can't allocate HCI device 13:01:15 executing program 1 (fault-call:4 fault-nth:4): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 13:01:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:15 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3f000000}]) 13:01:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5451, 0x4) [ 3378.243417][T26863] FAULT_INJECTION: forcing a failure. [ 3378.243417][T26863] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3378.257665][T26863] CPU: 1 PID: 26863 Comm: syz-executor.1 Not tainted 5.3.0-rc2+ #109 [ 3378.266049][T26863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3378.276938][T26863] Call Trace: [ 3378.280277][T26863] dump_stack+0x172/0x1f0 [ 3378.285171][T26863] should_fail.cold+0xa/0x15 [ 3378.289791][T26863] ? fault_create_debugfs_attr+0x180/0x180 [ 3378.295881][T26863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3378.302943][T26863] should_fail_alloc_page+0x50/0x60 [ 3378.309036][T26863] __alloc_pages_nodemask+0x1a1/0x8f0 [ 3378.314433][T26863] ? __alloc_pages_slowpath+0x2520/0x2520 [ 3378.320353][T26863] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 3378.326085][T26863] ? __kasan_check_read+0x11/0x20 [ 3378.331323][T26863] ? fault_create_debugfs_attr+0x180/0x180 [ 3378.337272][T26863] cache_grow_begin+0x90/0xd20 13:01:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5452, 0x4) [ 3378.342339][T26863] ? hci_alloc_dev+0x43/0x1d80 [ 3378.342358][T26863] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3378.342375][T26863] kmem_cache_alloc_trace+0x6b3/0x790 [ 3378.342392][T26863] ? rwlock_bug.part.0+0x90/0x90 [ 3378.342416][T26863] hci_alloc_dev+0x43/0x1d80 [ 3378.354232][T26863] hci_uart_tty_ioctl+0x306/0xc00 [ 3378.354251][T26863] tty_ioctl+0xaf9/0x14f0 [ 3378.354265][T26863] ? hci_uart_init_work+0x180/0x180 [ 3378.354278][T26863] ? do_tty_hangup+0x30/0x30 [ 3378.354313][T26863] ? tomoyo_path_number_perm+0x459/0x520 [ 3378.354344][T26863] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3378.354365][T26863] ? tomoyo_path_number_perm+0x263/0x520 [ 3378.407089][T26863] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3378.412928][T26863] ? __kasan_check_read+0x11/0x20 [ 3378.418269][T26863] ? do_tty_hangup+0x30/0x30 [ 3378.422883][T26863] do_vfs_ioctl+0xdb6/0x13e0 [ 3378.427583][T26863] ? ioctl_preallocate+0x210/0x210 [ 3378.432708][T26863] ? __fget+0x384/0x560 [ 3378.436964][T26863] ? ksys_dup3+0x3e0/0x3e0 [ 3378.441530][T26863] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3378.448823][T26863] ? fput_many+0x12c/0x1a0 [ 3378.453374][T26863] ? tomoyo_file_ioctl+0x23/0x30 [ 3378.458410][T26863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3378.465623][T26863] ? security_file_ioctl+0x8d/0xc0 [ 3378.465643][T26863] ksys_ioctl+0xab/0xd0 [ 3378.465662][T26863] __x64_sys_ioctl+0x73/0xb0 [ 3378.481004][T26863] do_syscall_64+0xfd/0x6a0 [ 3378.481023][T26863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3378.481035][T26863] RIP: 0033:0x459829 [ 3378.481050][T26863] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3378.481058][T26863] RSP: 002b:00007fa15ff8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3378.481072][T26863] RAX: ffffffffffffffda RBX: 00007fa15ff8ac90 RCX: 0000000000459829 [ 3378.481080][T26863] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000004 [ 3378.481087][T26863] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3378.481103][T26863] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa15ff8b6d4 [ 3378.557865][T26863] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000005 [ 3378.575476][T26863] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 3378.606989][T16957] Bluetooth: hci0: Frame reassembly failed (-84) 13:01:16 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x91ffffff00000000, 0x0, @remote, 0x9}, 0x1c) 13:01:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x545d, 0x4) 13:01:16 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:01:16 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x40000000}]) 13:01:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x5460, 0x4) 13:01:16 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x100000000000000}]) [ 3378.981047][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3380.650999][ T7114] Bluetooth: hci0: command 0x1003 tx timeout [ 3380.657233][T24945] Bluetooth: hci0: sending frame failed (-49) [ 3381.051054][ C1] net_ratelimit: 3 callbacks suppressed [ 3381.056720][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3381.770994][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3381.771024][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3381.776815][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3381.782720][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3382.731191][ T7114] Bluetooth: hci0: command 0x1001 tx timeout [ 3382.737346][T24945] Bluetooth: hci0: sending frame failed (-49) [ 3383.131179][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3383.850995][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3383.851055][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3383.856847][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3384.811180][T18092] Bluetooth: hci0: command 0x1009 tx timeout [ 3385.211092][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3387.291058][ C1] net_ratelimit: 4 callbacks suppressed [ 