0 [ 524.964032] protocol 88fb is buggy, dev hsr_slave_1 [ 525.278946] protocol 88fb is buggy, dev hsr_slave_0 [ 525.284115] protocol 88fb is buggy, dev hsr_slave_1 12:06:06 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:06:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) 12:06:06 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x2000000000000000, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:06:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:06:06 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x1f, 0x7, &(0x7f0000000440)=[{&(0x7f0000000080)="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", 0xfd, 0x2}, {&(0x7f0000000180)="3b68b159b6f3e877bbbf03657adb478ab95fcb7992be8cc8af5bd2308067437ca9e574b9eef42cc8b0f3005ec7a5f37b2e52e31dd17bd7a851264012fd3512c0ae5eac6aa7565d633d494223f91185f12ed4ca362eb7b86a3b1abd8bad3505c8cab4bee55d7b93c14e7e1a13a972016e4553b384977f56bce2c5c20ed65cfea4dc6591c050384c50eaf09d015dace9737e779e2218e00affcc3328cdc21160a65d6a15ca64e10ad2d22d39d7819e2a173e239fd4c682211d67a1cef6", 0xbc, 0x5}, {&(0x7f0000000c00)="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", 0x1000, 0x6}, {&(0x7f0000000240)="230601016c52b6f986f19321c9bb189142ceb8584b8bbb60bc668a228f4ca5482b41a88eba419211bf92f7670bd2e2c3d5776eb1a11eefcb571c21b47fdd7212537bd69b6369f7db0407", 0x4a, 0x6}, {&(0x7f00000002c0)="e62ee5936595b3624863a7191732691ef8528bc3c842e3c49e9f122b380133ad6f1d0e64557d8d65230451acd9224112464f2f5f4a3a1d80a943bd362e4973545dee54a239ba07b9a7178a47577458695e908c1e6ca24066326ad480b34eee0d3fe9baa85891b595ddceb0446f370c1b0212fcafd6088c950cebedf9e23282bd2536c8e560ef7e8f756274196fe945696dd33072b778a81eedfe5b4e854f9fc25d5d", 0xa2, 0x9}, {&(0x7f0000000380), 0x0, 0x1000}, {&(0x7f00000003c0)="caf7a262cc8188c231c1e36fccba85f707ebc19d356b1f2b1b069ecc8fef7e1aaf995f4d18850a0f68b2700c6348b0490f82dba43fb58706868c6a4259aebc9e67cfde69a2b1ec0e8c321b4d8abddc09508b912aaa328eec3c50432e", 0x5c, 0x4}], 0x20000, &(0x7f0000000500)='\'security\x00') [ 526.238868] Bluetooth: hci0: command 0x1003 tx timeout [ 526.244282] Bluetooth: hci0: sending frame failed (-49) [ 526.353008] rdma_op 000000007094328e conn xmit_rdma (null) [ 526.360616] xt_cluster: node mask cannot exceed total number of nodes 12:06:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 12:06:06 executing program 3: r0 = creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r3, 0x4, 0x3, 0x8}, 0x10) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)='\'ppp0\x00') 12:06:06 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x6000000000000000, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 526.507280] xt_cluster: node mask cannot exceed total number of nodes 12:06:06 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 12:06:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)=0xffb7) accept4$nfc_llcp(r1, &(0x7f0000000080), &(0x7f0000000140)=0x60, 0x800) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)=0xffb7) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x1f) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f0000bb0000/0x2000)=nil, 0x2000, 0x54) [ 526.672166] rdma_op 0000000056d56b18 conn xmit_rdma (null) [ 526.692535] xt_cluster: node mask cannot exceed total number of nodes [ 528.318906] Bluetooth: hci0: command 0x1001 tx timeout [ 528.324423] Bluetooth: hci0: sending frame failed (-49) [ 529.449086] net_ratelimit: 21 callbacks suppressed [ 529.449092] protocol 88fb is buggy, dev hsr_slave_0 [ 529.459281] protocol 88fb is buggy, dev hsr_slave_1 [ 529.464366] protocol 88fb is buggy, dev hsr_slave_0 [ 529.469456] protocol 88fb is buggy, dev hsr_slave_1 [ 530.318951] protocol 88fb is buggy, dev hsr_slave_0 [ 530.324209] protocol 88fb is buggy, dev hsr_slave_1 [ 530.398971] Bluetooth: hci0: command 0x1009 tx timeout [ 530.479239] protocol 88fb is buggy, dev hsr_slave_0 [ 530.479486] protocol 88fb is buggy, dev hsr_slave_0 [ 530.484387] protocol 88fb is buggy, dev hsr_slave_1 [ 530.489339] protocol 88fb is buggy, dev hsr_slave_1 12:06:14 executing program 0 (fault-call:2 fault-nth:33): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:06:14 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') 12:06:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x4400a0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') mknod(&(0x7f0000000000)='./file0\x00', 0xc000, 0x5) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000b44000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="c4a14ddb8cad83a00000650f0866baf80cb8901ad18aef66bafc0c66edf20f1850a8c402c5927485f265430fa00f328f68c4a2850ccbab875526ded148b823502283000000000f23d00f21f835300000010f23f8", 0x54}], 0x1, 0x12, &(0x7f0000000180)=[@flags, @cr4={0x1, 0x40}], 0x2) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 12:06:14 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:06:14 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xfc00000000000000, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:06:14 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:06:14 executing program 3: r0 = creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000140)=0x3) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) unlink(&(0x7f0000000bc0)='./file0\x00') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x800, 0x0) r3 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r3, 0x0, 0x0, 0x0) pwrite64(r3, &(0x7f0000000180)="81bcd598fe43327e877315059126f45ac621be69dac859b86c66e8332d904d2f02ef2568d27f7b67e4880c1ab5e60060309cfc6cedbc402788ed567d7f0cced67af369f85831d72f61cc96f7ce25641d138afa387abe70cd56c8ac4e354f191dd9435f", 0x63, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000100)) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000002c0)={0x3ff, 0x1, 0x9, 0x2a, 0x544b68c4}, 0xc) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)) [ 534.379673] rdma_op 00000000b7d8c2aa conn xmit_rdma (null) [ 534.393772] xt_cluster: node mask cannot exceed total number of nodes [ 534.413434] FAULT_INJECTION: forcing a failure. [ 534.413434] name failslab, interval 1, probability 0, space 0, times 0 [ 534.442179] CPU: 0 PID: 14244 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 534.449165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.458533] Call Trace: [ 534.461154] dump_stack+0x172/0x1f0 [ 534.464810] should_fail.cold+0xa/0x1b [ 534.468728] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 534.473848] ? lock_downgrade+0x810/0x810 [ 534.478047] __should_failslab+0x121/0x190 [ 534.482305] should_failslab+0x9/0x14 [ 534.486121] kmem_cache_alloc_node+0x26c/0x710 12:06:14 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xfe80000000000000, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 534.490720] ? find_held_lock+0x35/0x130 [ 534.494796] __alloc_skb+0xd5/0x5f0 [ 534.498435] ? skb_scrub_packet+0x490/0x490 [ 534.502774] ? kasan_check_read+0x11/0x20 [ 534.506951] alloc_uevent_skb+0x83/0x1e2 [ 534.511030] kobject_uevent_env+0xaa3/0x101d [ 534.515551] kobject_uevent+0x20/0x26 [ 534.519363] device_add+0xb3a/0x1760 [ 534.523075] ? get_device_parent.isra.0+0x570/0x570 [ 534.528080] ? start_creating+0x163/0x1e0 [ 534.532240] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 534.537787] hci_register_dev+0x304/0x880 [ 534.541935] hci_uart_tty_ioctl+0x761/0xaf0 [ 534.546253] tty_ioctl+0x8b5/0x1510 [ 534.549877] ? hci_uart_init_work+0x140/0x140 [ 534.554378] ? tty_vhangup+0x30/0x30 [ 534.558087] ? mark_held_locks+0x100/0x100 [ 534.562394] ? __fget+0x340/0x540 [ 534.565850] ? __might_sleep+0x95/0x190 [ 534.569842] ? tty_vhangup+0x30/0x30 [ 534.573555] do_vfs_ioctl+0xd5f/0x1380 [ 534.577431] ? selinux_file_ioctl+0x46f/0x5e0 [ 534.581925] ? selinux_file_ioctl+0x125/0x5e0 [ 534.586420] ? ioctl_preallocate+0x210/0x210 [ 534.590831] ? selinux_file_mprotect+0x620/0x620 [ 534.595598] ? iterate_fd+0x360/0x360 [ 534.599401] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 534.604938] ? fput+0x128/0x1a0 [ 534.608212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 534.613738] ? security_file_ioctl+0x8d/0xc0 [ 534.618135] ksys_ioctl+0xab/0xd0 [ 534.621597] __x64_sys_ioctl+0x73/0xb0 [ 534.625484] do_syscall_64+0xfd/0x620 [ 534.629289] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 534.634518] RIP: 0033:0x4598e9 12:06:14 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) [ 534.637696] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 534.638897] net_ratelimit: 18 callbacks suppressed [ 534.638904] protocol 88fb is buggy, dev hsr_slave_0 [ 534.656589] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 534.656608] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 534.656617] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 12:06:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8a204, 0x0) read$FUSE(r1, &(0x7f0000000140), 0x1000) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) [ 534.656625] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 534.656633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 534.656641] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 534.656912] protocol 88fb is buggy, dev hsr_slave_0 [ 534.661646] protocol 88fb is buggy, dev hsr_slave_1 [ 534.666653] protocol 88fb is buggy, dev hsr_slave_1 [ 534.726002] protocol 88fb is buggy, dev hsr_slave_0 [ 534.731125] protocol 88fb is buggy, dev hsr_slave_1 12:06:14 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xffb7) getpeername$ax25(r0, &(0x7f0000000200)={{0x3, @null}, [@null, @default, @bcast, @remote, @null, @default, @remote, @netrom]}, &(0x7f0000000280)=0x48) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x8f73, 0x2, &(0x7f0000000180)=[{&(0x7f0000000080)="6385ed5561dafdb814b166339d9d63c5f9c6af41fe3b4ab6e3c1a9caf313254841cac11887ab793a40275cb42355c0aced4de89fd06d1d9af64de413e312dfe60c1806bdf1e1a15a70116be3e6af9c7105f908871e7fe601940b7a0d50", 0x5d, 0x925}, {&(0x7f0000000100)="7a90a4f846f85bf4bdc271547a72ae210a65639f34aede128506089377b3954f71acaa9d7898ee0657389de178812ed315f956a9c8d6e792eea53f3aa8c875a3053b2703e3e58944f1eb", 0x4a, 0x7f}], 0x90006, &(0x7f00000001c0)) unlink(&(0x7f0000000bc0)='./file0\x00') [ 534.845606] rdma_op 00000000bfb5d9fd conn xmit_rdma (null) 12:06:14 executing program 4: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x4, 0x1b, 0x4, 0x14, 0x5, 0xffffffffffffff8c, 0x2, 0x106}}) sched_yield() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x408440, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$unix(0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)=0xffb7) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x2c) [ 534.893181] xt_cluster: node mask cannot exceed total number of nodes [ 535.358893] protocol 88fb is buggy, dev hsr_slave_0 [ 535.363997] protocol 88fb is buggy, dev hsr_slave_1 [ 535.678911] protocol 88fb is buggy, dev hsr_slave_0 [ 535.684050] protocol 88fb is buggy, dev hsr_slave_1 [ 536.808956] Bluetooth: hci0: command 0x1003 tx timeout [ 536.814441] Bluetooth: hci0: sending frame failed (-49) [ 538.878958] Bluetooth: hci0: command 0x1001 tx timeout [ 538.884371] Bluetooth: hci0: sending frame failed (-49) [ 539.838983] net_ratelimit: 22 callbacks suppressed [ 539.843970] protocol 88fb is buggy, dev hsr_slave_0 [ 539.849007] protocol 88fb is buggy, dev hsr_slave_1 [ 539.854082] protocol 88fb is buggy, dev hsr_slave_0 [ 539.859110] protocol 88fb is buggy, dev hsr_slave_1 [ 540.878911] protocol 88fb is buggy, dev hsr_slave_0 [ 540.884000] protocol 88fb is buggy, dev hsr_slave_1 [ 540.958930] Bluetooth: hci0: command 0x1009 tx timeout [ 540.958966] protocol 88fb is buggy, dev hsr_slave_0 [ 540.969341] protocol 88fb is buggy, dev hsr_slave_1 [ 540.974416] protocol 88fb is buggy, dev hsr_slave_0 [ 540.979511] protocol 88fb is buggy, dev hsr_slave_1 [ 545.038959] net_ratelimit: 18 callbacks suppressed [ 545.043954] protocol 88fb is buggy, dev hsr_slave_0 [ 545.049008] protocol 88fb is buggy, dev hsr_slave_1 [ 545.118986] protocol 88fb is buggy, dev hsr_slave_0 [ 545.124120] protocol 88fb is buggy, dev hsr_slave_1 [ 545.129264] protocol 88fb is buggy, dev hsr_slave_0 [ 545.134365] protocol 88fb is buggy, dev hsr_slave_1 12:06:25 executing program 0 (fault-call:2 fault-nth:34): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:06:25 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:06:25 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xfec0000000000000, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:06:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000140)={0x40, 0x10, &(0x7f0000000040)="445c13dc09ac569191d0714987ebf05f0e63d8499065adcd93ebd2b454398ebbded67f475a676d3514ab0cc9a6c4feba372aa92f5806ffb6f8fe8938895feb820b2f534421ed3c8a4e3f30a3ce888cce993d3e0d945a0ef1881259deaedd6ba9fbe3dafee0233f8e13e651ebdd4c2033f7d6932640090f8d7022f9e3ebd7498ae44377a4f3e8cdc1b03336c556d9634ec85184c68da9db96b82c3e509a13a13e758911015ee3e5ba2ed2eaf598873943ebd92bc257a26efa78701c3d4e27a8", {0x7, 0xffffffff, 0x30313953, 0x4, 0x10000, 0x10000, 0x8, 0x5}}) 12:06:25 executing program 3: r0 = creat(&(0x7f0000000840)='./file1\x00', 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xffffffff, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x1, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fff, 0x141a01) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e21, 0x800, @local, 0x2}}, 0x3, 0x2, 0x1, 0x2, 0x4}, 0x98) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file1\x00', 0x0, 0x30c, 0x0, 0x8b000, 0x0) accept4(r0, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f0000000080)=0x80, 0x800) unlink(&(0x7f0000000bc0)='./file0\x00') 12:06:25 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 545.254046] rdma_op 0000000012d58a33 conn xmit_rdma (null) [ 545.259168] xt_cluster: node mask cannot exceed total number of nodes 12:06:25 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:06:25 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:06:25 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x3, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') [ 545.309563] FAULT_INJECTION: forcing a failure. [ 545.309563] name failslab, interval 1, probability 0, space 0, times 0 [ 545.353391] CPU: 0 PID: 14510 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 545.360372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 545.369746] Call Trace: [ 545.372357] dump_stack+0x172/0x1f0 [ 545.376001] should_fail.cold+0xa/0x1b [ 545.379923] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 545.385046] ? lock_downgrade+0x810/0x810 [ 545.389226] __should_failslab+0x121/0x190 [ 545.393481] should_failslab+0x9/0x14 [ 545.397301] kmem_cache_alloc_node_trace+0x274/0x720 12:06:25 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 545.402421] ? __alloc_skb+0xd5/0x5f0 [ 545.402857] xt_cluster: node mask cannot exceed total number of nodes [ 545.406234] __kmalloc_node_track_caller+0x3d/0x80 [ 545.406255] __kmalloc_reserve.isra.0+0x40/0xf0 [ 545.406271] __alloc_skb+0x10b/0x5f0 [ 545.426256] ? skb_scrub_packet+0x490/0x490 [ 545.430594] ? kasan_check_read+0x11/0x20 [ 545.434765] alloc_uevent_skb+0x83/0x1e2 [ 545.438840] kobject_uevent_env+0xaa3/0x101d [ 545.443362] kobject_uevent+0x20/0x26 [ 545.447180] device_add+0xb3a/0x1760 [ 545.450921] ? get_device_parent.isra.0+0x570/0x570 [ 545.455940] ? start_creating+0x163/0x1e0 [ 545.460093] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 545.465637] hci_register_dev+0x304/0x880 [ 545.469802] hci_uart_tty_ioctl+0x761/0xaf0 [ 545.474129] tty_ioctl+0x8b5/0x1510 [ 545.477744] ? hci_uart_init_work+0x140/0x140 [ 545.482226] ? tty_vhangup+0x30/0x30 [ 545.485925] ? mark_held_locks+0x100/0x100 [ 545.490170] ? __fget+0x340/0x540 [ 545.493623] ? __might_sleep+0x95/0x190 [ 545.497627] ? tty_vhangup+0x30/0x30 [ 545.501342] do_vfs_ioctl+0xd5f/0x1380 [ 545.505227] ? selinux_file_ioctl+0x46f/0x5e0 [ 545.509723] ? selinux_file_ioctl+0x125/0x5e0 [ 545.514238] ? ioctl_preallocate+0x210/0x210 [ 545.518631] ? selinux_file_mprotect+0x620/0x620 [ 545.523377] ? iterate_fd+0x360/0x360 [ 545.527165] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 545.532691] ? fput+0x128/0x1a0 [ 545.535960] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 545.541493] ? security_file_ioctl+0x8d/0xc0 [ 545.545900] ksys_ioctl+0xab/0xd0 [ 545.549358] __x64_sys_ioctl+0x73/0xb0 [ 545.553244] do_syscall_64+0xfd/0x620 [ 545.557034] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 545.562208] RIP: 0033:0x4598e9 [ 545.565385] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 545.584369] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 545.592083] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 545.599350] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 545.606628] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 545.613900] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 545.621161] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 12:06:25 executing program 3: r0 = creat(&(0x7f0000000840)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') 12:06:25 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xfeffffff00000000, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 545.758903] protocol 88fb is buggy, dev hsr_slave_0 [ 545.764044] protocol 88fb is buggy, dev hsr_slave_1 [ 545.791294] xt_cluster: node mask cannot exceed total number of nodes [ 545.880374] rdma_op 000000000fede8d2 conn xmit_rdma (null) [ 546.078915] protocol 88fb is buggy, dev hsr_slave_0 [ 546.084111] protocol 88fb is buggy, dev hsr_slave_1 [ 547.678979] Bluetooth: hci0: command 0x1003 tx timeout [ 547.684382] Bluetooth: hci0: sending frame failed (-49) [ 549.758984] Bluetooth: hci0: command 0x1001 tx timeout [ 549.764416] Bluetooth: hci0: sending frame failed (-49) [ 550.238981] net_ratelimit: 22 callbacks suppressed [ 550.243966] protocol 88fb is buggy, dev hsr_slave_0 [ 550.249044] protocol 88fb is buggy, dev hsr_slave_1 [ 550.254106] protocol 88fb is buggy, dev hsr_slave_0 [ 550.259169] protocol 88fb is buggy, dev hsr_slave_1 [ 551.278929] protocol 88fb is buggy, dev hsr_slave_0 [ 551.284058] protocol 88fb is buggy, dev hsr_slave_1 [ 551.358952] protocol 88fb is buggy, dev hsr_slave_0 [ 551.364082] protocol 88fb is buggy, dev hsr_slave_1 [ 551.369259] protocol 88fb is buggy, dev hsr_slave_0 [ 551.374367] protocol 88fb is buggy, dev hsr_slave_1 [ 551.838941] Bluetooth: hci0: command 0x1009 tx timeout [ 555.438995] net_ratelimit: 18 callbacks suppressed [ 555.439004] protocol 88fb is buggy, dev hsr_slave_0 [ 555.449173] protocol 88fb is buggy, dev hsr_slave_1 [ 555.519061] protocol 88fb is buggy, dev hsr_slave_0 [ 555.524265] protocol 88fb is buggy, dev hsr_slave_1 [ 555.529440] protocol 88fb is buggy, dev hsr_slave_0 [ 555.534521] protocol 88fb is buggy, dev hsr_slave_1 12:06:36 executing program 0 (fault-call:2 fault-nth:35): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:06:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r1, 0x0, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={r5, 0x7, 0x6, 0x8, 0x1f, 0x3, 0xbe6b, 0x1000, {0x0, @in6={{0xa, 0x4e22, 0x787, @mcast2, 0x4fc8}}, 0x4, 0x40, 0x3, 0x3, 0x5}}, &(0x7f00000000c0)=0xb0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r9 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r9, 0x0, 0x0, 0x0) r10 = accept4$inet(r9, &(0x7f0000000380)={0x2, 0x0, @broadcast}, &(0x7f00000003c0)=0x10, 0x80800) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000000400)={r13, @in6={{0xa, 0x4e20, 0x4, @mcast2, 0x8000}}}, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000019274c79332e3378fe1c219574454929fe59f4369e050e441d52d33db86f28d94d99c07593ed", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000580)=ANY=[@ANYRES32=r14, @ANYBLOB="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"], &(0x7f0000000240)=0xd0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000280)={r6, 0x8001, 0xea, 0x1, 0x6, 0xea7b, 0xffffffff, 0x2, {r15, @in={{0x2, 0x4e23, @empty}}, 0xffffffffffffd1d6, 0x200, 0x7e6, 0x200, 0x8}}, &(0x7f0000000340)=0xb0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) r16 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00'}, 0x10) dup2(r9, r16) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) socket$inet6_sctp(0xa, 0x1, 0x84) 12:06:36 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xff00000000000000, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:06:36 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000040), 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x1000000000ffff}, {0x0, 0x7}], 0x2) semop(r0, &(0x7f0000000000)=[{0x0, 0xb}], 0x1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x9, 0x800}, {0x0, 0x6, 0x400}], 0x2, &(0x7f0000000080)={r1, r2+30000000}) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000100)=0xfffffffffffffffc, 0x4, 0x1) unlink(&(0x7f0000000bc0)='./file0\x00') 12:06:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:06:36 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492191, 0x0) r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 556.131449] rdma_op 000000005df1aed8 conn xmit_rdma (null) [ 556.154746] xt_cluster: node mask cannot exceed total number of nodes [ 556.161567] protocol 88fb is buggy, dev hsr_slave_0 [ 556.161627] protocol 88fb is buggy, dev hsr_slave_1 [ 556.202386] FAULT_INJECTION: forcing a failure. [ 556.202386] name failslab, interval 1, probability 0, space 0, times 0 [ 556.219072] CPU: 1 PID: 14777 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 556.226041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 556.226048] Call Trace: [ 556.226077] dump_stack+0x172/0x1f0 [ 556.241745] should_fail.cold+0xa/0x1b [ 556.245649] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 556.250763] ? lock_downgrade+0x810/0x810 [ 556.254933] __should_failslab+0x121/0x190 [ 556.259182] should_failslab+0x9/0x14 [ 556.263003] kmem_cache_alloc+0x2ae/0x700 [ 556.267168] ? refcount_add_not_zero_checked+0x240/0x240 [ 556.272717] ? lock_downgrade+0x810/0x810 [ 556.276907] skb_clone+0x156/0x3e0 [ 556.280572] netlink_broadcast_filtered+0x86e/0xb20 [ 556.285616] netlink_broadcast+0x3a/0x50 [ 556.289706] kobject_uevent_env+0xad4/0x101d [ 556.294130] kobject_uevent+0x20/0x26 [ 556.297926] device_add+0xb3a/0x1760 [ 556.301637] ? get_device_parent.isra.0+0x570/0x570 [ 556.306643] ? start_creating+0x163/0x1e0 [ 556.310782] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 556.316397] hci_register_dev+0x304/0x880 [ 556.320552] hci_uart_tty_ioctl+0x761/0xaf0 [ 556.324866] tty_ioctl+0x8b5/0x1510 [ 556.328483] ? hci_uart_init_work+0x140/0x140 [ 556.332966] ? tty_vhangup+0x30/0x30 [ 556.336668] ? mark_held_locks+0x100/0x100 [ 556.340908] ? __fget+0x340/0x540 [ 556.344351] ? __might_sleep+0x95/0x190 [ 556.348412] ? tty_vhangup+0x30/0x30 [ 556.352117] do_vfs_ioctl+0xd5f/0x1380 [ 556.355996] ? selinux_file_ioctl+0x46f/0x5e0 [ 556.360489] ? selinux_file_ioctl+0x125/0x5e0 [ 556.364972] ? ioctl_preallocate+0x210/0x210 [ 556.369389] ? selinux_file_mprotect+0x620/0x620 [ 556.374164] ? iterate_fd+0x360/0x360 [ 556.378020] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 556.383550] ? fput+0x128/0x1a0 [ 556.386825] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 556.392352] ? security_file_ioctl+0x8d/0xc0 [ 556.396752] ksys_ioctl+0xab/0xd0 [ 556.400193] __x64_sys_ioctl+0x73/0xb0 [ 556.404074] do_syscall_64+0xfd/0x620 [ 556.407864] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 556.413082] RIP: 0033:0x4598e9 [ 556.416371] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 556.435307] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.443042] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 12:06:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:06:36 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xffffff7f00000000, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 556.450307] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 556.457573] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 556.464869] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 556.472125] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 556.486678] Bluetooth: hci0: Frame reassembly failed (-84) [ 556.492610] protocol 88fb is buggy, dev hsr_slave_0 [ 556.492661] protocol 88fb is buggy, dev hsr_slave_1 12:06:36 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x1) unlink(&(0x7f0000000bc0)='./file0\x00') 12:06:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) [ 556.561105] rdma_op 00000000fc121d9e conn xmit_rdma (null) [ 556.588157] xt_cluster: node mask cannot exceed total number of nodes 12:06:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') bpf$OBJ_GET_PROG(0x7, &(0x7f00000007c0)={&(0x7f0000000780)='./file\xff\xff\x00', 0x0, 0x10}, 0x10) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000)=0xffb7) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@initdev}}, &(0x7f0000000340)=0xfffffffffffffe3f) r6 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r6, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) r8 = creat(&(0x7f0000000700)='./bus\x00', 0x0) name_to_handle_at(r8, &(0x7f00002e4000)='./file\xff\xff', &(0x7f0000000080)=ANY=[], 0x0, 0x1400) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000100)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@mcast2}}, &(0x7f0000000740)=0xffffffffffffff4e) accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14, 0x800) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x80) r13 = socket$inet_sctp(0x2, 0x5, 0x84) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x80) connect(r13, &(0x7f0000000040)=@xdp={0x2c, 0x6, r14, 0x38}, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000380)=""/15, 0xf}], 0x2, &(0x7f0000000400)=""/47, 0x2f}, 0x3}, {{&(0x7f0000000440)=@xdp, 0x80, &(0x7f0000000e80)=[{&(0x7f00000004c0)=""/233, 0xe9}, {&(0x7f0000000b00)=""/138, 0x8a}, {&(0x7f00000005c0)=""/1, 0x1}, {&(0x7f0000000bc0)=""/233, 0xe9}, {&(0x7f0000000600)=""/53, 0x35}, {&(0x7f0000000cc0)=""/60, 0x3c}, {&(0x7f0000000d40)=""/166, 0xa6}, {&(0x7f0000000e00)=""/24, 0x18}, {&(0x7f0000000e40)=""/2, 0x2}], 0x9, &(0x7f0000000f40)=""/83, 0x53}, 0x2}, {{&(0x7f00000013c0), 0x80, &(0x7f00000028c0)=[{&(0x7f0000001440)=""/68, 0x44}, {&(0x7f00000014c0)=""/47, 0x2f}, {&(0x7f0000001500)=""/39, 0x27}, {&(0x7f0000001540)=""/202, 0xca}, {&(0x7f0000001640)=""/87, 0x57}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/217, 0xd9}, {&(0x7f00000027c0)=""/37, 0x25}, {&(0x7f0000002800)=""/153, 0x99}], 0x9}, 0x9}, {{&(0x7f0000002980)=@ll={0x11, 0x0, 0x0}, 0x80, 0x0, 0x0, &(0x7f0000002a80)=""/4096, 0x1000}, 0xff}, {{&(0x7f0000003a80)=@rc, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/29, 0x1d}, 0x4}], 0x5, 0x40000000, &(0x7f0000003fc0)={0x77359400}) accept4$packet(0xffffffffffffffff, &(0x7f00000041c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004200)=0x14, 0x80c00) r17 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r17, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000004880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004840)={&(0x7f0000004240)=ANY=[@ANYRES64=r17, @ANYRES16, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9, @ANYBLOB="b80002004000018e194cd9058c765bd733411ddbedb100240001006c625f707b3b9f72745f737461747300000000000000000000080003000b0000000600000000000000", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400230000003c0001002400010075736572f06c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="0800010064df2cfbfb4d747345afc744ab82757fa67c516c2e723da0eb4e1c1a3b0a3600d0a19b30973e88d785bb9a36e20e62d65adfdd8a2f1efdbe6b950ea1ee739025571c3ec90925ddfeb2f17c7837309bc9c0c27cae5028aee3dea086c5c15ee8b497d04a8be88a58715081182081765666f9f1b541230335a8b6233ca7b4bade8cf006aa18101b4f70165c75e4edc5cc6e0e82f73992086c99b14e8abdb65d949c206407b717fc097d6299888a526e966a8c1fdc8d6cf029ee79190a88c09e8690b5ecac38bcc690be4e499aa6c416e791c74dddbac81b64a8f8d0b76c9b27fba5f5829bb25182584c5e47e5e9219b0665ab7400245f7ba1e535cb79173700dd7deea4e8dbd303325e6ab5e7f660c8c454e9e0dba75a232993010d038e64ba8869ac4bc34e600a23d6d61956ce48502af29a91f9ad9b2a4212de00096e15a2117807c0", @ANYRESDEC=r15, @ANYRESDEC=r10, @ANYRES32=r11, @ANYRES16, @ANYBLOB="9776cf2d0d56df5b68fc19c44652f2414cdeadca250825f2234deb735b7bb1446ae357f268ee442ae7ed8189d94e48897ba008f5e4eb1ea52ec99c9c51e5ba4dec2ee18afc538c53d38cb4eaaaa60400e7b69f02dc496fd22ccace47", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756f740000000100000000000000000000080003000300ff7f080004000400000008000100", @ANYRES32=r12, @ANYBLOB="a0010200400001002400010071756575655f696c0000000000000000", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000c3cf2a2e1a9804df17db21f5eda5420000040004000800ffffff7f000000000000000000000000950e7389ce0bdc704839b66ac7f83e797da73964450b0440fcd5f4a7ab6764e86112326380967e8492ad4a605c", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e7400000000", @ANYRES32, @ANYBLOB="9473745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400040000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c00040000007400810000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600"/174, @ANYRES32=r16, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000100000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000010000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000700000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000008000300030000000800040001000000"], 0x1e}, 0x1, 0x0, 0x0, 0x40881}, 0x24000000) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11cf7fb7f7d2bb75}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x11c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x100, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x7, 0x9}}}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x5040}, 0x800) r18 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r18, 0x4030582a, &(0x7f0000000000)=0xffb7) getsockopt$bt_l2cap_L2CAP_OPTIONS(r18, 0x6, 0x1, &(0x7f0000000680), &(0x7f00000006c0)=0xc) 12:06:36 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xffffffff00000000, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:06:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 556.724263] xt_cluster: node mask cannot exceed total number of nodes [ 556.805141] rdma_op 000000004bf9b9a6 conn xmit_rdma (null) [ 556.834175] xt_cluster: node mask cannot exceed total number of nodes [ 558.559056] Bluetooth: hci0: command 0x1003 tx timeout [ 558.564462] Bluetooth: hci0: sending frame failed (-49) [ 560.638910] Bluetooth: hci0: command 0x1001 tx timeout [ 560.638917] net_ratelimit: 22 callbacks suppressed [ 560.638928] protocol 88fb is buggy, dev hsr_slave_0 [ 560.644381] Bluetooth: hci0: sending frame failed (-49) [ 560.649393] protocol 88fb is buggy, dev hsr_slave_1 [ 560.664824] protocol 88fb is buggy, dev hsr_slave_0 [ 560.669915] protocol 88fb is buggy, dev hsr_slave_1 [ 561.678898] protocol 88fb is buggy, dev hsr_slave_0 [ 561.684050] protocol 88fb is buggy, dev hsr_slave_1 [ 561.758961] protocol 88fb is buggy, dev hsr_slave_0 [ 561.764127] protocol 88fb is buggy, dev hsr_slave_1 [ 561.769270] protocol 88fb is buggy, dev hsr_slave_0 [ 561.774339] protocol 88fb is buggy, dev hsr_slave_1 [ 562.718859] Bluetooth: hci0: command 0x1009 tx timeout [ 565.838990] net_ratelimit: 18 callbacks suppressed [ 565.839001] protocol 88fb is buggy, dev hsr_slave_0 [ 565.849088] protocol 88fb is buggy, dev hsr_slave_1 [ 565.918912] protocol 88fb is buggy, dev hsr_slave_0 [ 565.924036] protocol 88fb is buggy, dev hsr_slave_1 [ 565.929243] protocol 88fb is buggy, dev hsr_slave_0 [ 565.934419] protocol 88fb is buggy, dev hsr_slave_1 [ 566.558922] protocol 88fb is buggy, dev hsr_slave_0 [ 566.564023] protocol 88fb is buggy, dev hsr_slave_1 [ 566.878924] protocol 88fb is buggy, dev hsr_slave_0 [ 566.884079] protocol 88fb is buggy, dev hsr_slave_1 12:06:46 executing program 0 (fault-call:2 fault-nth:36): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:06:46 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, &(0x7f0000000540)) 12:06:46 executing program 3: r0 = creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) unlink(&(0x7f0000000bc0)='./file0\x00') 12:06:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:06:46 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x48}}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:06:46 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492191, 0x0) r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 567.015269] rdma_op 00000000b775a192 conn xmit_rdma (null) 12:06:47 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x181302, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) [ 567.061486] xt_cluster: node mask cannot exceed total number of nodes 12:06:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:06:47 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x7ffff}}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 567.107289] FAULT_INJECTION: forcing a failure. [ 567.107289] name failslab, interval 1, probability 0, space 0, times 0 12:06:47 executing program 4: accept$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff}) socket$inet6(0xa, 0x6, 0x0) [ 567.177226] CPU: 1 PID: 15201 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 567.184345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.193708] Call Trace: [ 567.196314] dump_stack+0x172/0x1f0 [ 567.199972] should_fail.cold+0xa/0x1b [ 567.203891] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 567.209016] ? lock_downgrade+0x810/0x810 [ 567.213202] __should_failslab+0x121/0x190 [ 567.217454] should_failslab+0x9/0x14 [ 567.221268] kmem_cache_alloc_node_trace+0x274/0x720 [ 567.226386] ? refcount_dec_and_test_checked+0x1b/0x20 [ 567.227280] rdma_op 000000005f6082f4 conn xmit_rdma (null) [ 567.231768] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 567.231786] ? kobject_put+0x84/0xe0 [ 567.231811] __kmalloc_node_track_caller+0x3d/0x80 [ 567.231831] devm_kmalloc+0x92/0x1a0 [ 567.231927] hci_leds_init+0x32/0x1c0 [ 567.260009] hci_register_dev+0x328/0x880 [ 567.264186] hci_uart_tty_ioctl+0x761/0xaf0 [ 567.268533] tty_ioctl+0x8b5/0x1510 [ 567.272174] ? hci_uart_init_work+0x140/0x140 [ 567.276683] ? tty_vhangup+0x30/0x30 [ 567.280404] ? mark_held_locks+0x100/0x100 [ 567.284659] ? __fget+0x340/0x540 [ 567.288135] ? __might_sleep+0x95/0x190 [ 567.292124] ? tty_vhangup+0x30/0x30 [ 567.295856] do_vfs_ioctl+0xd5f/0x1380 [ 567.299753] ? selinux_file_ioctl+0x46f/0x5e0 [ 567.304257] ? selinux_file_ioctl+0x125/0x5e0 [ 567.308769] ? ioctl_preallocate+0x210/0x210 [ 567.313186] ? selinux_file_mprotect+0x620/0x620 [ 567.317958] ? iterate_fd+0x360/0x360 [ 567.321767] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 12:06:47 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x48}}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:06:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) [ 567.327310] ? fput+0x128/0x1a0 [ 567.330603] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 567.336152] ? security_file_ioctl+0x8d/0xc0 [ 567.340573] ksys_ioctl+0xab/0xd0 [ 567.344040] __x64_sys_ioctl+0x73/0xb0 [ 567.347940] do_syscall_64+0xfd/0x620 [ 567.351755] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 567.356951] RIP: 0033:0x4598e9 [ 567.360162] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 567.379073] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 567.386797] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 567.394080] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 567.396875] rdma_op 00000000b54765a7 conn xmit_rdma (null) [ 567.401356] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 567.401366] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 567.401375] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 567.431052] xt_cluster: node mask cannot exceed total number of nodes [ 567.453682] Bluetooth: hci0: Frame reassembly failed (-84) [ 567.459943] Bluetooth: hci0: Frame reassembly failed (-84) [ 569.519071] Bluetooth: hci0: command 0x1003 tx timeout [ 569.524487] Bluetooth: hci0: sending frame failed (-49) [ 571.038940] net_ratelimit: 22 callbacks suppressed [ 571.038950] protocol 88fb