3387.297952][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3388.010999][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3388.011034][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3388.016848][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:01:26 executing program 1 (fault-call:4 fault-nth:5): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 13:01:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:26 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:01:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x6364, 0x4) 13:01:26 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x200000000000000}]) 13:01:26 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xe02e000000000000, 0x0, @remote, 0x9}, 0x1c) 13:01:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x8903, 0x4) 13:01:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:26 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x300000000000000}]) [ 3389.179006][T27372] FAULT_INJECTION: forcing a failure. [ 3389.179006][T27372] name failslab, interval 1, probability 0, space 0, times 0 [ 3389.263912][T27372] CPU: 1 PID: 27372 Comm: syz-executor.1 Not tainted 5.3.0-rc2+ #109 [ 3389.272121][T27372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3389.282210][T27372] Call Trace: [ 3389.285537][T27372] dump_stack+0x172/0x1f0 [ 3389.289897][T27372] should_fail.cold+0xa/0x15 [ 3389.294690][T27372] ? fault_create_debugfs_attr+0x180/0x180 [ 3389.300510][T27372] ? page_to_nid.part.0+0x20/0x20 [ 3389.305574][T27372] ? ___might_sleep+0x163/0x280 [ 3389.310435][T27372] __should_failslab+0x121/0x190 [ 3389.315382][T27372] should_failslab+0x9/0x14 [ 3389.320073][T27372] kmem_cache_alloc_trace+0x2d3/0x790 [ 3389.325570][T27372] ? pm_runtime_init+0x311/0x3b0 [ 3389.330525][T27372] ? device_initialize+0x1bd/0x460 [ 3389.335680][T27372] ll_open+0x46/0x380 [ 3389.339706][T27372] hci_uart_tty_ioctl+0x748/0xc00 [ 3389.344741][T27372] tty_ioctl+0xaf9/0x14f0 [ 3389.349085][T27372] ? hci_uart_init_work+0x180/0x180 [ 3389.354296][T27372] ? do_tty_hangup+0x30/0x30 [ 3389.359076][T27372] ? tomoyo_path_number_perm+0x459/0x520 [ 3389.364964][T27372] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3389.371424][T27372] ? tomoyo_path_number_perm+0x263/0x520 [ 3389.377547][T27372] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3389.383479][T27372] ? __kasan_check_read+0x11/0x20 [ 3389.388725][T27372] ? do_tty_hangup+0x30/0x30 [ 3389.393425][T27372] do_vfs_ioctl+0xdb6/0x13e0 [ 3389.398047][T27372] ? ioctl_preallocate+0x210/0x210 [ 3389.403433][T27372] ? __fget+0x384/0x560 [ 3389.407860][T27372] ? ksys_dup3+0x3e0/0x3e0 [ 3389.413465][T27372] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3389.413483][T27372] ? fput_many+0x12c/0x1a0 [ 3389.413502][T27372] ? tomoyo_file_ioctl+0x23/0x30 [ 3389.413526][T27372] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3389.413543][T27372] ? security_file_ioctl+0x8d/0xc0 [ 3389.413559][T27372] ksys_ioctl+0xab/0xd0 [ 3389.413574][T27372] __x64_sys_ioctl+0x73/0xb0 [ 3389.413593][T27372] do_syscall_64+0xfd/0x6a0 [ 3389.413613][T27372] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3389.413632][T27372] RIP: 0033:0x459829 [ 3389.424646][T27372] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3389.487864][T27372] RSP: 002b:00007fa15ff8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3389.496557][T27372] RAX: ffffffffffffffda RBX: 00007fa15ff8ac90 RCX: 0000000000459829 [ 3389.504530][T27372] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000004 13:01:27 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:01:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x8912, 0x4) [ 3389.512855][T27372] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3389.521258][T27372] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa15ff8b6d4 [ 3389.529314][T27372] R13: 00000000004c2526 R14: 00000000004d5988 R15: 0000000000000005 [ 3389.537692][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:01:27 executing program 1 (fault-call:4 fault-nth:6): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) 13:01:27 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x400000000000000}]) 13:01:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x8914, 0x4) 13:01:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:27 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:01:27 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x500000000000000}]) 13:01:27 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xe803000000000000, 0x0, @remote, 0x9}, 0x1c) 13:01:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x8916, 0x4) 13:01:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:27 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x700000000000000}]) 13:01:27 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:01:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) [ 3390.090977][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3390.090983][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3390.091043][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3390.096804][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:01:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x8933, 0x4) 13:01:27 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) [ 3390.281157][T28025] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 3390.320305][T21381] Bluetooth: hci0: Frame reassembly failed (-84) 13:01:27 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000000000}]) 13:01:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3390.336773][T21381] Bluetooth: hci0: Frame reassembly failed (-84) 13:01:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x8946, 0x4) 13:01:28 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:01:28 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xf401000000000000, 0x0, @remote, 0x9}, 0x1c) 13:01:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x894c, 0x4) 13:01:28 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xf00000000000000}]) 13:01:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:28 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) [ 3391.611046][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3392.330958][ T7114] Bluetooth: hci0: command 0x1003 tx timeout [ 3392.337139][T24945] Bluetooth: hci0: sending frame failed (-49) [ 3393.691069][ C1] net_ratelimit: 4 callbacks suppressed [ 3393.696708][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3394.250989][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3394.251045][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3394.256851][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3394.262608][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3394.411042][T18080] Bluetooth: hci0: command 0x1001 tx timeout [ 3394.417212][T24945] Bluetooth: hci0: sending frame failed (-49) [ 3395.771052][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3396.331031][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3396.331051][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3396.337351][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3396.490993][ T7114] Bluetooth: hci0: command 0x1009 tx timeout [ 3397.851067][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3399.931042][ C1] net_ratelimit: 4 callbacks suppressed [ 3399.931048][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3400.491023][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3400.491628][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3400.496862][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3400.502551][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:01:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x2, 0x4) 13:01:38 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1100000000000000}]) 13:01:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x8992, 0x4) 13:01:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:38 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:01:38 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xf5ffffff00000000, 0x0, @remote, 0x9}, 0x1c) 13:01:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x89a0, 0x4) 13:01:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a24"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:38 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3f00000000000000}]) 13:01:38 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:01:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x89a1, 0x4) 13:01:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x10, 0x4) 13:01:38 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4000000000000000}]) 13:01:38 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:01:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x89e6, 0x4) 13:01:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a24"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:38 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8000000000000000}]) 13:01:39 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfc00000000000000, 0x0, @remote, 0x9}, 0x1c) 13:01:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x127f, 0x4) 13:01:39 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:01:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x89f1, 0x4) 13:01:39 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}]) 13:01:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a24"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x89ff, 0x4) 13:01:39 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}]) 13:01:39 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:01:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x9204, 0x4) 13:01:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x2272, 0x4) [ 3402.011093][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:01:40 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfe80000000000000, 0x0, @remote, 0x9}, 0x1c) 13:01:40 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}]) 13:01:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xae01, 0x4) 13:01:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x2282, 0x4) 13:01:40 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:01:40 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) 13:01:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xae60, 0x4) 13:01:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3402.570982][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3402.570988][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3402.571050][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3402.576933][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:01:40 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:01:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x2285, 0x4) 13:01:40 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7}]) 13:01:40 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfec0000000000000, 0x0, @remote, 0x9}, 0x1c) 13:01:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x40044900, 0x4) 13:01:40 