is buggy, dev hsr_slave_0 [ 571.049045] protocol 88fb is buggy, dev hsr_slave_1 [ 571.054178] protocol 88fb is buggy, dev hsr_slave_0 [ 571.059273] protocol 88fb is buggy, dev hsr_slave_1 [ 571.598965] Bluetooth: hci0: command 0x1001 tx timeout [ 571.604371] Bluetooth: hci0: sending frame failed (-49) [ 572.078919] protocol 88fb is buggy, dev hsr_slave_0 [ 572.084022] protocol 88fb is buggy, dev hsr_slave_1 [ 572.158950] protocol 88fb is buggy, dev hsr_slave_0 [ 572.164136] protocol 88fb is buggy, dev hsr_slave_1 [ 572.169277] protocol 88fb is buggy, dev hsr_slave_0 [ 572.174359] protocol 88fb is buggy, dev hsr_slave_1 [ 573.678949] Bluetooth: hci0: command 0x1009 tx timeout [ 576.238909] net_ratelimit: 18 callbacks suppressed [ 576.238919] protocol 88fb is buggy, dev hsr_slave_0 [ 576.249044] protocol 88fb is buggy, dev hsr_slave_1 [ 576.318952] protocol 88fb is buggy, dev hsr_slave_0 [ 576.324108] protocol 88fb is buggy, dev hsr_slave_1 [ 576.329247] protocol 88fb is buggy, dev hsr_slave_0 [ 576.334329] protocol 88fb is buggy, dev hsr_slave_1 [ 576.958901] protocol 88fb is buggy, dev hsr_slave_0 [ 576.964097] protocol 88fb is buggy, dev hsr_slave_1 [ 577.278911] protocol 88fb is buggy, dev hsr_slave_0 [ 577.284140] protocol 88fb is buggy, dev hsr_slave_1 12:06:57 executing program 0 (fault-call:2 fault-nth:37): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:06:57 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000000)='./file0\x00', 0x20000000000, 0x0, 0x0, 0x2ab00c, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000100)='./file0\x00', 0x200, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="5b5e1f0fe7842a3ce61d45a36a75e885ee196c872abc04004ac56208189e0927d82d43c8aed903f2577a56d3feed55b947202ffd41d0b51dc6183956e5a976d6025b5cb99a27", 0x46, 0x5}], 0x8000, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xffb7) accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x0) 12:06:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 12:06:57 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x3}]}}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 12:06:57 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x7ffff}}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:06:57 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492191, 0x0) r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 577.898605] rdma_op 000000003beb30be conn xmit_rdma (null) [ 577.923936] xt_cluster: node mask cannot exceed total number of nodes [ 577.945580] FAULT_INJECTION: forcing a failure. [ 577.945580] name failslab, interval 1, probability 0, space 0, times 0 12:06:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d17]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ac0)={'syz0\x00'}, 0x45c) 12:06:58 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 577.993767] hfsplus: unable to load nls mapping "none" [ 578.009217] hfsplus: unable to parse mount options [ 578.014626] CPU: 1 PID: 15476 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 578.021586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.030946] Call Trace: [ 578.030977] dump_stack+0x172/0x1f0 [ 578.031001] should_fail.cold+0xa/0x1b [ 578.031019] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 578.031035] ? lock_downgrade+0x810/0x810 [ 578.031062] __should_failslab+0x121/0x190 [ 578.054646] should_failslab+0x9/0x14 [ 578.058466] kmem_cache_alloc_node_trace+0x274/0x720 [ 578.058486] ? refcount_dec_and_test_checked+0x1b/0x20 [ 578.058506] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 578.074408] ? kobject_put+0x84/0xe0 [ 578.078158] __kmalloc_node_track_caller+0x3d/0x80 [ 578.078182] devm_kmalloc+0x92/0x1a0 [ 578.078206] hci_leds_init+0x32/0x1c0 12:06:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 578.086847] rdma_op 00000000815b66f6 conn xmit_rdma (null) [ 578.090647] hci_register_dev+0x328/0x880 [ 578.090675] hci_uart_tty_ioctl+0x761/0xaf0 [ 578.090692] tty_ioctl+0x8b5/0x1510 [ 578.090706] ? hci_uart_init_work+0x140/0x140 [ 578.090719] ? tty_vhangup+0x30/0x30 [ 578.090731] ? mark_held_locks+0x100/0x100 [ 578.090754] ? __fget+0x340/0x540 [ 578.101385] ? __might_sleep+0x95/0x190 [ 578.101401] ? tty_vhangup+0x30/0x30 [ 578.101420] do_vfs_ioctl+0xd5f/0x1380 [ 578.101437] ? selinux_file_ioctl+0x46f/0x5e0 [ 578.101451] ? selinux_file_ioctl+0x125/0x5e0 [ 578.101465] ? ioctl_preallocate+0x210/0x210 [ 578.101480] ? selinux_file_mprotect+0x620/0x620 [ 578.125541] ? iterate_fd+0x360/0x360 [ 578.125562] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 578.125576] ? fput+0x128/0x1a0 [ 578.125595] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 578.146123] ? security_file_ioctl+0x8d/0xc0 [ 578.146143] ksys_ioctl+0xab/0xd0 [ 578.181288] __x64_sys_ioctl+0x73/0xb0 [ 578.185195] do_syscall_64+0xfd/0x620 [ 578.189018] entry_SYSCALL_64_after_hwframe+0x49/0xbe 12:06:58 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 578.194220] RIP: 0033:0x4598e9 [ 578.197427] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 578.216361] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 578.216379] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 578.216388] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 578.216397] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 578.216407] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 578.216416] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 578.240648] xt_cluster: node mask cannot exceed total number of nodes [ 578.270264] input: syz1 as /devices/virtual/input/input11 [ 578.278283] Bluetooth: hci0: Frame reassembly failed (-84) 12:06:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 578.307377] rdma_op 000000007fc64c19 conn xmit_rdma (null) [ 578.324949] input: syz1 as /devices/virtual/input/input12 12:06:58 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x3}]}}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) [ 578.425390] xt_cluster: node mask cannot exceed total number of nodes [ 580.318873] Bluetooth: hci0: command 0x1003 tx timeout [ 580.324297] Bluetooth: hci0: sending frame failed (-49) [ 581.438970] net_ratelimit: 22 callbacks suppressed [ 581.438978] protocol 88fb is buggy, dev hsr_slave_0 [ 581.449173] protocol 88fb is buggy, dev hsr_slave_1 [ 581.454305] protocol 88fb is buggy, dev hsr_slave_0 [ 581.459433] protocol 88fb is buggy, dev hsr_slave_1 [ 582.408892] Bluetooth: hci0: command 0x1001 tx timeout [ 582.414317] Bluetooth: hci0: sending frame failed (-49) [ 582.478892] protocol 88fb is buggy, dev hsr_slave_0 [ 582.483997] protocol 88fb is buggy, dev hsr_slave_1 [ 582.558948] protocol 88fb is buggy, dev hsr_slave_0 [ 582.564085] protocol 88fb is buggy, dev hsr_slave_1 [ 582.569275] protocol 88fb is buggy, dev hsr_slave_0 [ 582.574360] protocol 88fb is buggy, dev hsr_slave_1 [ 584.478865] Bluetooth: hci0: command 0x1009 tx timeout [ 586.638904] net_ratelimit: 18 callbacks suppressed [ 586.638913] protocol 88fb is buggy, dev hsr_slave_0 [ 586.649017] protocol 88fb is buggy, dev hsr_slave_1 [ 586.718958] protocol 88fb is buggy, dev hsr_slave_0 [ 586.724133] protocol 88fb is buggy, dev hsr_slave_1 [ 586.729274] protocol 88fb is buggy, dev hsr_slave_0 [ 586.734340] protocol 88fb is buggy, dev hsr_slave_1 [ 587.358900] protocol 88fb is buggy, dev hsr_slave_0 [ 587.364020] protocol 88fb is buggy, dev hsr_slave_1 [ 587.678933] protocol 88fb is buggy, dev hsr_slave_0 [ 587.684116] protocol 88fb is buggy, dev hsr_slave_1 12:07:08 executing program 0 (fault-call:2 fault-nth:38): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:07:08 executing program 3: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{}]}) creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{}, {}, {}, {}]}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)=0xffb7) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)=0xffb7) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="962b49547c1e3f98769cac54a4982c8a752ef172e30c", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={r5, 0x6d66}, &(0x7f00000001c0)=0x2a6) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000002c0)={r6, 0x52d}, &(0x7f0000000300)=0x8) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000000)={0x2, 0x3, [0x69, 0xcc, 0xffff, 0x507d, 0x2, 0x100, 0x2, 0x4eca7088]}) unlink(&(0x7f0000000bc0)='./file0\x00') 12:07:08 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:07:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:07:08 executing program 4: prctl$PR_GET_TIMERSLACK(0x1e) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) signalfd4(r0, 0x0, 0x0, 0x1c00) symlinkat(&(0x7f00000002c0)='./bus\x00', r0, &(0x7f0000000340)='./bus\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f0000001e40)=""/4096, 0x1000}], 0x1, 0x0) clone(0x64000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x80, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_smack_entry(r2, &(0x7f0000000240)='security.SMACK64EXEC\x00', &(0x7f0000000280)='vboxnet0}bdevkeyring-^:%{nodev\x00', 0x1f, 0x1) 12:07:08 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:07:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 588.785557] rdma_op 000000001631c572 conn xmit_rdma (null) [ 588.814491] FAULT_INJECTION: forcing a failure. [ 588.814491] name failslab, interval 1, probability 0, space 0, times 0 [ 588.842960] CPU: 0 PID: 15802 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 588.849949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.859337] Call Trace: [ 588.861960] dump_stack+0x172/0x1f0 [ 588.865614] should_fail.cold+0xa/0x1b [ 588.867877] IPVS: ftp: loaded support on port[0] = 21 [ 588.869520] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 588.869539] ? lock_downgrade+0x810/0x810 [ 588.869566] __should_failslab+0x121/0x190 [ 588.869585] should_failslab+0x9/0x14 [ 588.869600] __kmalloc+0x2e2/0x750 [ 588.892037] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 588.892054] ? devres_add+0x40/0x50 [ 588.892111] ? rfkill_alloc+0xaa/0x290 [ 588.900875] rfkill_alloc+0xaa/0x290 [ 588.900890] ? hci_leds_init+0x104/0x1c0 [ 588.900907] hci_register_dev+0x342/0x880 [ 588.900933] hci_uart_tty_ioctl+0x761/0xaf0 [ 588.900950] tty_ioctl+0x8b5/0x1510 [ 588.900966] ? hci_uart_init_work+0x140/0x140 [ 588.924653] ? tty_vhangup+0x30/0x30 [ 588.924668] ? mark_held_locks+0x100/0x100 [ 588.924692] ? __fget+0x340/0x540 [ 588.940722] ? __might_sleep+0x95/0x190 [ 588.940742] ? tty_vhangup+0x30/0x30 [ 588.948151] do_vfs_ioctl+0xd5f/0x1380 [ 588.948170] ? selinux_file_ioctl+0x46f/0x5e0 [ 588.948181] ? selinux_file_ioctl+0x125/0x5e0 [ 588.948197] ? ioctl_preallocate+0x210/0x210 [ 588.960258] ? selinux_file_mprotect+0x620/0x620 [ 588.960282] ? iterate_fd+0x360/0x360 [ 588.960300] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 588.960316] ? fput+0x128/0x1a0 [ 588.960337] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 588.960352] ? security_file_ioctl+0x8d/0xc0 [ 588.969239] ksys_ioctl+0xab/0xd0 [ 588.992094] __x64_sys_ioctl+0x73/0xb0 [ 588.992114] do_syscall_64+0xfd/0x620 [ 588.992134] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 588.999956] RIP: 0033:0x4598e9 [ 588.999977] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 588.999986] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 589.000001] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 589.000009] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 589.000018] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 589.000026] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 589.000034] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 12:07:09 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:07:09 executing program 3: r0 = creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') [ 589.115935] Bluetooth: hci0: Frame reassembly failed (-84) [ 589.151173] rdma_op 0000000051241241 conn xmit_rdma (null) 12:07:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:07:09 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:07:09 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xffb7) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f00000000c0)=""/238, &(0x7f00000001c0)=0xee) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x7, 0x0, 0x0, 0x8b000, 0x0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="028409d608bdbeebf9d7873bf62c663670c1f3963e"], 0x15, 0x1) r1 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r1, 0x0, 0x0, 0x0) syncfs(r1) unlink(&(0x7f0000000bc0)='./file0\x00') [ 589.426716] rdma_op 000000005e12bf24 conn xmit_rdma (null) [ 591.118874] Bluetooth: hci0: command 0x1003 tx timeout [ 591.124424] Bluetooth: hci0: sending frame failed (-49) [ 591.838903] net_ratelimit: 22 callbacks suppressed [ 591.838913] protocol 88fb is buggy, dev hsr_slave_0 [ 591.849057] protocol 88fb is buggy, dev hsr_slave_1 [ 591.854150] protocol 88fb is buggy, dev hsr_slave_0 [ 591.859257] protocol 88fb is buggy, dev hsr_slave_1 [ 592.878895] protocol 88fb is buggy, dev hsr_slave_0 [ 592.884000] protocol 88fb is buggy, dev hsr_slave_1 [ 592.958916] protocol 88fb is buggy, dev hsr_slave_0 [ 592.964038] protocol 88fb is buggy, dev hsr_slave_1 [ 592.969266] protocol 88fb is buggy, dev hsr_slave_0 [ 592.974315] protocol 88fb is buggy, dev hsr_slave_1 [ 593.200919] Bluetooth: hci0: command 0x1001 tx timeout [ 593.206349] Bluetooth: hci0: sending frame failed (-49) [ 595.278906] Bluetooth: hci0: command 0x1009 tx timeout [ 597.038900] net_ratelimit: 18 callbacks suppressed [ 597.038909] protocol 88fb is buggy, dev hsr_slave_0 [ 597.049033] protocol 88fb is buggy, dev hsr_slave_1 [ 597.118944] protocol 88fb is buggy, dev hsr_slave_0 [ 597.124104] protocol 88fb is buggy, dev hsr_slave_1 [ 597.129241] protocol 88fb is buggy, dev hsr_slave_0 [ 597.134329] protocol 88fb is buggy, dev hsr_slave_1 [ 597.758901] protocol 88fb is buggy, dev hsr_slave_0 [ 597.764006] protocol 88fb is buggy, dev hsr_slave_1 [ 598.078906] protocol 88fb is buggy, dev hsr_slave_0 [ 598.084009] protocol 88fb is buggy, dev hsr_slave_1 12:07:19 executing program 0 (fault-call:2 fault-nth:39): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:07:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x2c8) 12:07:19 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:07:19 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000040)=""/230) unlink(&(0x7f0000000bc0)='./file0\x00') 12:07:19 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) 12:07:19 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:07:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x2c8) [ 599.654487] rdma_op 00000000f7a07467 conn xmit_rdma (null) [ 599.685926] FAULT_INJECTION: forcing a failure. [ 599.685926] name failslab, interval 1, probability 0, space 0, times 0 12:07:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="08dca50d5e0bcfe47bf070") r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffdca, &(0x7f0000000000)=[{&(0x7f0000000040)="2e0000001e000502ed0080648c6394f20531d20006000b4009000000000000000000009700d0bdff0f0000000000", 0x37}], 0x1}, 0x0) [ 599.740386] CPU: 1 PID: 16149 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 599.747368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 599.756738] Call Trace: [ 599.759353] dump_stack+0x172/0x1f0 [ 599.762996] should_fail.cold+0xa/0x1b [ 599.766906] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 599.772031] ? lock_downgrade+0x810/0x810 [ 599.776202] __should_failslab+0x121/0x190 [ 599.780453] should_failslab+0x9/0x14 [ 599.784260] __kmalloc_track_caller+0x2de/0x750 [ 599.788935] ? pointer+0x970/0x970 [ 599.792485] ? rfkill_register+0x3a/0xb50 [ 599.796647] ? kvasprintf_const+0x65/0x190 [ 599.800899] kvasprintf+0xc8/0x170 [ 599.804453] ? bust_spinlocks+0xe0/0xe0 [ 599.808440] ? __mutex_lock+0x3cd/0x1300 [ 599.812507] ? __debug_object_init+0x190/0xc30 [ 599.817099] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 599.822217] ? rfkill_register+0x3a/0xb50 [ 599.826377] kvasprintf_const+0x65/0x190 [ 599.830453] kobject_set_name_vargs+0x5b/0x150 [ 599.835044] dev_set_name+0xbd/0xf0 [ 599.838677] ? device_initialize+0x440/0x440 [ 599.843099] ? lockdep_init_map+0x9/0x10 [ 599.847166] ? __init_waitqueue_head+0x36/0x90 [ 599.851769] rfkill_register+0xf0/0xb50 [ 599.855754] hci_register_dev+0x385/0x880 [ 599.859920] hci_uart_tty_ioctl+0x761/0xaf0 [ 599.864253] tty_ioctl+0x8b5/0x1510 [ 599.867888] ? hci_uart_init_work+0x140/0x140 [ 599.872398] ? tty_vhangup+0x30/0x30 [ 599.880118] ? mark_held_locks+0x100/0x100 [ 599.884375] ? __fget+0x340/0x540 [ 599.887936] ? __might_sleep+0x95/0x190 [ 599.891919] ? tty_vhangup+0x30/0x30 [ 599.895649] do_vfs_ioctl+0xd5f/0x1380 [ 599.899548] ? selinux_file_ioctl+0x46f/0x5e0 [ 599.904061] ? selinux_file_ioctl+0x125/0x5e0 [ 599.908583] ? ioctl_preallocate+0x210/0x210 [ 599.913002] ? selinux_file_mprotect+0x620/0x620 [ 599.917774] ? iterate_fd+0x360/0x360 [ 599.921585] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 599.927126] ? fput+0x128/0x1a0 [ 599.930422] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 599.935967] ? security_file_ioctl+0x8d/0xc0 [ 599.940387] ksys_ioctl+0xab/0xd0 [ 599.943852] __x64_sys_ioctl+0x73/0xb0 [ 599.947749] do_syscall_64+0xfd/0x620 [ 599.951567] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 599.956761] RIP: 0033:0x4598e9 [ 599.959960] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 599.978869] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.986588] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 599.993865] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 600.001136] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 600.008413] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 600.015688] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 12:07:20 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x100) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'keyring-^eth0GPLeth0\\)GPLppp1'}], 0xa, "d8e386b39a3b49c11cafb9ab63b79eedae1e99"}, 0x3c) unlink(&(0x7f0000000bc0)='./file0\x00') [ 600.041076] Bluetooth: hci0: sending frame failed (-49) 12:07:20 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:07:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x2c8) 12:07:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, &(0x7f00000001c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x3f, 0x0, &(0x7f0000000400)="106093d9f60198487a402ebe849ab84ee3e49e068891ab866d134437665c1a15cea1bf900572a0fe7fd8e85941250d1cc44454ea57c22ddb1e1126d6da9009"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) dup3(r1, r0, 0x0) [ 600.148129] rdma_op 0000000007659267 conn xmit_rdma (null) [ 602.078941] net_ratelimit: 20 callbacks suppressed [ 602.078951] protocol 88fb is buggy, dev hsr_slave_0 [ 602.089055] protocol 88fb is buggy, dev hsr_slave_1 [ 602.089063] Bluetooth: hci0: command 0x1003 tx timeout [ 602.089176] Bluetooth: hci0: sending frame failed (-49) [ 602.238914] protocol 88fb is buggy, dev hsr_slave_0 [ 602.244038] protocol 88fb is buggy, dev hsr_slave_1 [ 602.249221] protocol 88fb is buggy, dev hsr_slave_0 [ 602.254280] protocol 88fb is buggy, dev hsr_slave_1 [ 603.278862] protocol 88fb is buggy, dev hsr_slave_0 [ 603.283948] protocol 88fb is buggy, dev hsr_slave_1 [ 603.358896] protocol 88fb is buggy, dev hsr_slave_0 [ 603.364099] protocol 88fb is buggy, dev hsr_slave_1 [ 604.159166] Bluetooth: hci0: command 0x1001 tx timeout [ 604.164684] Bluetooth: hci0: sending frame failed (-49) [ 606.239134] Bluetooth: hci0: command 0x1009 tx timeout [ 607.438920] net_ratelimit: 20 callbacks suppressed [ 607.438930] protocol 88fb is buggy, dev hsr_slave_0 [ 607.449077] protocol 88fb is buggy, dev hsr_slave_1 [ 607.518944] protocol 88fb is buggy, dev hsr_slave_0 [ 607.524099] protocol 88fb is buggy, dev hsr_slave_1 [ 607.529245] protocol 88fb is buggy, dev hsr_slave_0 [ 607.534310] protocol 88fb is buggy, dev hsr_slave_1 [ 608.318899] protocol 88fb is buggy, dev hsr_slave_0 [ 608.324049] protocol 88fb is buggy, dev hsr_slave_1 [ 608.478936] protocol 88fb is buggy, dev hsr_slave_0 [ 608.484074] protocol 88fb is buggy, dev hsr_slave_1 12:07:30 executing program 0 (fault-call:2 fault-nth:40): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:07:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0}, 0x2c8) 12:07:30 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:07:30 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0xffffffffffffff94, 0x0, 0x8b000, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x2000, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) unlink(&(0x7f0000000bc0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xffb7) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) name_to_handle_at(r1, &(0x7f00002e4000)='./file\xff\xff', &(0x7f0000000080)=ANY=[], 0x0, 0x1400) r2 = syz_genetlink_get_family_id$team(0x0) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14, 0x800) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x80) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x80) connect(r7, &(0x7f0000000040)=@xdp={0x2c, 0x6, r8, 0x38}, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000380)=""/15, 0xf}], 0x2, &(0x7f0000000400)=""/47, 0x2f}, 0x3}, {{&(0x7f0000000440)=@xdp, 0x80, &(0x7f0000000e80)=[{&(0x7f00000004c0)=""/233, 0xe9}, {&(0x7f0000000b00)=""/138, 0x8a}, {&(0x7f00000005c0)=""/1, 0x1}, {&(0x7f0000000bc0)=""/233, 0xe9}, {&(0x7f0000000600)=""/53, 0x35}, {&(0x7f0000000cc0)=""/60, 0x3c}, {&(0x7f0000000d40)=""/166, 0xa6}, {&(0x7f0000000e00)=""/24, 0x18}, {&(0x7f0000000e40)=""/2, 0x2}], 0x9, &(0x7f0000000f40)=""/83, 0x53}, 0x2}, {{&(0x7f00000013c0), 0x80, &(0x7f00000028c0)=[{&(0x7f0000001440)=""/68, 0x44}, {&(0x7f00000014c0)=""/47, 0x2f}, {&(0x7f0000001500)=""/39, 0x27}, {&(0x7f0000001540)=""/202, 0xca}, {&(0x7f0000001640)=""/87, 0x57}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/217, 0xd9}, {&(0x7f00000027c0)=""/37, 0x25}, {&(0x7f0000002800)=""/153, 0x99}], 0x9}, 0x9}, {{&(0x7f0000002980)=@ll={0x11, 0x0, 0x0}, 0x80, 0x0, 0x0, &(0x7f0000002a80)=""/4096, 0x1000}, 0xff}, {{&(0x7f0000003a80)=@rc, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/29, 0x1d}, 0x4}], 0x5, 0x40000000, &(0x7f0000003fc0)={0x77359400}) accept4$packet(0xffffffffffffffff, &(0x7f00000041c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004200)=0x14, 0x80c00) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000004880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004840)={&(0x7f00000048c0)=ANY=[@ANYBLOB="c4050000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="b80002004000018e194cd9058c765bd733411ddbedb100240001006c625f707b3b9f72745f737461747300000000000000000000080003000b0000000600000000000000", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400230000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="a40102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000600000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040005000000080007000000000040000100240001006c625f706f72745f737461747300"/158, @ANYRES32, @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000400000008000100", @ANYRES32=r6, @ANYBLOB="a0010200400001002400010071756575655f69640000000000000000", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e7400000000", @ANYRES32, @ANYBLOB="9473745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400040000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c00040000007400810000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600"/174, @ANYRES32=r10, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000100000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000010000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000700000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000008000300030000000800040001000000"], 0x1e}, 0x1, 0x0, 0x0, 0x40881}, 0x24000000) r11 = creat(&(0x7f0000000700)='./bus\x00', 0x0) name_to_handle_at(r11, &(0x7f00002e4000)='./file\xff\xff', &(0x7f0000000080)=ANY=[], 0x0, 0x1400) r12 = syz_genetlink_get_family_id$team(0x0) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@broadcast, @in=@dev}}, {{@in6=@ipv4}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14, 0x800) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x80) r16 = socket$inet_sctp(0x2, 0x5, 0x84) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x80) connect(r16, &(0x7f0000000040)=@xdp={0x2c, 0x6, r17, 0x38}, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000380)=""/15, 0xf}], 0x2, &(0x7f0000000400)=""/47, 0x2f}, 0x3}, {{&(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000e80)=[{&(0x7f00000004c0)=""/233, 0xe9}, {&(0x7f0000000b00)=""/138, 0x8a}, {&(0x7f00000005c0)=""/1, 0x1}, {&(0x7f0000000bc0)=""/233, 0xe9}, {&(0x7f0000000600)=""/53, 0x35}, {&(0x7f0000000cc0)=""/60, 0x3c}, {&(0x7f0000000d40)=""/166, 0xa6}, {&(0x7f0000000e00)=""/24, 0x18}, {&(0x7f0000000e40)=""/2, 0x2}], 0x9, &(0x7f0000000f40)=""/83, 0x53}, 0x2}, {{&(0x7f00000013c0), 0x80, &(0x7f00000028c0)=[{&(0x7f0000001440)=""/68, 0x44}, {&(0x7f00000014c0)=""/47, 0x2f}, {&(0x7f0000001500)=""/39, 0x27}, {&(0x7f0000001540)=""/202, 0xca}, {&(0x7f0000001640)=""/87, 0x57}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/217, 0xd9}, {&(0x7f00000027c0)=""/37, 0x25}, {&(0x7f0000002800)=""/153, 0x99}], 0x9}, 0x9}, {{&(0x7f0000002980)=@ll={0x11, 0x0, 0x0}, 0x80, 0x0, 0x0, &(0x7f0000002a80)=""/4096, 0x1000}, 0xff}, {{&(0x7f0000003a80)=@rc, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/29, 0x1d}, 0x4}], 0x5, 0x40000000, &(0x7f0000003fc0)={0x77359400}) accept4$packet(0xffffffffffffffff, &(0x7f00000041c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004200)=0x14, 0x80c00) r21 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r21, 0x4030582a, &(0x7f0000000000)=0xffb7) r22 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r22, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f0000004880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004840)={&(0x7f0000004dc0)=ANY=[@ANYRESOCT=r17, @ANYRES16=r12, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r13, @ANYBLOB="b80002004000018e194cd9058c765bd733411ddbedb100240001006c625f707b3b9f72745f737461747300000000000000000000080003000b0000000600000000000000", @ANYRESDEC=r12, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400230000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRESHEX=r21, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="a40102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000600000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040005000000080007000000000040000100240001006c625f706f72745f737461747300"/158, @ANYRES32, @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000400000008000100", @ANYRES32=r15, @ANYBLOB="a0010200400001002400010071756575655f69640000000000000000", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e7f7570010000000000000000000000000000000000000000080003000600000004000400080006bfcd00e3d11c0c00dd99706e36edb2b4344e422b28dd5ff5dfb9aab015042ff7f51aad35e4a8af59a35879d5bb22f0c8ecb7af9d2d3cd3c9a708c8fb3a5063fa2c4d2980e60dd65e9ea388b9c78dbebabf7c4539c90a2d76dcbc0317d764014b8f4d4642d5cdfc02ba1de542ce35dbb4c172998a47c07c2e4901ff1196b91233b7", @ANYRES32=r17, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e7400000000", @ANYRES32, @ANYBLOB="9473745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400040000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c00040000007400810000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600"/174, @ANYRES32=r20, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRESOCT=r22, @ANYRES32, @ANYRES16=r18, @ANYRESDEC=r11]], 0x1e}, 0x1, 0x0, 0x0, 0x40881}, 0x24000000) r23 = creat(&(0x7f0000000700)='./bus\x00', 0x0) name_to_handle_at(r23, &(0x7f00002e4000)='./file\xff\xff', &(0x7f0000000080)=ANY=[], 0x0, 0x1400) r24 = syz_genetlink_get_family_id$team(0x0) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14, 0x800) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x80) r29 = socket$inet_sctp(0x2, 0x5, 0x84) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x80) connect(r29, &(0x7f0000000040)=@xdp={0x2c, 0x6, r30, 0x38}, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/47, 0x2f}, 0x3}, {{&(0x7f0000000440)=@xdp, 0x80, &(0x7f0000000e80)=[{&(0x7f00000004c0)=""/233, 0xe9}, {&(0x7f0000000b00)=""/138, 0x8a}, {&(0x7f00000005c0)=""/1, 0x1}, {&(0x7f0000000bc0)=""/233, 0xe9}, {&(0x7f0000000600)=""/53, 0x35}, {&(0x7f0000000cc0)=""/60, 0x3c}, {&(0x7f0000000d40)=""/166, 0xa6}, {&(0x7f0000000e00)=""/24, 0x18}, {&(0x7f0000000e40)=""/2, 0x2}], 0x9, &(0x7f0000000f40)=""/83, 0x53}, 0x2}, {{&(0x7f00000013c0), 0x80, &(0x7f00000028c0)=[{&(0x7f0000001440)=""/68, 0x44}, {&(0x7f00000014c0)=""/47, 0x2f}, {&(0x7f0000001500)=""/39, 0x27}, {&(0x7f0000001540)=""/202, 0xca}, {&(0x7f0000001640)=""/87, 0x57}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/217, 0xd9}, {&(0x7f00000027c0)=""/37, 0x25}, {&(0x7f0000002800)=""/153, 0x99}], 0x9}, 0x9}, {{&(0x7f0000002980)=@ll={0x11, 0x0, 0x0}, 0x80, 0x0, 0x0, &(0x7f0000002a80)=""/4096, 0x1000}, 0xff}, {{&(0x7f0000003a80)=@rc, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/29, 0x1d}, 0x4}], 0x5, 0x40000000, &(0x7f0000003fc0)={0x77359400}) accept4$packet(0xffffffffffffffff, &(0x7f00000041c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004200)=0x14, 0x80c00) sendmsg$TEAM_CMD_OPTIONS_GET(r23, &(0x7f0000004880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004840)={&(0x7f0000004240)=ANY=[@ANYBLOB="c4050000", @ANYRES16=r24, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r25, @ANYBLOB="b80002004000018e194cd9058c765bd733411ddbedb100240001006c625f707b3b9f72745f737461747300000000000000000000080003000b0000000600000000000000", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400230000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r26, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="a40102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r27, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000600000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040005000000080007000000000040000100240001006c625f706f72745f737461747300"/158, @ANYRES32, @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000400000008000100", @ANYRES32=r28, @ANYBLOB="a0010200400001002400010071756575655f69640000000000000000", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r30, @ANYBLOB="3c00010024000100757365d65f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600a4514e44f0c1db350121681a2d1c1fdfc0f1fda4f98005a18e4654830b466750086200", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r31, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e7400000000", @ANYRES32, @ANYBLOB="9473745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400040000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c00040000007400810000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600"/174, @ANYRES32=r32, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000100000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000010000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000700000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000008000300030000000800040001000000"], 0x1e}, 0x1, 0x0, 0x0, 0x40881}, 0x24000000) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000180)="265ab9baf0881074f08959c7f1ce484002834fc2823a8c045c1b0c290a5ebeeaaeb85d790e9c5a001c79bd55353f9ecf33c76399f0fe883634e226e1ac5b2183dbca9430fa0e908ab1afd294e83fecb98acc0d05fab44d00aa8cb79869b5dde40d327c41b32ca19ef571c702432f69f98af974724a221b825ed3dae71ef169fce4b803bd1ae7c1fc32f0623c314df25b023a9f304624cc594d4a4c3c6bb81f098f7e4575876e18207549210bdf888e603d25b38dbab9eb89228bfd4b2d2c30ef1b02f84d5abf27f2154a9e93216317c27a22169a1fd257fb0ac71500184fc200d0145160751c53f10b2ce4857ef1dc88", 0xf0}, {&(0x7f0000000280)="6a129fd27cde1172fc1160edff5ba6a2dadbf3857b373fa57e2d8f06eabef588553ee66f85ed96949d6d3daa6794625d84a977389a8870150b6f8d47abbc3dfe358bae514d509896c40d3cf1f47506f7d18d470cb4ec10eb721a21c439a3fbff99fe26e8ab480cbc51f62bf95599386fc10bc7ca9bf7adc00cbf0db78c00a6fb0446", 0x82}, {&(0x7f0000000740)="2b1f131631e2d5b0fb3ed9f58279019c6d115d9a578a82", 0x17}, {&(0x7f0000000380)="cb1b04cda00e16cfa6042b0a11b12ed95e9c223adea76f2f31e21d19aa8c51c1bc838c6e8422f5a0d633ef497a06b0fceaf012179674360e5547cc8606fa79a7bd26a1ff94d37c51a5a91f308c2a79be2a105ff74a1036289cee57cafa9ebe9f3c8665a587d0b885ada3b7d123e7c2c413d228802ee81c38e5747b58159000020000127b46df86f7443576f8d7e7b5887f71d81d86f5f1d3c910d5ea633f27f65dcb5b5900a97fc20bf18775824c969d2db29465c5a4673df3000000000000000000", 0xc2}, {&(0x7f0000000480)="fe24d08bf442d812ea945db6ef210e9ad834a2d3ad1f3e6cfbd9e8fbf1fc98cc27b603d6cb6a7df765455e1f09a1a0524990e9754955cfb108775fd8c9f40bb0357f93f209f6780d5e", 0x49}], 0x5, &(0x7f0000000580)}, 0x20040180) open(&(0x7f0000000100)='./file0\x00', 0x200180, 0x288) 12:07:30 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x100040084146, 0x0) 12:07:30 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:07:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)=""/23, &(0x7f0000000300)=0x17) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@empty}, 0x0) 12:07:30 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xffb7) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') [ 610.542448] rdma_op 00000000aff49604 conn xmit_rdma (null) [ 610.603502] FAULT_INJECTION: forcing a failure. [ 610.603502] name failslab, interval 1, probability 0, space 0, times 0 [ 610.632419] CPU: 0 PID: 16392 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 610.639420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.648785] Call Trace: [ 610.651389] dump_stack+0x172/0x1f0 [ 610.655032] should_fail.cold+0xa/0x1b [ 610.658933] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 610.664047] ? lock_downgrade+0x810/0x810 [ 610.668229] __should_failslab+0x121/0x190 [ 610.672472] should_failslab+0x9/0x14 [ 610.676277] __kmalloc_track_caller+0x2de/0x750 [ 610.680968] ? pointer+0x970/0x970 [ 610.684518] ? rfkill_register+0x3a/0xb50 [ 610.688678] ? kvasprintf_const+0x65/0x190 [ 610.692928] kvasprintf+0xc8/0x170 [ 610.696478] ? bust_spinlocks+0xe0/0xe0 [ 610.700464] ? __mutex_lock+0x3cd/0x1300 [ 610.704537] ? __debug_object_init+0x190/0xc30 [ 610.709213] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 610.714321] ? rfkill_register+0x3a/0xb50 [ 610.718481] kvasprintf_const+0x65/0x190 [ 610.722558] kobject_set_name_vargs+0x5b/0x150 [ 610.727154] dev_set_name+0xbd/0xf0 [ 610.730790] ? device_initialize+0x440/0x440 [ 610.735297] ? lockdep_init_map+0x9/0x10 [ 610.739365] ? __init_waitqueue_head+0x36/0x90 [ 610.743963] rfkill_register+0xf0/0xb50 [ 610.747949] hci_register_dev+0x385/0x880 [ 610.752112] hci_uart_tty_ioctl+0x761/0xaf0 [ 610.756441] tty_ioctl+0x8b5/0x1510 [ 610.760084] ? hci_uart_init_work+0x140/0x140 [ 610.764584] ? tty_vhangup+0x30/0x30 [ 610.768306] ? mark_held_locks+0x100/0x100 [ 610.772662] ? __fget+0x340/0x540 [ 610.776131] ? __might_sleep+0x95/0x190 [ 610.780112] ? tty_vhangup+0x30/0x30 [ 610.783835] do_vfs_ioctl+0xd5f/0x1380 [ 610.787732] ? selinux_file_ioctl+0x46f/0x5e0 [ 610.792235] ? selinux_file_ioctl+0x125/0x5e0 [ 610.796737] ? ioctl_preallocate+0x210/0x210 [ 610.801150] ? selinux_file_mprotect+0x620/0x620 [ 610.805921] ? iterate_fd+0x360/0x360 [ 610.809729] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 610.815269] ? fput+0x128/0x1a0 [ 610.818569] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 610.824550] ? security_file_ioctl+0x8d/0xc0 [ 610.830098] ksys_ioctl+0xab/0xd0 [ 610.833562] __x64_sys_ioctl+0x73/0xb0 [ 610.837466] do_syscall_64+0xfd/0x620 [ 610.841290] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 610.846481] RIP: 0033:0x4598e9 [ 610.849697] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 610.868607] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.876323] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 610.883600] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 610.890874] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 12:07:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0}, 0x2c8) 12:07:30 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='fuse\x00', 