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:01:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:40 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}]) 13:01:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x4b32, 0x4) 13:01:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x40045431, 0x4) 13:01:41 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xf}]) 13:01:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:41 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:01:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x40045436, 0x4) 13:01:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x4b49, 0x4) 13:01:41 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xff00000000000000, 0x0, @remote, 0x9}, 0x1c) 13:01:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:41 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x11}]) 13:01:41 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:01:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400454ca, 0x4) 13:01:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x4b62, 0x4) 13:01:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400454cd, 0x4) 13:01:42 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x300}]) 13:01:42 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1, 0x0, 0x0, 0x0}, 0x0) 13:01:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x4b63, 0x4) 13:01:42 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x500}]) 13:01:42 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xff0f000000000000, 0x0, @remote, 0x9}, 0x1c) 13:01:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455cb, 0x4) 13:01:42 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x2) 13:01:42 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x700}]) 13:01:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x4c01, 0x4) 13:01:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x40047452, 0x4) 13:01:43 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xf00}]) 13:01:43 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x3) 13:01:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x5406, 0x4) 13:01:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:43 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffffffff00000000, 0x0, @remote, 0x9}, 0x1c) 13:01:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x40049409, 0x4) 13:01:43 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1100}]) 13:01:43 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x4) 13:01:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x5407, 0x4) [ 3406.171075][ C1] net_ratelimit: 5 callbacks suppressed [ 3406.171084][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:01:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x40087703, 0x4) 13:01:43 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3f00}]) 13:01:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x5409, 0x4) 13:01:44 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x7) 13:01:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x4010aeab, 0x4) [ 3406.730965][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3406.730980][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3406.736969][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3406.743163][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:01:44 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @remote, 0x9}, 0x1c) 13:01:44 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4000}]) 13:01:44 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x9) 13:01:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x4020940d, 0x4) 13:01:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x540b, 0x4) 13:01:44 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000000}]) 13:01:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x4020ae46, 0x4) 13:01:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:44 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0xa) 13:01:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x540c, 0x4) 13:01:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x40345410, 0x4) 13:01:45 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x3, @remote, 0x9}, 0x1c) 13:01:45 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000}]) 13:01:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:45 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0xe) 13:01:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x40345632, 0x4) 13:01:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x540d, 0x4) 13:01:45 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3000000}]) 13:01:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x4188aea7, 0x4) 13:01:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:45 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x10) [ 3408.251064][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:01:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x540e, 0x4) 13:01:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80045430, 0x4) [ 3408.810985][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3408.811052][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3408.816813][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:01:46 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x4, @remote, 0x9}, 0x1c) 13:01:46 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4000000}]) 13:01:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:46 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x11) 