0x0, &(0x7f0000000840)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') read$eventfd(r1, &(0x7f0000000080), 0xff97) [ 610.898145] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 610.905420] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 610.926113] Bluetooth: hci0: Frame reassembly failed (-84) 12:07:30 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:07:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0}, 0x2c8) [ 611.086909] rdma_op 00000000fcb27611 conn xmit_rdma (null) [ 612.478915] net_ratelimit: 20 callbacks suppressed [ 612.478924] protocol 88fb is buggy, dev hsr_slave_0 [ 612.489045] protocol 88fb is buggy, dev hsr_slave_1 [ 612.638901] protocol 88fb is buggy, dev hsr_slave_0 [ 612.644024] protocol 88fb is buggy, dev hsr_slave_1 [ 612.649171] protocol 88fb is buggy, dev hsr_slave_0 [ 612.654234] protocol 88fb is buggy, dev hsr_slave_1 [ 612.958910] Bluetooth: hci0: command 0x1003 tx timeout [ 612.964453] Bluetooth: hci0: sending frame failed (-49) [ 613.679142] protocol 88fb is buggy, dev hsr_slave_0 [ 613.684245] protocol 88fb is buggy, dev hsr_slave_1 [ 613.758897] protocol 88fb is buggy, dev hsr_slave_0 [ 613.764022] protocol 88fb is buggy, dev hsr_slave_1 [ 615.038885] Bluetooth: hci0: command 0x1001 tx timeout [ 615.044299] Bluetooth: hci0: sending frame failed (-49) [ 617.118985] Bluetooth: hci0: command 0x1009 tx timeout [ 617.838921] net_ratelimit: 20 callbacks suppressed [ 617.838930] protocol 88fb is buggy, dev hsr_slave_0 [ 617.849013] protocol 88fb is buggy, dev hsr_slave_1 [ 617.918934] protocol 88fb is buggy, dev hsr_slave_0 [ 617.924077] protocol 88fb is buggy, dev hsr_slave_1 [ 617.929214] protocol 88fb is buggy, dev hsr_slave_0 [ 617.934281] protocol 88fb is buggy, dev hsr_slave_1 [ 618.718895] protocol 88fb is buggy, dev hsr_slave_0 [ 618.724029] protocol 88fb is buggy, dev hsr_slave_1 [ 618.878964] protocol 88fb is buggy, dev hsr_slave_0 [ 618.884131] protocol 88fb is buggy, dev hsr_slave_1 12:07:41 executing program 0 (fault-call:2 fault-nth:41): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:07:41 executing program 3: r0 = creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) ioprio_set$uid(0x3, r3, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x1000440, &(0x7f0000000140)={'trans=unix,', {[{@posixacl='posixacl'}, {@access_user='access=user'}, {@cache_none='cache=none'}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@access_uid={'access', 0x3d, r3}}, {@mmap='mmap'}, {@aname={'aname'}}, {@noextend='noextend'}], [{@audit='audit'}, {@pcr={'pcr', 0x3d, 0x15}}, {@subj_user={'subj_user', 0x3d, '{'}}, {@fowner_lt={'fowner<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, '+system'}}]}}) unlink(&(0x7f0000000bc0)='./file0\x00') 12:07:41 executing program 4 (fault-call:5 fault-nth:0): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:07:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[]}, 0x78) 12:07:41 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:07:41 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 12:07:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[]}, 0x78) [ 621.416961] rdma_op 000000005a5a5435 conn xmit_rdma (null) [ 621.448254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=16622 comm=syz-executor.5 12:07:41 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 621.472390] 9pnet: p9_fd_create_unix (16619): problem connecting socket: ./file0: -111 [ 621.482911] ptrace attach of "/root/syz-executor.5"[16622] was attempted by "/root/syz-executor.5"[16667] [ 621.502836] FAULT_INJECTION: forcing a failure. [ 621.502836] name failslab, interval 1, probability 0, space 0, times 0 [ 621.540541] CPU: 1 PID: 16626 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 621.547528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.556900] Call Trace: [ 621.559515] dump_stack+0x172/0x1f0 [ 621.563169] should_fail.cold+0xa/0x1b [ 621.567080] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 621.572311] ? lock_downgrade+0x810/0x810 [ 621.576491] __should_failslab+0x121/0x190 [ 621.580747] should_failslab+0x9/0x14 [ 621.584569] __kmalloc_track_caller+0x2de/0x750 [ 621.586672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=16734 comm=syz-executor.5 [ 621.589246] ? pointer+0x970/0x970 [ 621.589264] ? rfkill_register+0x3a/0xb50 [ 621.589284] ? kvasprintf_const+0x65/0x190 [ 621.589303] kvasprintf+0xc8/0x170 [ 621.604131] ptrace attach of "/root/syz-executor.5"[16734] was attempted by "/root/syz-executor.5"[16736] [ 621.605157] ? bust_spinlocks+0xe0/0xe0 [ 621.605178] ? __mutex_lock+0x3cd/0x1300 [ 621.605195] ? __debug_object_init+0x190/0xc30 [ 621.613561] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 621.613577] ? rfkill_register+0x3a/0xb50 [ 621.613600] kvasprintf_const+0x65/0x190 [ 621.613617] kobject_set_name_vargs+0x5b/0x150 [ 621.626850] dev_set_name+0xbd/0xf0 [ 621.626868] ? device_initialize+0x440/0x440 [ 621.639467] ? lockdep_init_map+0x9/0x10 [ 621.639486] ? __init_waitqueue_head+0x36/0x90 [ 621.639513] rfkill_register+0xf0/0xb50 [ 621.639532] hci_register_dev+0x385/0x880 [ 621.648767] hci_uart_tty_ioctl+0x761/0xaf0 [ 621.648787] tty_ioctl+0x8b5/0x1510 [ 621.648802] ? hci_uart_init_work+0x140/0x140 [ 621.648816] ? tty_vhangup+0x30/0x30 [ 621.648827] ? mark_held_locks+0x100/0x100 [ 621.648852] ? __fget+0x340/0x540 [ 621.706112] ? __might_sleep+0x95/0x190 [ 621.710105] ? tty_vhangup+0x30/0x30 [ 621.713834] do_vfs_ioctl+0xd5f/0x1380 [ 621.717734] ? selinux_file_ioctl+0x46f/0x5e0 [ 621.722243] ? selinux_file_ioctl+0x125/0x5e0 [ 621.726752] ? ioctl_preallocate+0x210/0x210 [ 621.731171] ? selinux_file_mprotect+0x620/0x620 [ 621.735949] ? iterate_fd+0x360/0x360 [ 621.739763] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 621.745307] ? fput+0x128/0x1a0 [ 621.748603] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 621.754149] ? security_file_ioctl+0x8d/0xc0 [ 621.758571] ksys_ioctl+0xab/0xd0 [ 621.762039] __x64_sys_ioctl+0x73/0xb0 [ 621.765937] do_syscall_64+0xfd/0x620 [ 621.769751] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 621.774945] RIP: 0033:0x4598e9 12:07:41 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 12:07:41 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) chmod(&(0x7f0000000600)='./file0\x00', 0x24) setpriority(0x1, r0, 0x0) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x8, &(0x7f0000000500)=[{&(0x7f0000000080)="b1", 0x1, 0x3}, {&(0x7f00000000c0)="17c38deeaa2e4401418b3d43027394494bdb8632708a67046218ab3d006d833739ff69bf85c5c517b35c38e0c72959e0937a6463d999d69a1e90d91c9a32792e0acf6ed6c23631d781bc15cee011613d55461380c4efb98f8b1925a0792aa1db37855bbf547d86712564e1b442e8e186a2eb4a08cd2cc838996bf7a927e8fc295b39e8bb8905434904c3337c78bceeeeeaf8b6b2eda4f670dd1f21b35c56f19f22d2a5999c8fac509544d7799422324725b529d463104dbfd98c8c0cd6e7a5bfbb333c32ea9446ea1f845c5938d8", 0xce, 0x9}, {&(0x7f00000001c0)="8fe6d74860bf117a958dfde1b305f57a507d3aa9eff91bfecca94a01dabe3bee3499e47b8cf7d35b0e2189e18b1d67845e368163e942299f155f8bce4cf1c2d23b0e5cdea8e8f6d31ed0604c77d003e817f7af86fde31f2565598f83ad594136d675b2622a35cd5af3ccff7cab7ac67b06a806a9d849b54a73a31fdaceebeb6be187a378", 0x84, 0x7ff}, {&(0x7f0000000280)="35b060f3827d703248b517", 0xb, 0x3ff}, {&(0x7f00000002c0)="68759cdf0df6594bd7381fe42fbdcad3b320a323b0ee4cc360e246cad9c82c2495312cbc80f06994133fdfe84faa4ea7c2ed334fbef1e8ce165e9945b6947604f7e1eb9e2eaeb99256a9d70b3aabb1d3e2cf10667ac8330b952026dad72032b7c42e7c21b62fe808c81998f25e6b9237b1", 0x71, 0x2}, {&(0x7f0000000340)="0350a5093d3abac5edf2bd12b36fdbbb2f37760a2912cff1d8449e690300b0ce08a3638094b2078bc0398f851d31d447d512c099d4cb6a4dcc7d39d6a4defff51acb10472b734e4c2a6251b440e9456d2d69f3e7ff8a4e522e126b", 0x5b}, {&(0x7f00000003c0)="3f3a6dea984a08598ce3d9a78f6c42bae367bc961ab0e2c92eb57b9c9c67f45d5dd93da53bc8f8e4961c6f48229be146b9439754d04b891bd2d5bfd41fb22b6bb284470857a16ed2b17d404b21c5f26ab1b5a19cff5efb17ee418b6101", 0x5d, 0xfffffffffffffffa}, {&(0x7f0000000440)="07374d0759f0381c8aaa4de3f4050b11fd761c45cd5371979b19f995221308d87a0c7c3a070fa2b03035f15a0e9560257501c9f2b09d2eebd6f6b3114ea44c0f88a78e7829a35e8aa8fb26224ba2daca66168337958c47910d0254eda0df8d231cb0b1d12a76d9e7558dc3d6a0b37f464d76dfbdebde550aba0a15b9e8f2585b512515ddf9e81e748cf3fb7f153ca6c3cb86d3514ad03eb5ee", 0x99, 0x2}], 0x800000, &(0x7f00000005c0)='^userppp1.^vmnet1\'\x00') unlink(&(0x7f0000000bc0)='./file0\x00') 12:07:41 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 621.778153] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 621.797061] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.804780] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 621.812053] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 621.819327] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 621.826602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 621.833875] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 621.860568] Bluetooth: hci0: Frame reassembly failed (-84) [ 621.874135] rdma_op 00000000e8d1840c conn xmit_rdma (null) [ 621.881313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=16741 comm=syz-executor.5 12:07:41 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 621.903252] ptrace attach of "/root/syz-executor.5"[16741] was attempted by "/root/syz-executor.5"[16760] [ 621.985633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=16848 comm=syz-executor.5 [ 622.878883] net_ratelimit: 20 callbacks suppressed [ 622.878891] protocol 88fb is buggy, dev hsr_slave_0 [ 622.888981] protocol 88fb is buggy, dev hsr_slave_1 [ 623.048887] protocol 88fb is buggy, dev hsr_slave_0 [ 623.054012] protocol 88fb is buggy, dev hsr_slave_1 [ 623.059150] protocol 88fb is buggy, dev hsr_slave_0 [ 623.064223] protocol 88fb is buggy, dev hsr_slave_1 [ 623.922274] Bluetooth: hci0: command 0x1003 tx timeout [ 623.927679] Bluetooth: hci0: sending frame failed (-49) [ 624.078898] protocol 88fb is buggy, dev hsr_slave_0 [ 624.084029] protocol 88fb is buggy, dev hsr_slave_1 [ 624.158888] protocol 88fb is buggy, dev hsr_slave_0 [ 624.164136] protocol 88fb is buggy, dev hsr_slave_1 [ 625.999153] Bluetooth: hci0: command 0x1001 tx timeout [ 626.004559] Bluetooth: hci0: sending frame failed (-49) [ 628.079182] Bluetooth: hci0: command 0x1009 tx timeout [ 628.238864] net_ratelimit: 20 callbacks suppressed [ 628.238871] protocol 88fb is buggy, dev hsr_slave_0 [ 628.248983] protocol 88fb is buggy, dev hsr_slave_1 [ 628.318904] protocol 88fb is buggy, dev hsr_slave_0 [ 628.324030] protocol 88fb is buggy, dev hsr_slave_1 [ 628.329197] protocol 88fb is buggy, dev hsr_slave_0 [ 628.334241] protocol 88fb is buggy, dev hsr_slave_1 [ 629.118901] protocol 88fb is buggy, dev hsr_slave_0 [ 629.124016] protocol 88fb is buggy, dev hsr_slave_1 [ 629.278916] protocol 88fb is buggy, dev hsr_slave_0 [ 629.284043] protocol 88fb is buggy, dev hsr_slave_1 12:07:52 executing program 0 (fault-call:2 fault-nth:42): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:07:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[]}, 0x78) 12:07:52 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:07:52 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:07:52 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xffb7) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43, 0x9, 0x2, {0x7, 0x10001, 0x3, 0x9, 0x0, 0x6, 0x2, 0x1, 0xff}}, 0x43) unlink(&(0x7f0000000bc0)='./file0\x00') 12:07:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) [ 632.290486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=16856 comm=syz-executor.5 [ 632.311512] rdma_op 0000000082d484a0 conn xmit_rdma (null) [ 632.330929] FAULT_INJECTION: forcing a failure. [ 632.330929] name failslab, interval 1, probability 0, space 0, times 0 [ 632.359596] CPU: 1 PID: 16868 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 632.366568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.366575] Call Trace: [ 632.366600] dump_stack+0x172/0x1f0 [ 632.366621] should_fail.cold+0xa/0x1b [ 632.386062] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 632.391198] ? lock_downgrade+0x810/0x810 [ 632.391226] __should_failslab+0x121/0x190 [ 632.391245] should_failslab+0x9/0x14 [ 632.403416] kmem_cache_alloc+0x2ae/0x700 [ 632.407579] ? memcpy+0x46/0x50 [ 632.410884] ? kstrdup+0x5a/0x70 [ 632.414271] __kernfs_new_node+0xef/0x680 [ 632.418437] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 632.423218] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 632.428769] ? irq_work_claim+0x98/0xc0 [ 632.432760] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 632.438311] ? irq_work_queue+0x30/0x90 [ 632.442304] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 632.447855] ? wake_up_klogd+0x99/0xd0 [ 632.451761] kernfs_new_node+0x99/0x130 [ 632.455754] kernfs_create_dir_ns+0x52/0x160 [ 632.460178] sysfs_create_dir_ns+0x131/0x290 [ 632.464600] ? sysfs_create_mount_point+0xa0/0xa0 [ 632.470362] kobject_add_internal.cold+0xe5/0x5d1 [ 632.475223] kobject_add+0x150/0x1c0 [ 632.478943] ? kset_create_and_add+0x1a0/0x1a0 [ 632.483544] ? __lockdep_init_map+0x10c/0x5b0 [ 632.488116] ? rcu_read_lock_sched_held+0x110/0x130 [ 632.493150] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 632.498703] device_add+0x3cc/0x1760 [ 632.502437] ? get_device_parent.isra.0+0x570/0x570 [ 632.507474] rfkill_register+0x1bf/0xb50 [ 632.511548] hci_register_dev+0x385/0x880 [ 632.515713] hci_uart_tty_ioctl+0x761/0xaf0 [ 632.520048] tty_ioctl+0x8b5/0x1510 [ 632.523685] ? hci_uart_init_work+0x140/0x140 [ 632.528192] ? tty_vhangup+0x30/0x30 [ 632.531908] ? mark_held_locks+0x100/0x100 [ 632.536163] ? __fget+0x340/0x540 [ 632.539660] ? __might_sleep+0x95/0x190 [ 632.543650] ? tty_vhangup+0x30/0x30 [ 632.547371] do_vfs_ioctl+0xd5f/0x1380 [ 632.551271] ? selinux_file_ioctl+0x46f/0x5e0 [ 632.555772] ? selinux_file_ioctl+0x125/0x5e0 [ 632.560280] ? ioctl_preallocate+0x210/0x210 [ 632.564695] ? selinux_file_mprotect+0x620/0x620 [ 632.569465] ? iterate_fd+0x360/0x360 [ 632.573278] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 632.578822] ? fput+0x128/0x1a0 [ 632.582115] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 632.587682] ? security_file_ioctl+0x8d/0xc0 [ 632.592100] ksys_ioctl+0xab/0xd0 [ 632.595568] __x64_sys_ioctl+0x73/0xb0 [ 632.599472] do_syscall_64+0xfd/0x620 [ 632.603287] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 632.608481] RIP: 0033:0x4598e9 [ 632.611779] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 632.630795] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:07:52 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:07:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]}, 0x78) [ 632.638515] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 632.645790] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 632.653061] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 632.660334] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 632.667608] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 632.680694] kobject_add_internal failed for rfkill37 (error: -12 parent: hci0) 12:07:52 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x2000000000000, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') 12:07:52 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:07:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]}, 0x78) [ 632.750433] rdma_op 00000000e3a31ae5 conn xmit_rdma (null) 12:07:52 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 632.852464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=17087 comm=syz-executor.5 [ 632.891958] rdma_op 0000000050554360 conn xmit_rdma (null) [ 633.278887] net_ratelimit: 20 callbacks suppressed [ 633.278895] protocol 88fb is buggy, dev hsr_slave_0 [ 633.288991] protocol 88fb is buggy, dev hsr_slave_1 [ 633.438903] protocol 88fb is buggy, dev hsr_slave_0 [ 633.444013] protocol 88fb is buggy, dev hsr_slave_1 [ 633.449155] protocol 88fb is buggy, dev hsr_slave_0 [ 633.454236] protocol 88fb is buggy, dev hsr_slave_1 [ 634.718914] protocol 88fb is buggy, dev hsr_slave_0 [ 634.718918] protocol 88fb is buggy, dev hsr_slave_0 [ 634.718974] protocol 88fb is buggy, dev hsr_slave_1 [ 634.724029] protocol 88fb is buggy, dev hsr_slave_1 [ 634.729495] Bluetooth: hci0: command 0x1003 tx timeout [ 634.752035] Bluetooth: hci0: sending frame failed (-49) [ 636.799198] Bluetooth: hci0: command 0x1001 tx timeout [ 636.804606] Bluetooth: hci0: sending frame failed (-49) [ 638.878917] net_ratelimit: 20 callbacks suppressed [ 638.878926] protocol 88fb is buggy, dev hsr_slave_0 [ 638.878959] protocol 88fb is buggy, dev hsr_slave_1 [ 638.883933] protocol 88fb is buggy, dev hsr_slave_1 [ 638.889032] protocol 88fb is buggy, dev hsr_slave_0 [ 638.904049] protocol 88fb is buggy, dev hsr_slave_1 [ 638.909248] Bluetooth: hci0: command 0x1009 tx timeout [ 639.518891] protocol 88fb is buggy, dev hsr_slave_0 [ 639.524008] protocol 88fb is buggy, dev hsr_slave_1 [ 639.678953] protocol 88fb is buggy, dev hsr_slave_0 [ 639.684210] protocol 88fb is buggy, dev hsr_slave_1 [ 639.689351] protocol 88fb is buggy, dev hsr_slave_0 12:08:03 executing program 0 (fault-call:2 fault-nth:43): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:08:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]}, 0x78) 12:08:03 executing program 3: r0 = creat(&(0x7f0000000840)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)=0xffb7) r2 = accept$netrom(r1, &(0x7f0000000040)={{}, [@rose, @bcast, @bcast, @rose, @null, @netrom, @null, @default]}, &(0x7f00000000c0)=0x48) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) dup2(r1, r0) r3 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x4, 0x400) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f00000001c0)={0x3, "b327ea"}, 0x4) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') 12:08:03 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:08:03 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:08:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x500, 0x0) 12:08:03 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 