13:01:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80045432, 0x4) 13:01:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x540f, 0x4) 13:01:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80045438, 0x4) 13:01:46 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5000000}]) 13:01:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:01:46 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x28) 13:01:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x5410, 0x4) 13:01:46 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7000000}]) 13:01:47 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x5, @remote, 0x9}, 0x1c) 13:01:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80045439, 0x4) 13:01:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:01:47 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x60) 13:01:47 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8000000}]) 13:01:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x5412, 0x4) 13:01:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80045440, 0x4) 13:01:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:01:47 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xf000000}]) 13:01:47 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x300) 13:01:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x5413, 0x4) 13:01:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x800454d2, 0x4) [ 3410.331032][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:01:48 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x6, @remote, 0x9}, 0x1c) 13:01:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9a2413bb"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:01:48 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x11000000}]) 13:01:48 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x700) 13:01:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x800455c9, 0x4) 13:01:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x5414, 0x4) 13:01:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x800455ca, 0x4) 13:01:48 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3f000000}]) 13:01:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) seccomp(0x2, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 13:01:48 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x900) 13:01:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x5415, 0x4) 13:01:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x800455cc, 0x4) 13:01:49 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0xa00) 13:01:49 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40000000}]) 13:01:49 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000040)=0x4000001d, 0x6, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 13:01:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80084503, 0x4) 13:01:49 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7, @remote, 0x9}, 0x1c) 13:01:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x5416, 0x4) 13:01:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x8008563f, 0x4) 13:01:49 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000000000000}]) 13:01:49 executing program 3: epoll_create(0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') readv(r0, &(0x7f0000001a80)=[{&(0x7f0000000600)=""/115, 0x73}], 0x1) 13:01:49 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0xe00) 13:01:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x5418, 0x4) 13:01:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80086301, 0x4) 13:01:49 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x200000000000000}]) 13:01:49 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x1100) 13:01:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000000)={0xffffffe9}) 13:01:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x802c550a, 0x4) [ 3412.411081][ C1] net_ratelimit: 4 callbacks suppressed [ 3412.411089][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:01:50 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x8, @remote, 0x9}, 0x1c) 13:01:50 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x300000000000000}]) 13:01:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80345621, 0x4) 13:01:50 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x1448) 13:01:50 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000080)={0x18}, 0x18) finit_module(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000040), 0x0) 13:01:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x541d, 0x4) 13:01:50 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000000000}]) 13:01:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80386433, 0x4) 13:01:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) 13:01:50 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x2800) 13:01:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x541e, 0x4) [ 3412.970968][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3412.971003][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3412.976830][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:01:50 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x500000000000000}]) 13:01:51 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x9, @remote, 0x9}, 0x1c) 13:01:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x80885659, 0x4) 13:01:51 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x4000) 13:01:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x541f, 0x4) 13:01:51 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x700000000000000}]) 