643.166753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=17202 comm=syz-executor.5 [ 643.183754] rdma_op 0000000085aa5b88 conn xmit_rdma (null) 12:08:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x128, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c7573746572000000000000000000"]}, 0x1a0) [ 643.235146] FAULT_INJECTION: forcing a failure. [ 643.235146] name failslab, interval 1, probability 0, space 0, times 0 [ 643.261633] CPU: 0 PID: 17230 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 643.268721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.268729] Call Trace: [ 643.268756] dump_stack+0x172/0x1f0 [ 643.268780] should_fail.cold+0xa/0x1b [ 643.268799] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 643.293345] ? lock_downgrade+0x810/0x810 [ 643.297521] __should_failslab+0x121/0x190 [ 643.301777] should_failslab+0x9/0x14 [ 643.305590] kmem_cache_alloc+0x2ae/0x700 [ 643.309753] ? kasan_check_write+0x14/0x20 [ 643.313997] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 643.318865] __kernfs_new_node+0xef/0x680 [ 643.323026] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 643.327880] ? mutex_unlock+0xd/0x10 [ 643.331602] ? kernfs_activate+0x192/0x1f0 [ 643.335958] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 643.341503] ? check_preemption_disabled+0x48/0x290 [ 643.346539] kernfs_new_node+0x99/0x130 [ 643.350617] __kernfs_create_file+0x51/0x33b [ 643.355037] sysfs_add_file_mode_ns+0x222/0x560 [ 643.359731] sysfs_create_file_ns+0x13a/0x1c0 [ 643.364239] ? sysfs_add_file_mode_ns+0x560/0x560 [ 643.369107] ? up_read+0x1a/0x110 [ 643.372580] device_create_file+0xfa/0x1e0 [ 643.376923] ? acpi_bind_one+0x830/0x830 [ 643.381000] device_add+0x411/0x1760 [ 643.384731] ? get_device_parent.isra.0+0x570/0x570 [ 643.389771] rfkill_register+0x1bf/0xb50 [ 643.393843] hci_register_dev+0x385/0x880 [ 643.398007] hci_uart_tty_ioctl+0x761/0xaf0 [ 643.402339] tty_ioctl+0x8b5/0x1510 [ 643.405979] ? hci_uart_init_work+0x140/0x140 [ 643.410616] ? tty_vhangup+0x30/0x30 [ 643.414352] ? mark_held_locks+0x100/0x100 [ 643.418613] ? __fget+0x340/0x540 [ 643.422091] ? __might_sleep+0x95/0x190 [ 643.426074] ? tty_vhangup+0x30/0x30 [ 643.429814] do_vfs_ioctl+0xd5f/0x1380 12:08:03 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 643.433708] ? selinux_file_ioctl+0x46f/0x5e0 [ 643.433724] ? selinux_file_ioctl+0x125/0x5e0 [ 643.433742] ? ioctl_preallocate+0x210/0x210 [ 643.433755] ? selinux_file_mprotect+0x620/0x620 [ 643.433776] ? iterate_fd+0x360/0x360 [ 643.447165] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 643.447183] ? fput+0x128/0x1a0 [ 643.447203] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 643.447220] ? security_file_ioctl+0x8d/0xc0 [ 643.474507] ksys_ioctl+0xab/0xd0 [ 643.477983] __x64_sys_ioctl+0x73/0xb0 [ 643.481887] do_syscall_64+0xfd/0x620 [ 643.481911] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 643.481924] RIP: 0033:0x4598e9 [ 643.481940] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 643.490904] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 643.490922] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 643.490931] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 12:08:03 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x8) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)=0xffb7) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)=0xffb7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x7f, 0x4) unlink(&(0x7f0000000bc0)='./file0\x00') [ 643.490940] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 643.490947] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 643.490955] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 643.560009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=17320 comm=syz-executor.5 [ 643.567202] Bluetooth: hci0: Frame reassembly failed (-84) 12:08:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x128, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c7573746572000000000000000000"]}, 0x1a0) [ 643.585970] Bluetooth: hci0: Frame reassembly failed (-84) [ 643.588703] rdma_op 00000000cbc56487 conn xmit_rdma (null) 12:08:03 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 643.712547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=17430 comm=syz-executor.5 [ 645.118896] net_ratelimit: 25 callbacks suppressed [ 645.118905] protocol 88fb is buggy, dev hsr_slave_0 [ 645.118942] protocol 88fb is buggy, dev hsr_slave_1 [ 645.123923] protocol 88fb is buggy, dev hsr_slave_1 [ 645.129043] protocol 88fb is buggy, dev hsr_slave_0 [ 645.144142] protocol 88fb is buggy, dev hsr_slave_1 [ 645.598980] Bluetooth: hci0: command 0x1003 tx timeout [ 645.604465] Bluetooth: hci0: sending frame failed (-49) [ 645.758898] protocol 88fb is buggy, dev hsr_slave_0 [ 645.764004] protocol 88fb is buggy, dev hsr_slave_1 [ 645.918933] protocol 88fb is buggy, dev hsr_slave_0 [ 645.924099] protocol 88fb is buggy, dev hsr_slave_1 [ 645.929266] protocol 88fb is buggy, dev hsr_slave_0 [ 647.678941] Bluetooth: hci0: command 0x1001 tx timeout [ 647.684359] Bluetooth: hci0: sending frame failed (-49) [ 649.758991] Bluetooth: hci0: command 0x1009 tx timeout [ 651.358910] net_ratelimit: 23 callbacks suppressed [ 651.358919] protocol 88fb is buggy, dev hsr_slave_0 [ 651.358956] protocol 88fb is buggy, dev hsr_slave_1 [ 651.364030] protocol 88fb is buggy, dev hsr_slave_1 [ 651.369149] protocol 88fb is buggy, dev hsr_slave_0 [ 651.384179] protocol 88fb is buggy, dev hsr_slave_1 [ 651.998897] protocol 88fb is buggy, dev hsr_slave_0 [ 652.004102] protocol 88fb is buggy, dev hsr_slave_1 [ 652.158915] protocol 88fb is buggy, dev hsr_slave_0 [ 652.164031] protocol 88fb is buggy, dev hsr_slave_1 [ 652.169167] protocol 88fb is buggy, dev hsr_slave_0 12:08:13 executing program 0 (fault-call:2 fault-nth:44): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:08:13 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:08:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x128, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a0) 12:08:13 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:08:13 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="4bbc017b9ed90f1578dd70d56a1e9d0796911d1b79ea0a0478a0b40da38b450f22cd5889efc5199ecc52d257879aa26162f806626db2136d0dc568f8e3d69bb56fa8e61229fa11238c34734fa34dc89b085797943ff7395f7125b563373f7d32863e324b11d7c32e46a9d231dda89cea3105014e84f17f42046eebbfb5ac20e64cc56157b018e09843a4068de018a7c107963af5b9c1c2d81bc0fcf1e309c45d8c66cb18a86720368cd19bb1eb20e74c53bf4c7f9f9a8c160bd0f88a2752adc20e5a08a7f4fdc8a690c2336dd6f0ae60d5d626d78e749643772b23540e0d01d424e860e9847e7ecb6d84a0c691d261729d53f13bc822bba87db1baf66c49e114") acct(&(0x7f0000000040)='./file0\x00') 12:08:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x3) [ 654.062036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=17440 comm=syz-executor.5 [ 654.089558] rdma_op 00000000a5d9b6be conn xmit_rdma (null) [ 654.104204] FAULT_INJECTION: forcing a failure. 12:08:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x1bc, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x234) [ 654.104204] name failslab, interval 1, probability 0, space 0, times 0 [ 654.131482] CPU: 0 PID: 17448 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 654.138457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.138464] Call Trace: [ 654.138491] dump_stack+0x172/0x1f0 [ 654.138512] should_fail.cold+0xa/0x1b [ 654.154092] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 654.154109] ? lock_downgrade+0x810/0x810 [ 654.154133] __should_failslab+0x121/0x190 [ 654.171491] should_failslab+0x9/0x14 [ 654.175315] kmem_cache_alloc+0x2ae/0x700 [ 654.179478] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 654.185023] ? check_preemption_disabled+0x48/0x290 [ 654.190049] __kernfs_new_node+0xef/0x680 [ 654.194204] ? mark_held_locks+0x100/0x100 [ 654.198455] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 654.203222] ? SOFTIRQ_verbose+0x10/0x10 [ 654.207303] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 654.212850] ? __kernfs_create_file+0x2a3/0x33b [ 654.217529] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 654.223005] ? find_held_lock+0x35/0x130 [ 654.227077] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 654.232550] kernfs_new_node+0x99/0x130 [ 654.236538] kernfs_create_link+0xdd/0x250 [ 654.240787] sysfs_do_create_link_sd.isra.0+0x90/0x130 [ 654.246071] sysfs_create_link+0x65/0xc0 [ 654.250141] device_add+0x4a7/0x1760 [ 654.253874] ? get_device_parent.isra.0+0x570/0x570 [ 654.258928] rfkill_register+0x1bf/0xb50 12:08:14 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 654.263013] hci_register_dev+0x385/0x880 [ 654.267187] hci_uart_tty_ioctl+0x761/0xaf0 [ 654.271527] tty_ioctl+0x8b5/0x1510 [ 654.275165] ? hci_uart_init_work+0x140/0x140 [ 654.279933] ? tty_vhangup+0x30/0x30 [ 654.283653] ? mark_held_locks+0x100/0x100 [ 654.287910] ? __fget+0x340/0x540 [ 654.291389] ? __might_sleep+0x95/0x190 [ 654.295379] ? tty_vhangup+0x30/0x30 [ 654.299104] do_vfs_ioctl+0xd5f/0x1380 [ 654.302999] ? selinux_file_ioctl+0x46f/0x5e0 [ 654.307504] ? selinux_file_ioctl+0x125/0x5e0 [ 654.312007] ? ioctl_preallocate+0x210/0x210 [ 654.316436] ? selinux_file_mprotect+0x620/0x620 [ 654.321208] ? iterate_fd+0x360/0x360 [ 654.325018] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 654.330560] ? fput+0x128/0x1a0 [ 654.333851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 654.339391] ? security_file_ioctl+0x8d/0xc0 [ 654.343810] ksys_ioctl+0xab/0xd0 [ 654.347283] __x64_sys_ioctl+0x73/0xb0 [ 654.351203] do_syscall_64+0xfd/0x620 [ 654.355018] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 654.360213] RIP: 0033:0x4598e9 [ 654.363413] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 654.382319] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.390038] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 654.397309] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 654.404596] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 12:08:14 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 654.411886] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 654.419167] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 654.442756] Bluetooth: hci0: Frame reassembly failed (-84) 12:08:14 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') 12:08:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x1bc, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x234) [ 654.511176] rdma_op 000000008b125f39 conn xmit_rdma (null) [ 654.511712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=17561 comm=syz-executor.5 12:08:14 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 654.667123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=17672 comm=syz-executor.5 [ 656.479036] net_ratelimit: 21 callbacks suppressed [ 656.479045] protocol 88fb is buggy, dev hsr_slave_0 [ 656.489154] protocol 88fb is buggy, dev hsr_slave_1 [ 656.494277] protocol 88fb is buggy, dev hsr_slave_0 [ 656.499360] protocol 88fb is buggy, dev hsr_slave_1 [ 656.504574] Bluetooth: hci0: command 0x1003 tx timeout [ 656.509947] Bluetooth: hci0: sending frame failed (-49) [ 657.598896] protocol 88fb is buggy, dev hsr_slave_0 [ 657.598911] protocol 88fb is buggy, dev hsr_slave_0 [ 657.604004] protocol 88fb is buggy, dev hsr_slave_1 [ 657.609035] protocol 88fb is buggy, dev hsr_slave_1 [ 657.619165] protocol 88fb is buggy, dev hsr_slave_0 [ 657.624229] protocol 88fb is buggy, dev hsr_slave_1 [ 658.559321] Bluetooth: hci0: command 0x1001 tx timeout [ 658.564736] Bluetooth: hci0: sending frame failed (-49) [ 660.639150] Bluetooth: hci0: command 0x1009 tx timeout [ 661.758899] net_ratelimit: 18 callbacks suppressed [ 661.758908] protocol 88fb is buggy, dev hsr_slave_0 [ 661.758952] protocol 88fb is buggy, dev hsr_slave_1 [ 661.763944] protocol 88fb is buggy, dev hsr_slave_1 [ 661.769059] protocol 88fb is buggy, dev hsr_slave_0 [ 661.784085] protocol 88fb is buggy, dev hsr_slave_1 [ 662.398923] protocol 88fb is buggy, dev hsr_slave_0 [ 662.404130] protocol 88fb is buggy, dev hsr_slave_1 [ 662.718913] protocol 88fb is buggy, dev hsr_slave_0 [ 662.726880] protocol 88fb is buggy, dev hsr_slave_1 [ 662.732026] protocol 88fb is buggy, dev hsr_slave_0 12:08:24 executing program 0 (fault-call:2 fault-nth:45): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:08:24 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:08:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x1bc, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c"]}, 0x234) 12:08:24 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:08:24 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x54) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') 12:08:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x300) 12:08:24 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 664.938774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=17680 comm=syz-executor.5 [ 664.955978] rdma_op 00000000b94c618f conn xmit_rdma (null) 12:08:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x206, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x27e) [ 665.007236] FAULT_INJECTION: forcing a failure. [ 665.007236] name failslab, interval 1, probability 0, space 0, times 0 [ 665.044651] CPU: 1 PID: 17693 Comm: syz-executor.0 Not tainted 4.19.71 #0 12:08:25 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x3, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') [ 665.051716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.061086] Call Trace: [ 665.063701] dump_stack+0x172/0x1f0 [ 665.067355] should_fail.cold+0xa/0x1b [ 665.071282] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 665.076405] ? lock_downgrade+0x810/0x810 [ 665.080575] __should_failslab+0x121/0x190 [ 665.085818] should_failslab+0x9/0x14 [ 665.089627] kmem_cache_alloc+0x2ae/0x700 [ 665.093784] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 665.099337] ? check_preemption_disabled+0x48/0x290 12:08:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x206, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000"]}, 0x27e) [ 665.104378] __kernfs_new_node+0xef/0x680 [ 665.108539] ? mark_held_locks+0x100/0x100 [ 665.112786] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 665.117545] ? SOFTIRQ_verbose+0x10/0x10 [ 665.121625] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 665.127167] ? __kernfs_create_file+0x2a3/0x33b [ 665.127187] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 665.127207] ? find_held_lock+0x35/0x130 [ 665.127224] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 665.141421] kernfs_new_node+0x99/0x130 [ 665.141442] kernfs_create_link+0xdd/0x250 [ 665.141464] sysfs_do_create_link_sd.isra.0+0x90/0x130 [ 665.141483] sysfs_create_link+0x65/0xc0 [ 665.141502] device_add+0x4a7/0x1760 [ 665.168170] ? get_device_parent.isra.0+0x570/0x570 [ 665.173206] rfkill_register+0x1bf/0xb50 [ 665.177282] hci_register_dev+0x385/0x880 [ 665.181450] hci_uart_tty_ioctl+0x761/0xaf0 [ 665.185783] tty_ioctl+0x8b5/0x1510 [ 665.189418] ? hci_uart_init_work+0x140/0x140 [ 665.193921] ? tty_vhangup+0x30/0x30 [ 665.197643] ? mark_held_locks+0x100/0x100 [ 665.201897] ? __fget+0x340/0x540 [ 665.205366] ? __might_sleep+0x95/0x190 [ 665.209346] ? tty_vhangup+0x30/0x30 [ 665.213072] do_vfs_ioctl+0xd5f/0x1380 [ 665.216973] ? selinux_file_ioctl+0x46f/0x5e0 [ 665.221478] ? selinux_file_ioctl+0x125/0x5e0 [ 665.225984] ? ioctl_preallocate+0x210/0x210 [ 665.230402] ? selinux_file_mprotect+0x620/0x620 [ 665.235173] ? iterate_fd+0x360/0x360 [ 665.238983] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 665.244528] ? fput+0x128/0x1a0 [ 665.247821] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 665.253363] ? security_file_ioctl+0x8d/0xc0 [ 665.257783] ksys_ioctl+0xab/0xd0 [ 665.261335] __x64_sys_ioctl+0x73/0xb0 [ 665.265235] do_syscall_64+0xfd/0x620 [ 665.269055] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 665.274250] RIP: 0033:0x4598e9 [ 665.277451] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 665.296360] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:08:25 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 665.304083] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 665.311361] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 665.318632] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 665.325908] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 665.333182] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 12:08:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x206, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x27e) [ 665.363258] Bluetooth: hci0: Frame reassembly failed (-84) [ 665.374050] rdma_op 00000000e169735c conn xmit_rdma (null) [ 665.377295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=17798 comm=syz-executor.5 [ 666.878921] net_ratelimit: 20 callbacks suppressed [ 666.878930] protocol 88fb is buggy, dev hsr_slave_0 [ 666.889041] protocol 88fb is buggy, dev hsr_slave_1 [ 666.894164] protocol 88fb is buggy, dev hsr_slave_0 [ 666.899252] protocol 88fb is buggy, dev hsr_slave_1 [ 667.439231] Bluetooth: hci0: command 0x1003 tx timeout [ 667.444751] Bluetooth: hci0: sending frame failed (-49) [ 667.998908] protocol 88fb is buggy, dev hsr_slave_0 [ 667.998913] protocol 88fb is buggy, dev hsr_slave_0 [ 667.998964] protocol 88fb is buggy, dev hsr_slave_1 [ 668.004014] protocol 88fb is buggy, dev hsr_slave_1 [ 668.009157] protocol 88fb is buggy, dev hsr_slave_0 [ 668.024180] protocol 88fb is buggy, dev hsr_slave_1 [ 669.518955] Bluetooth: hci0: command 0x1001 tx timeout [ 669.524357] Bluetooth: hci0: sending frame failed (-49) [ 671.598971] Bluetooth: hci0: command 0x1009 tx timeout [ 672.158903] net_ratelimit: 18 callbacks suppressed [ 672.158911] protocol 88fb is buggy, dev hsr_slave_0 [ 672.158945] protocol 88fb is buggy, dev hsr_slave_1 [ 672.163913] protocol 88fb is buggy, dev hsr_slave_1 [ 672.169011] protocol 88fb is buggy, dev hsr_slave_0 [ 672.184023] protocol 88fb is buggy, dev hsr_slave_1 [ 672.798893] protocol 88fb is buggy, dev hsr_slave_0 [ 672.803994] protocol 88fb is buggy, dev hsr_slave_1 [ 673.118931] protocol 88fb is buggy, dev hsr_slave_0 [ 673.124057] protocol 88fb is buggy, dev hsr_slave_1 [ 673.129291] protocol 88fb is buggy, dev hsr_slave_0 12:08:35 executing program 0 (fault-call:2 fault-nth:46): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:08:35 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:08:35 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:08:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x22b, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x2a3) 12:08:35 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x220402, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="00fbb2028217a5e885147aedf3f6cfbfb13e4030bb1f39efaf5e812652c9773b1051eb2ac9ad4c575955823a5420f6d89187a6b14c42a09a1d495109abd8dcfceed1e7861d58f7b64da6a1b64d4d0a68524a39d6188831ace08913e7f13b9cfef1998c4207dabff18e6dfcdabf89274c1ee46220daf9411846c617adf920564cef51c858dbfdc8fe5565df5ea22175cb686cae15a9a77b727a7e62d63f729a1f115d9172b2"], 0xb2, 0x0) 12:08:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x1000000) 12:08:35 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 675.824666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=17919 comm=syz-executor.5 [ 675.851217] rdma_op 00000000e74ea2f6 conn xmit_rdma (null) [ 675.865828] FAULT_INJECTION: forcing a failure. 