13:01:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc0045878, 0x4) 13:01:51 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x800000000000000}]) 13:01:51 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x4814) 13:01:51 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f0000001c80), 0x1000) 13:01:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc0045878, 0x4) 13:01:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x5420, 0x4) 13:01:51 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xf00000000000000}]) [ 3414.495809][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:01:52 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0xa, @remote, 0x9}, 0x1c) 13:01:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc0145401, 0x4) 13:01:52 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000040)=0x4000001d, 0x6, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 13:01:52 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x6000) 13:01:52 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1100000000000000}]) 13:01:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x5421, 0x4) 13:01:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc018620c, 0x4) 13:01:52 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3f00000000000000}]) 13:01:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc0189436, 0x4) 13:01:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x5422, 0x4) 13:01:52 executing program 3: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) mkdir(0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x4000201f, 0x3f004000}) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r3 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) fchdir(r3) memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) flistxattr(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) 13:01:52 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x34000) [ 3415.050981][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3415.050987][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3415.051054][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3415.056968][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:01:53 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0xe, @remote, 0x9}, 0x1c) 13:01:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc018aa3f, 0x4) 13:01:53 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000000}]) 13:01:53 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x400300) 13:01:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x3}, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 13:01:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x5423, 0x4) 13:01:53 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x1000000) 13:01:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc020660b, 0x4) 13:01:53 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000}]) 13:01:53 executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) getpid() open$dir(&(0x7f00000008c0)='./file0\x00', 0x43, 0x40) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0) 13:01:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc0405602, 0x4) 13:01:53 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x2000000) 13:01:53 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10, @remote, 0x9}, 0x1c) 13:01:53 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}]) 13:01:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x5424, 0x4) 13:01:53 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x88009, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/4\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x6857b21ff1155d91) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getresuid(0x0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0x225) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000300), 0x7fff) 13:01:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc0405665, 0x4) 13:01:53 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x3000000) 13:01:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0xc0485660, 0x4) 13:01:54 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}]) 13:01:54 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x4000000) [ 3416.571012][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:01:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) 13:01:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x5425, 0x4) 13:01:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) 13:01:54 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x11, @remote, 0x9}, 0x1c) 13:01:54 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}]) 13:01:54 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x7000000) 13:01:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x5427, 0x4) 13:01:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3) 13:01:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x5) 13:01:55 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x9000000) 13:01:55 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}]) 13:01:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x5428, 0x4) 13:01:55 executing program 3: 13:01:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x6) 13:01:55 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0xa000000) 13:01:55 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffff19000000bd7000ffffffff0000fffc0c00000010000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf50982f41739e23493df0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x48, @remote, 