12:08:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x22b, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x2a3) [ 675.865828] name failslab, interval 1, probability 0, space 0, times 0 [ 675.887473] CPU: 0 PID: 17927 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 675.894436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 675.894443] Call Trace: [ 675.894469] dump_stack+0x172/0x1f0 [ 675.894490] should_fail.cold+0xa/0x1b [ 675.913929] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 675.919046] ? lock_downgrade+0x810/0x810 [ 675.923216] __should_failslab+0x121/0x190 [ 675.927465] should_failslab+0x9/0x14 [ 675.931273] kmem_cache_alloc+0x2ae/0x700 [ 675.931292] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 675.931310] ? check_preemption_disabled+0x48/0x290 [ 675.945983] __kernfs_new_node+0xef/0x680 [ 675.950134] ? mark_held_locks+0x100/0x100 [ 675.954391] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 675.959159] ? SOFTIRQ_verbose+0x10/0x10 [ 675.963236] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 675.968784] ? __kernfs_create_file+0x2a3/0x33b 12:08:35 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 675.973466] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 675.978928] ? find_held_lock+0x35/0x130 [ 675.982997] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 675.983024] kernfs_new_node+0x99/0x130 [ 675.983043] kernfs_create_link+0xdd/0x250 [ 675.992457] sysfs_do_create_link_sd.isra.0+0x90/0x130 [ 675.992477] sysfs_create_link+0x65/0xc0 [ 675.992497] device_add+0x4a7/0x1760 [ 675.992519] ? get_device_parent.isra.0+0x570/0x570 [ 676.002015] rfkill_register+0x1bf/0xb50 [ 676.002037] hci_register_dev+0x385/0x880 [ 676.002061] hci_uart_tty_ioctl+0x761/0xaf0 [ 676.002079] tty_ioctl+0x8b5/0x1510 [ 676.009829] ? hci_uart_init_work+0x140/0x140 [ 676.009864] ? tty_vhangup+0x30/0x30 [ 676.009876] ? mark_held_locks+0x100/0x100 [ 676.009900] ? __fget+0x340/0x540 [ 676.009921] ? __might_sleep+0x95/0x190 [ 676.018964] ? tty_vhangup+0x30/0x30 [ 676.018983] do_vfs_ioctl+0xd5f/0x1380 [ 676.019000] ? selinux_file_ioctl+0x46f/0x5e0 [ 676.019013] ? selinux_file_ioctl+0x125/0x5e0 [ 676.019028] ? ioctl_preallocate+0x210/0x210 [ 676.019043] ? selinux_file_mprotect+0x620/0x620 [ 676.027491] ? iterate_fd+0x360/0x360 [ 676.027510] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 676.027524] ? fput+0x128/0x1a0 [ 676.027546] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 676.039341] ? security_file_ioctl+0x8d/0xc0 [ 676.039368] ksys_ioctl+0xab/0xd0 [ 676.039387] __x64_sys_ioctl+0x73/0xb0 [ 676.039405] do_syscall_64+0xfd/0x620 [ 676.039425] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.047079] RIP: 0033:0x4598e9 12:08:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x22b, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x2a3) [ 676.047095] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 676.047104] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 676.047119] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 676.047131] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 676.068567] rdma_op 00000000062058bb conn xmit_rdma (null) [ 676.072036] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 12:08:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x23e, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/574]}, 0x2b6) [ 676.072046] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 676.072054] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 676.147038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=18036 comm=syz-executor.5 [ 676.203099] Bluetooth: hci0: Frame reassembly failed (-84) 12:08:36 executing program 3: r0 = creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffff2f, 0x0, 0x8b000, 0x0) write$P9_RWRITE(r0, &(0x7f0000000500)={0xb, 0x77, 0x1, 0xdb62}, 0xb) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x8, &(0x7f0000000400)=[{&(0x7f00000000c0)="f3ca64cb3add4e46d6c2d9f3160943f428fe3534f554bc4b331e43b3b87366f626a85492dcbb9939f480", 0x2a, 0x6}, {&(0x7f0000000100)="0fb9018eae78b15d9cce98475308d9dadb1405f19ad3045ba2d06a58806b0c52afc84b287b193078d8bf", 0x2a, 0x200}, {&(0x7f0000000140)="9d32c43750ea636f5feac15b", 0xc, 0x8}, {&(0x7f0000000180)="323b162aaf8c16a896990ae5eb823a1c8c6f03e9801dd871fb85874c6eff53e444a20f72941ae19f9963100d4b0b3245ddc5721569decc1b7b64ba5714a8425eed1639cda7f90dc915df8694e213638df99a628f88de8173a6fb68e652353cabe3a9f2b464860202fd8775e398ccf73e04236be95e55", 0x76, 0x3000000000}, {&(0x7f0000000200)="33f65eef204b1388cbb292ca21c39c5f0204d1ae", 0x14, 0x5}, {&(0x7f0000000240)="c8276093f2705a270b60503c189fb92289128d6b03090a9afeb5188ac2bf4be888a3509806556421942e66eb894eb06392ace45dec907542b71e5ccdf5cdd0aad4b62fda04bf333ff0a4472fc98d790192c2638b6a1ca2a16cdb710cd9a20f6bef0275c34bdd0136a60ff9080bac53e1da49aabc6a1ac13482a642644f37505733f6eb8c67c5451c71b2c9b9fb0e6c78870afd457ed1e4174d530c700c953dd0977357502a40e64d0eabf712e29312b4786af531afb66e14ca70f8632ef43e29b657dfccf9a725c6a63801ea3af6778431721d51548b25642fe2e9d942702194f4f65e69f1cd0eaa1cecbab9bd49", 0xee, 0x4}, {&(0x7f0000000340)="bb5ef4304b82d88e14080794a335248f6d82", 0x12, 0x2}, {&(0x7f0000000380)="1b1e1c7237e69d47eb5cab8f926a2d5b70f44766a41382fa2c97d815f66ee3bfb3c6b4da84268143949ff3a4514c475ee7dd0592635a571d7009867ab286c0bf319be5b10575b0c6982755fae83c58c7c2adf7e77fafbe885f555adf41683382f7a248ab9bafb8cc8915f09ac401331a66556f89c25b1907e85a", 0x7a, 0x5}], 0xa88d, &(0x7f00000004c0)=',:md5sum-em0-\x00') unlink(&(0x7f0000000bc0)='./file0\x00') [ 677.279000] net_ratelimit: 18 callbacks suppressed [ 677.279010] protocol 88fb is buggy, dev hsr_slave_0 [ 677.289110] protocol 88fb is buggy, dev hsr_slave_1 [ 677.294238] protocol 88fb is buggy, dev hsr_slave_0 [ 677.299346] protocol 88fb is buggy, dev hsr_slave_1 [ 678.238871] Bluetooth: hci0: command 0x1003 tx timeout [ 678.244302] Bluetooth: hci0: sending frame failed (-49) [ 678.398964] protocol 88fb is buggy, dev hsr_slave_0 [ 678.404141] protocol 88fb is buggy, dev hsr_slave_1 [ 678.408882] protocol 88fb is buggy, dev hsr_slave_0 [ 678.409384] protocol 88fb is buggy, dev hsr_slave_0 [ 678.414374] protocol 88fb is buggy, dev hsr_slave_1 [ 678.419449] protocol 88fb is buggy, dev hsr_slave_1 [ 680.318871] Bluetooth: hci0: command 0x1001 tx timeout [ 680.324299] Bluetooth: hci0: sending frame failed (-49) [ 682.398940] Bluetooth: hci0: command 0x1009 tx timeout [ 682.558905] net_ratelimit: 18 callbacks suppressed [ 682.558913] protocol 88fb is buggy, dev hsr_slave_0 [ 682.558941] protocol 88fb is buggy, dev hsr_slave_1 [ 682.563912] protocol 88fb is buggy, dev hsr_slave_1 [ 682.569019] protocol 88fb is buggy, dev hsr_slave_0 [ 682.584065] protocol 88fb is buggy, dev hsr_slave_1 [ 683.198901] protocol 88fb is buggy, dev hsr_slave_0 [ 683.204049] protocol 88fb is buggy, dev hsr_slave_1 [ 683.518906] protocol 88fb is buggy, dev hsr_slave_0 [ 683.524005] protocol 88fb is buggy, dev hsr_slave_1 [ 683.529145] protocol 88fb is buggy, dev hsr_slave_0 12:08:46 executing program 0 (fault-call:2 fault-nth:47): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:08:46 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:08:46 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xffb7) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x0, 0x8, [@remote, @dev={[], 0xf}, @remote, @remote, @remote, @remote, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]}) syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000080)={0x88, 0x4, [0x100000000]}) unlink(&(0x7f0000000bc0)='./file0\x00') 12:08:46 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:08:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x23e, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/574]}, 0x2b6) 12:08:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x3000000) [ 686.680732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=18155 comm=syz-executor.5 [ 686.700938] rdma_op 000000004d8cace2 conn xmit_rdma (null) 12:08:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x23e, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/574]}, 0x2b6) [ 686.746348] FAULT_INJECTION: forcing a failure. [ 686.746348] name failslab, interval 1, probability 0, space 0, times 0 [ 686.791957] CPU: 0 PID: 18168 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 686.798945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 686.808316] Call Trace: [ 686.810933] dump_stack+0x172/0x1f0 [ 686.814574] should_fail.cold+0xa/0x1b [ 686.818476] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 686.823595] ? lock_downgrade+0x810/0x810 [ 686.827771] __should_failslab+0x121/0x190 [ 686.832018] should_failslab+0x9/0x14 [ 686.835827] kmem_cache_alloc+0x2ae/0x700 [ 686.839988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 686.845532] ? check_preemption_disabled+0x48/0x290 [ 686.850562] __kernfs_new_node+0xef/0x680 [ 686.854728] ? mark_held_locks+0x100/0x100 [ 686.858974] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 686.863764] ? SOFTIRQ_verbose+0x10/0x10 [ 686.867832] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 686.873375] ? __kernfs_create_file+0x2a3/0x33b [ 686.878054] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 686.883518] ? find_held_lock+0x35/0x130 [ 686.887589] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 686.893060] kernfs_new_node+0x99/0x130 [ 686.897050] kernfs_create_link+0xdd/0x250 [ 686.901306] sysfs_do_create_link_sd.isra.0+0x90/0x130 [ 686.906598] sysfs_create_link+0x65/0xc0 [ 686.910675] device_add+0x4a7/0x1760 [ 686.914402] ? get_device_parent.isra.0+0x570/0x570 [ 686.919436] rfkill_register+0x1bf/0xb50 [ 686.923507] hci_register_dev+0x385/0x880 [ 686.927678] hci_uart_tty_ioctl+0x761/0xaf0 [ 686.932040] tty_ioctl+0x8b5/0x1510 [ 686.935679] ? hci_uart_init_work+0x140/0x140 [ 686.940182] ? tty_vhangup+0x30/0x30 [ 686.943910] ? mark_held_locks+0x100/0x100 [ 686.948164] ? __fget+0x340/0x540 [ 686.951630] ? __might_sleep+0x95/0x190 [ 686.955611] ? tty_vhangup+0x30/0x30 [ 686.959334] do_vfs_ioctl+0xd5f/0x1380 [ 686.963231] ? selinux_file_ioctl+0x46f/0x5e0 [ 686.967738] ? selinux_file_ioctl+0x125/0x5e0 [ 686.972239] ? ioctl_preallocate+0x210/0x210 [ 686.976653] ? selinux_file_mprotect+0x620/0x620 [ 686.981427] ? iterate_fd+0x360/0x360 [ 686.985235] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 686.990777] ? fput+0x128/0x1a0 [ 686.994076] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 686.999617] ? security_file_ioctl+0x8d/0xc0 [ 687.004039] ksys_ioctl+0xab/0xd0 [ 687.007506] __x64_sys_ioctl+0x73/0xb0 [ 687.011408] do_syscall_64+0xfd/0x620 [ 687.015220] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 687.020416] RIP: 0033:0x4598e9 [ 687.023614] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:08:47 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00') [ 687.042534] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 687.050251] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 687.057523] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 687.064883] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 687.072153] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 687.079429] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 12:08:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x247, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x2bf) 12:08:47 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 687.098330] Bluetooth: hci0: Frame reassembly failed (-84) 12:08:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x247, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x2bf) [ 687.214576] rdma_op 000000002e15e984 conn xmit_rdma (null) 12:08:47 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 687.381200] rdma_op 00000000428ba227 conn xmit_rdma (null) [ 687.678923] net_ratelimit: 19 callbacks suppressed [ 687.678934] protocol 88fb is buggy, dev hsr_slave_0 [ 687.689099] protocol 88fb is buggy, dev hsr_slave_1 [ 687.694230] protocol 88fb is buggy, dev hsr_slave_0 [ 687.699329] protocol 88fb is buggy, dev hsr_slave_1 [ 688.798965] protocol 88fb is buggy, dev hsr_slave_0 [ 688.804143] protocol 88fb is buggy, dev hsr_slave_1 [ 688.808885] protocol 88fb is buggy, dev hsr_slave_0 [ 688.809302] protocol 88fb is buggy, dev hsr_slave_0 [ 688.814204] protocol 88fb is buggy, dev hsr_slave_1 [ 688.819848] protocol 88fb is buggy, dev hsr_slave_1 [ 689.128877] Bluetooth: hci0: command 0x1003 tx timeout [ 689.134284] Bluetooth: hci0: sending frame failed (-49) [ 691.208876] Bluetooth: hci0: command 0x1001 tx timeout [ 691.214467] Bluetooth: hci0: sending frame failed (-49) [ 692.958959] net_ratelimit: 18 callbacks suppressed [ 692.958970] protocol 88fb is buggy, dev hsr_slave_0 [ 692.968891] protocol 88fb is buggy, dev hsr_slave_0 [ 692.969053] protocol 88fb is buggy, dev hsr_slave_1 [ 692.973998] protocol 88fb is buggy, dev hsr_slave_1 [ 692.979077] protocol 88fb is buggy, dev hsr_slave_0 [ 692.989071] protocol 88fb is buggy, dev hsr_slave_1 [ 693.278869] Bluetooth: hci0: command 0x1009 tx timeout [ 693.598893] protocol 88fb is buggy, dev hsr_slave_0 [ 693.604027] protocol 88fb is buggy, dev hsr_slave_1 [ 693.918923] protocol 88fb is buggy, dev hsr_slave_0 [ 693.924036] protocol 88fb is buggy, dev hsr_slave_1 12:08:57 executing program 0 (fault-call:2 fault-nth:48): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:08:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x247, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x2bf) 12:08:57 executing program 3: r0 = creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x8085) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0385720, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r2, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x0, {0x3, 0x800, "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", 0x3d, 0x50, 0x9, 0x80000000, 0x0, 0x3, 0x6, 0x1}, r2}}, 0x128) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000340)=0x12) 12:08:57 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:08:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0xaaaaaa9) 12:08:57 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 697.572376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=18500 comm=syz-executor.5 [ 697.588226] rdma_op 00000000f4db6a41 conn xmit_rdma (null) [ 697.595562] FAULT_INJECTION: forcing a failure. [ 697.595562] name failslab, interval 1, probability 0, space 0, times 0 [ 697.618784] CPU: 1 PID: 18502 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 697.625761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 697.635151] Call Trace: [ 697.637768] dump_stack+0x172/0x1f0 [ 697.641420] should_fail.cold+0xa/0x1b [ 697.645347] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 697.650461] ? lock_downgrade+0x810/0x810 [ 697.650489] __should_failslab+0x121/0x190 [ 697.650509] should_failslab+0x9/0x14 [ 697.650524] __kmalloc_track_caller+0x2de/0x750 [ 697.650537] ? __lock_acquire+0x6ee/0x49c0 [ 697.650552] ? kstrdup_const+0x66/0x80 [ 697.650570] kstrdup+0x3a/0x70 [ 697.662730] kstrdup_const+0x66/0x80 [ 697.662751] __kernfs_new_node+0xb0/0x680 [ 697.662763] ? mark_held_locks+0x100/0x100 [ 697.662781] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 697.695551] ? SOFTIRQ_verbose+0x10/0x10 [ 697.699630] ? wait_for_completion+0x440/0x440 [ 697.704224] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 697.709690] ? find_held_lock+0x35/0x130 [ 697.713768] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 697.719231] ? kernfs_activate+0x192/0x1f0 [ 697.719251] kernfs_new_node+0x99/0x130 [ 697.719271] kernfs_create_link+0xdd/0x250 [ 697.719290] sysfs_do_create_link_sd.isra.0+0x90/0x130 [ 697.719308] sysfs_create_link+0x65/0xc0 [ 697.719328] device_add+0x7ce/0x1760 [ 697.727523] ? get_device_parent.isra.0+0x570/0x570 [ 697.749792] rfkill_register+0x1bf/0xb50 [ 697.753871] hci_register_dev+0x385/0x880 [ 697.758036] hci_uart_tty_ioctl+0x761/0xaf0 [ 697.762400] tty_ioctl+0x8b5/0x1510 [ 697.766043] ? hci_uart_init_work+0x140/0x140 [ 697.770549] ? tty_vhangup+0x30/0x30 [ 697.774272] ? mark_held_locks+0x100/0x100 [ 697.778525] ? __fget+0x340/0x540 [ 697.782004] ? __might_sleep+0x95/0x190 [ 697.785989] ? tty_vhangup+0x30/0x30 [ 697.789715] do_vfs_ioctl+0xd5f/0x1380 [ 697.793611] ? selinux_file_ioctl+0x46f/0x5e0 [ 697.798111] ? selinux_file_ioctl+0x125/0x5e0 [ 697.802617] ? ioctl_preallocate+0x210/0x210 [ 697.807031] ? selinux_file_mprotect+0x620/0x620 [ 697.811804] ? iterate_fd+0x360/0x360 [ 697.815614] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 12:08:57 