0x9}, 0x1c) 13:01:55 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}]) 13:01:55 executing program 3: 13:01:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x7) 13:01:55 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c10300ffffff890000021fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0xe000000) 13:01:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x5429, 0x4) 13:01:55 executing program 3: 13:01:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x8) 13:01:56 executing program 3: 13:01:56 executing program 4: r0 = socket$unix(0x1, 0x1000000000005, 0x0) io_setup(0x3ff, &(0x7f0000001280)=0x0) io_submit(r1, 0x2, &(0x7f00000018c0)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xf}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}]) [ 3418.457863][ T8361] debugfs: Directory 'hci0' with parent 'bluetooth' already present! [ 3418.506625][ T6504] ------------[ cut here ]------------ [ 3418.513222][ T6504] WARNING: CPU: 0 PID: 6504 at drivers/tty/tty_ioctl.c:319 tty_set_termios.cold+0x11/0x23 [ 3418.523165][ T6504] Kernel panic - not syncing: panic_on_warn set ... [ 3418.527286][ T3908] kobject: 'loop4' (00000000007c0822): kobject_uevent_env [ 3418.529790][ T6504] CPU: 0 PID: 6504 Comm: kworker/u5:0 Not tainted 5.3.0-rc2+ #109 [ 3418.529799][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3418.529820][ T6504] Workqueue: hci0 hci_power_on [ 3418.559746][ T3908] kobject: 'loop4' (00000000007c0822): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 3418.559996][ T6504] Call Trace: [ 3418.560030][ T6504] dump_stack+0x172/0x1f0 [ 3418.560053][ T6504] ? tty_unthrottle_safe+0xd0/0x17d [ 3418.582991][ T6504] panic+0x2dc/0x755 [ 3418.586912][ T6504] ? add_taint.cold+0x16/0x16 [ 3418.591610][ T6504] ? __kasan_check_write+0x14/0x20 [ 3418.596729][ T6504] ? __warn.cold+0x5/0x4c [ 3418.601152][ T6504] ? __warn+0xe7/0x1e0 [ 3418.605274][ T6504] ? tty_set_termios.cold+0x11/0x23 [ 3418.610487][ T6504] __warn.cold+0x20/0x4c [ 3418.614851][ T6504] ? tty_set_termios.cold+0x11/0x23 [ 3418.620085][ T6504] report_bug+0x263/0x2b0 [ 3418.624439][ T6504] do_error_trap+0x11b/0x200 [ 3418.629140][ T6504] do_invalid_op+0x37/0x50 [ 3418.633572][ T6504] ? tty_set_termios.cold+0x11/0x23 [ 3418.638790][ T6504] invalid_op+0x23/0x30 [ 3418.640243][ T3908] kobject: 'loop1' (00000000f3c15f7a): kobject_uevent_env [ 3418.642959][ T6504] RIP: 0010:tty_set_termios.cold+0x11/0x23 [ 3418.642974][ T6504] Code: ef e8 06 01 2c fe e9 e8 fe ff ff e8 fc 00 2c fe eb ae e8 f5 00 2c fe eb 84 e8 be e9 f1 fd 48 c7 c7 60 d4 d0 87 e8 06 8a db fd <0f> 0b e9 d5 d5 ff ff 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 [ 3418.642981][ T6504] RSP: 0018:ffff88806019f978 EFLAGS: 00010282 [ 3418.642993][ T6504] RAX: 0000000000000024 RBX: ffff88806019fa38 RCX: 0000000000000000 [ 3418.643001][ T6504] RDX: 0000000000000000 RSI: ffffffff815c5216 RDI: ffffed100c033f21 [ 3418.643023][ T6504] RBP: ffff88806019fa60 R08: 0000000000000024 R09: fffffbfff11b42a5 [ 3418.660213][ T3908] kobject: 'loop1' (00000000f3c15f7a): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 3418.676085][ T6504] R10: fffffbfff11b42a4 R11: ffffffff88da1523 R12: ffff88806019faa0 [ 3418.676093][ T6504] R13: 0000000000010004 R14: 1ffff1100c033f4e R15: ffff8880529f6380 [ 3418.676124][ T6504] ? vprintk_func+0x86/0x189 [ 3418.676145][ T6504] ? tty_set_termios.cold+0x11/0x23 [ 3418.676158][ T6504] ? hci_dev_do_open+0xa7/0x1940 [ 3418.676172][ T6504] ? tty_wait_until_sent+0x580/0x580 [ 3418.676191][ T6504] ? __mutex_lock+0x45d/0x13c0 [ 3418.676207][ T6504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3418.676230][ T6504] ? tty_termios_encode_baud_rate+0x3ca/0x4e0 [ 3418.769484][ T6504] hci_uart_set_baudrate+0x157/0x1c0 [ 3418.774781][ T6504] ? hci_uart_set_speeds+0x90/0x90 [ 3418.779920][ T6504] hci_uart_setup+0xa2/0x4a0 [ 3418.784515][ T6504] ? hci_uart_set_baudrate+0x1c0/0x1c0 [ 3418.790183][ T6504] hci_dev_do_open+0x3e3/0x1940 [ 3418.794903][ T3908] kobject: 'loop1' (00000000f3c15f7a): kobject_uevent_env [ 3418.795071][ T6504] ? debug_smp_processor_id+0x3c/0x214 [ 3418.805631][ T3908] kobject: 'loop1' (00000000f3c15f7a): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 3418.807622][ T6504] ? hci_rx_work+0xae0/0xae0 [ 3418.807648][ T6504] ? perf_trace_lock_acquire+0xf5/0x530 [ 3418.807668][ T6504] ? trace_hardirqs_off+0x62/0x240 [ 3418.833029][ T6504] ? __kasan_check_read+0x11/0x20 [ 3418.838157][ T6504] ? mark_held_locks+0xf0/0xf0 [ 3418.842943][ T6504] hci_power_on+0x12d/0x680 [ 3418.847456][ T6504] ? hci_error_reset+0xf0/0xf0 [ 3418.852234][ T6504] ? lock_acquire+0x190/0x410 [ 3418.857036][ T6504] ? process_one_work+0x8c1/0x1740 [ 3418.862152][ T6504] ? trace_hardirqs_on+0x67/0x240 [ 3418.867186][ T6504] process_one_work+0x9af/0x1740 [ 3418.872141][ T6504] ? pwq_dec_nr_in_flight+0x320/0x320 [ 3418.877520][ T6504] ? lock_acquire+0x190/0x410 [ 3418.882213][ T6504] worker_thread+0x98/0xe40 [ 3418.886727][ T6504] ? trace_hardirqs_on+0x67/0x240 [ 3418.886953][ T3908] kobject: 'loop3' (0000000077d431aa): kobject_uevent_env [ 3418.891760][ T6504] kthread+0x361/0x430 [ 3418.891776][ T6504] ? process_one_work+0x1740/0x1740 [ 3418.891790][ T6504] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 3418.891806][ T6504] ret_from_fork+0x24/0x30 [ 3418.900476][ T6504] Kernel Offset: disabled [ 3418.924654][ T6504] Rebooting in 86400 seconds..