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:08:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x24c, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/588]}, 0x2c4) [ 697.821160] ? fput+0x128/0x1a0 [ 697.824460] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 697.830012] ? security_file_ioctl+0x8d/0xc0 [ 697.834432] ksys_ioctl+0xab/0xd0 [ 697.837898] __x64_sys_ioctl+0x73/0xb0 [ 697.841808] do_syscall_64+0xfd/0x620 [ 697.845625] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 697.850824] RIP: 0033:0x4598e9 [ 697.854025] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:08:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x24c, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/588]}, 0x2c4) [ 697.872942] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 697.880674] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 697.887956] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 697.895236] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 697.902521] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 697.909809] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 697.924915] rdma_op 00000000be61e52b conn xmit_rdma (null) [ 697.937527] Bluetooth: hci0: sending frame failed (-49) 12:08:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x24c, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/588]}, 0x2c4) 12:08:57 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:08:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x24e, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/590]}, 0x2c6) [ 698.076988] rdma_op 00000000e9175788 conn xmit_rdma (null) [ 698.083735] net_ratelimit: 20 callbacks suppressed [ 698.083743] protocol 88fb is buggy, dev hsr_slave_0 [ 698.083793] protocol 88fb is buggy, dev hsr_slave_1 [ 698.083882] protocol 88fb is buggy, dev hsr_slave_0 [ 698.083927] protocol 88fb is buggy, dev hsr_slave_1 [ 699.198895] protocol 88fb is buggy, dev hsr_slave_0 [ 699.198901] protocol 88fb is buggy, dev hsr_slave_0 [ 699.198990] protocol 88fb is buggy, dev hsr_slave_1 [ 699.203995] protocol 88fb is buggy, dev hsr_slave_1 [ 699.209118] protocol 88fb is buggy, dev hsr_slave_0 [ 699.224153] protocol 88fb is buggy, dev hsr_slave_1 [ 699.998868] Bluetooth: hci0: command 0x1003 tx timeout [ 700.004382] Bluetooth: hci0: sending frame failed (-49) [ 702.078862] Bluetooth: hci0: command 0x1001 tx timeout [ 702.084273] Bluetooth: hci0: sending frame failed (-49) [ 703.358891] net_ratelimit: 17 callbacks suppressed [ 703.358899] protocol 88fb is buggy, dev hsr_slave_0 [ 703.358927] protocol 88fb is buggy, dev hsr_slave_1 [ 703.363905] protocol 88fb is buggy, dev hsr_slave_1 [ 703.369014] protocol 88fb is buggy, dev hsr_slave_0 [ 703.384014] protocol 88fb is buggy, dev hsr_slave_1 [ 704.078902] protocol 88fb is buggy, dev hsr_slave_0 [ 704.083997] protocol 88fb is buggy, dev hsr_slave_1 [ 704.158931] Bluetooth: hci0: command 0x1009 tx timeout [ 704.318904] protocol 88fb is buggy, dev hsr_slave_0 [ 704.324110] protocol 88fb is buggy, dev hsr_slave_1 [ 704.329235] protocol 88fb is buggy, dev hsr_slave_0 12:09:08 executing program 0 (fault-call:2 fault-nth:49): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:09:08 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40, 0x0) sendto$llc(r0, &(0x7f0000000040)="47e04ba236b34d55de2318c2ca3add2ff4b3830cc7527bfdd14f17f2522832", 0x1f, 0x4020040, &(0x7f0000000080)={0x1a, 0x1dea1ac78733e624, 0x1f, 0x5, 0x20, 0x10000, @link_local}, 0x10) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)=0xffb7) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000000c0)={{0x401, 0x1}, 0x1, 0x0, 0x1, {0xff, 0x3}, 0x9, 0x80000000}) 12:09:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x24e, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/590]}, 0x2c6) 12:09:08 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:09:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0xa9aaaa0a) 12:09:08 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 708.439579] rdma_op 00000000c718150b conn xmit_rdma (null) [ 708.449107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=18834 comm=syz-executor.5 [ 708.461648] audit: type=1400 audit(1568030948.417:95): avc: denied { write } for pid=18829 comm="syz-executor.3" name="net" dev="proc" ino=54897 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 708.486849] net_ratelimit: 21 callbacks suppressed [ 708.486857] protocol 88fb is buggy, dev hsr_slave_0 [ 708.486915] protocol 88fb is buggy, dev hsr_slave_1 [ 708.487005] protocol 88fb is buggy, dev hsr_slave_0 [ 708.487052] protocol 88fb is buggy, dev hsr_slave_1 [ 708.516234] audit: type=1400 audit(1568030948.417:96): avc: denied { add_name } for pid=18829 comm="syz-executor.3" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 12:09:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x24e, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/590]}, 0x2c6) [ 708.540160] audit: type=1400 audit(1568030948.427:97): avc: denied { create } for pid=18829 comm="syz-executor.3" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 [ 708.567667] FAULT_INJECTION: forcing a failure. [ 708.567667] name failslab, interval 1, probability 0, space 0, times 0 [ 708.579709] CPU: 0 PID: 18844 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 708.586673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 708.596038] Call Trace: [ 708.598648] dump_stack+0x172/0x1f0 [ 708.602299] should_fail.cold+0xa/0x1b [ 708.606203] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 708.611312] ? lock_downgrade+0x810/0x810 [ 708.615478] __should_failslab+0x121/0x190 [ 708.619725] should_failslab+0x9/0x14 [ 708.623533] kmem_cache_alloc+0x2ae/0x700 [ 708.627692] ? check_preemption_disabled+0x48/0x290 [ 708.632732] __kernfs_new_node+0xef/0x680 [ 708.636896] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 708.641654] ? lock_acquire+0x16f/0x3f0 [ 708.645637] ? kernfs_activate+0x192/0x1f0 [ 708.649881] ? find_held_lock+0x35/0x130 [ 708.653946] ? kernfs_activate+0x192/0x1f0 [ 708.658206] kernfs_new_node+0x99/0x130 [ 708.662199] __kernfs_create_file+0x51/0x33b [ 708.666621] sysfs_add_file_mode_ns+0x222/0x560 [ 708.671306] internal_create_group+0x383/0xc30 [ 708.675912] ? remove_files.isra.0+0x190/0x190 [ 708.680497] ? kernfs_put+0x3c2/0x5d0 [ 708.684306] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 708.689848] ? kernfs_create_link+0x1d2/0x250 [ 708.694362] sysfs_create_groups+0x9b/0x141 [ 708.698702] device_add+0x87e/0x1760 [ 708.702436] ? get_device_parent.isra.0+0x570/0x570 [ 708.707470] rfkill_register+0x1bf/0xb50 [ 708.711544] hci_register_dev+0x385/0x880 [ 708.715714] hci_uart_tty_ioctl+0x761/0xaf0 [ 708.720050] tty_ioctl+0x8b5/0x1510 [ 708.723684] ? hci_uart_init_work+0x140/0x140 [ 708.728188] ? tty_vhangup+0x30/0x30 [ 708.731908] ? mark_held_locks+0x100/0x100 [ 708.736161] ? __fget+0x340/0x540 [ 708.739629] ? __might_sleep+0x95/0x190 [ 708.743609] ? tty_vhangup+0x30/0x30 [ 708.747333] do_vfs_ioctl+0xd5f/0x1380 [ 708.751244] ? selinux_file_ioctl+0x46f/0x5e0 [ 708.755746] ? selinux_file_ioctl+0x125/0x5e0 [ 708.760254] ? ioctl_preallocate+0x210/0x210 [ 708.764669] ? selinux_file_mprotect+0x620/0x620 [ 708.769440] ? iterate_fd+0x360/0x360 [ 708.773248] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 708.778880] ? fput+0x128/0x1a0 [ 708.782174] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 708.787721] ? security_file_ioctl+0x8d/0xc0 [ 708.792146] ksys_ioctl+0xab/0xd0 [ 708.795613] __x64_sys_ioctl+0x73/0xb0 [ 708.799520] do_syscall_64+0xfd/0x620 [ 708.803331] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 708.808523] RIP: 0033:0x4598e9 [ 708.811724] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 708.830637] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:09:08 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 708.838359] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 708.845636] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 708.852910] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 708.860184] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 708.867460] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 12:09:08 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x208, 0x0, 0x8b000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x8a000, 0x1) unlink(&(0x7f0000000bc0)='./file0\x00') [ 708.905604] Bluetooth: hci0: Frame reassembly failed (-84) 12:09:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x24f, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/591]}, 0x2c7) 12:09:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x24f, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/591]}, 0x2c7) [ 708.968466] rdma_op 00000000cdf770d3 conn xmit_rdma (null) 12:09:09 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 709.145407] rdma_op 0000000004ee23cd conn xmit_rdma (null) [ 709.598924] protocol 88fb is buggy, dev hsr_slave_0 [ 709.598940] protocol 88fb is buggy, dev hsr_slave_0 [ 709.604049] protocol 88fb is buggy, dev hsr_slave_1 [ 709.609063] protocol 88fb is buggy, dev hsr_slave_1 [ 709.619213] protocol 88fb is buggy, dev hsr_slave_0 [ 709.624263] protocol 88fb is buggy, dev hsr_slave_1 [ 710.960480] Bluetooth: hci0: command 0x1003 tx timeout [ 710.965898] Bluetooth: hci0: sending frame failed (-49) [ 713.038899] Bluetooth: hci0: command 0x1001 tx timeout [ 713.044316] Bluetooth: hci0: sending frame failed (-49) [ 713.758914] net_ratelimit: 18 callbacks suppressed [ 713.758922] protocol 88fb is buggy, dev hsr_slave_0 [ 713.758948] protocol 88fb is buggy, dev hsr_slave_1 [ 713.763923] protocol 88fb is buggy, dev hsr_slave_1 [ 713.769021] protocol 88fb is buggy, dev hsr_slave_0 [ 713.784070] protocol 88fb is buggy, dev hsr_slave_1 [ 714.478903] protocol 88fb is buggy, dev hsr_slave_0 [ 714.484012] protocol 88fb is buggy, dev hsr_slave_1 [ 714.718959] protocol 88fb is buggy, dev hsr_slave_0 [ 714.724093] protocol 88fb is buggy, dev hsr_slave_1 [ 714.729284] protocol 88fb is buggy, dev hsr_slave_0 [ 715.118926] Bluetooth: hci0: command 0x1009 tx timeout [ 718.878955] net_ratelimit: 21 callbacks suppressed [ 718.878965] protocol 88fb is buggy, dev hsr_slave_0 [ 718.889056] protocol 88fb is buggy, dev hsr_slave_1 [ 718.894183] protocol 88fb is buggy, dev hsr_slave_0 [ 718.899272] protocol 88fb is buggy, dev hsr_slave_1 12:09:19 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') 12:09:19 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:09:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x24f, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/591]}, 0x2c7) 12:09:19 executing program 0 (fault-call:2 fault-nth:50): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:09:19 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x100000000000000) 12:09:19 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 719.336934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=19165 comm=syz-executor.5 [ 719.360531] rdma_op 00000000bfaf8896 conn xmit_rdma (null) [ 719.368452] FAULT_INJECTION: forcing a failure. [ 719.368452] name failslab, interval 1, probability 0, space 0, times 0 [ 719.385763] CPU: 1 PID: 19176 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 719.392739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 719.402097] Call Trace: [ 719.404694] dump_stack+0x172/0x1f0 [ 719.408323] should_fail.cold+0xa/0x1b [ 719.412216] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 719.417312] ? lock_downgrade+0x810/0x810 [ 719.421482] __should_failslab+0x121/0x190 [ 719.425715] should_failslab+0x9/0x14 [ 719.429509] kmem_cache_alloc+0x2ae/0x700 [ 719.433652] ? lock_downgrade+0x810/0x810 [ 719.437803] __kernfs_new_node+0xef/0x680 [ 719.441946] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 719.446699] ? wait_for_completion+0x440/0x440 [ 719.451280] ? mutex_unlock+0xd/0x10 [ 719.454993] ? kernfs_activate+0x192/0x1f0 [ 719.459219] kernfs_new_node+0x99/0x130 [ 719.463186] __kernfs_create_file+0x51/0x33b [ 719.467588] sysfs_add_file_mode_ns+0x222/0x560 [ 719.472252] internal_create_group+0x383/0xc30 [ 719.476833] ? remove_files.isra.0+0x190/0x190 [ 719.481403] ? kernfs_put+0x3c2/0x5d0 [ 719.485195] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 719.490719] ? kernfs_create_link+0x1d2/0x250 [ 719.495209] sysfs_create_groups+0x9b/0x141 [ 719.499525] device_add+0x87e/0x1760 [ 719.503244] ? get_device_parent.isra.0+0x570/0x570 [ 719.508254] rfkill_register+0x1bf/0xb50 [ 719.512308] hci_register_dev+0x385/0x880 [ 719.516454] hci_uart_tty_ioctl+0x761/0xaf0 [ 719.520767] tty_ioctl+0x8b5/0x1510 [ 719.524383] ? hci_uart_init_work+0x140/0x140 [ 719.528886] ? tty_vhangup+0x30/0x30 [ 719.532612] ? mark_held_locks+0x100/0x100 [ 719.536853] ? __fget+0x340/0x540 [ 719.540301] ? __might_sleep+0x95/0x190 [ 719.544263] ? tty_vhangup+0x30/0x30 [ 719.547967] do_vfs_ioctl+0xd5f/0x1380 [ 719.551844] ? selinux_file_ioctl+0x46f/0x5e0 [ 719.556326] ? selinux_file_ioctl+0x125/0x5e0 [ 719.560809] ? ioctl_preallocate+0x210/0x210 [ 719.565215] ? selinux_file_mprotect+0x620/0x620 [ 719.569965] ? iterate_fd+0x360/0x360 [ 719.573755] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 719.579288] ? fput+0x128/0x1a0 [ 719.582566] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 719.588089] ? security_file_ioctl+0x8d/0xc0 [ 719.592490] ksys_ioctl+0xab/0xd0 [ 719.595936] __x64_sys_ioctl+0x73/0xb0 [ 719.599815] do_syscall_64+0xfd/0x620 [ 719.603610] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 719.608790] RIP: 0033:0x4598e9 [ 719.611979] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 719.630866] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 719.638565] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 719.645821] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 719.653078] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 719.660336] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 719.667592] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 12:09:19 executing program 2: [ 719.687771] Bluetooth: hci0: Frame reassembly failed (-84) 12:09:19 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:09:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xffb7) r1 = dup2(0xffffffffffffffff, r0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000000)=0x200) creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') 12:09:19 executing program 2: 12:09:19 executing program 2: [ 719.827682] rdma_op 0000000049d0068b conn xmit_rdma (null) 12:09:19 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 719.984439] rdma_op 000000008f1600ed conn xmit_rdma (null) [ 719.998898] protocol 88fb is buggy, dev hsr_slave_0 [ 719.998903] protocol 88fb is buggy, dev hsr_slave_0 [ 719.998983] protocol 88fb is buggy, dev hsr_slave_1 [ 720.004042] protocol 88fb is buggy, dev hsr_slave_1 [ 720.009070] protocol 88fb is buggy, dev hsr_slave_0 [ 720.024090] protocol 88fb is buggy, dev hsr_slave_1 [ 721.758990] Bluetooth: hci0: command 0x1003 tx timeout [ 721.764521] Bluetooth: hci0: sending frame failed (-49) [ 723.838957] Bluetooth: hci0: command 0x1001 tx timeout [ 723.844364] Bluetooth: hci0: sending frame failed (-49) [ 724.158903] net_ratelimit: 17 callbacks suppressed [ 724.158911] protocol 88fb is buggy, dev hsr_slave_0 [ 724.158959] protocol 88fb is buggy, dev hsr_slave_1 [ 724.163915] protocol 88fb is buggy, dev hsr_slave_1 [ 724.169022] protocol 88fb is buggy, dev hsr_slave_0 [ 724.184031] protocol 88fb is buggy, dev hsr_slave_1 [ 724.879078] protocol 88fb is buggy, dev hsr_slave_0 [ 724.884176] protocol 88fb is buggy, dev hsr_slave_1 [ 725.118906] protocol 88fb is buggy, dev hsr_slave_0 [ 725.124017] protocol 88fb is buggy, dev hsr_slave_1 [ 725.129165] protocol 88fb is buggy, dev hsr_slave_0 [ 725.918995] Bluetooth: hci0: command 0x1009 tx timeout [ 729.278927] net_ratelimit: 21 callbacks suppressed [ 729.278936] protocol 88fb is buggy, dev hsr_slave_0 [ 729.289021] protocol 88fb is buggy, dev hsr_slave_1 [ 729.294153] protocol 88fb is buggy, dev hsr_slave_0 [ 729.299255] protocol 88fb is buggy, dev hsr_slave_1 12:09:30 executing program 0 (fault-call:2 fault-nth:51): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:09:30 executing program 2: 12:09:30 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000080)={[{@mode={'mode', 0x3d, 0x3f}}, {@mode={'mode', 0x3d, 0x401}}], [{@subj_user={'subj_user', 0x3d, 'posix_acl_accessprocvmnet0vboxnet1/lo)vboxnet1'}}]}) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0xa3830, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') 12:09:30 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:09:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x300000000000000) 12:09:30 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:09:30 executing program 2: [ 730.205410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=19507 comm=syz-executor.5 [ 730.216601] rdma_op 00000000c333f014 conn xmit_rdma (null) [ 730.281556] FAULT_INJECTION: forcing a failure. [ 730.281556] name failslab, interval 1, probability 0, space 0, times 0 [ 730.320271] CPU: 1 PID: 19525 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 730.327257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 730.336621] Call Trace: [ 730.339246] dump_stack+0x172/0x1f0 [ 730.342896] should_fail.cold+0xa/0x1b [ 730.346810] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 730.351939] ? lock_downgrade+0x810/0x810 [ 730.356113] __should_failslab+0x121/0x190 [ 730.360359] should_failslab+0x9/0x14 [ 730.364168] kmem_cache_alloc+0x2ae/0x700 [ 730.368328] ? lock_downgrade+0x810/0x810 [ 730.372490] __kernfs_new_node+0xef/0x680 [ 730.376654] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 730.381420] ? wait_for_completion+0x440/0x440 [ 730.386022] ? mutex_unlock+0xd/0x10 [ 730.389740] ? kernfs_activate+0x192/0x1f0 [ 730.393986] kernfs_new_node+0x99/0x130 [ 730.397976] __kernfs_create_file+0x51/0x33b [ 730.402412] sysfs_add_file_mode_ns+0x222/0x560 [ 730.407118] internal_create_group+0x383/0xc30 [ 730.411729] ? remove_files.isra.0+0x190/0x190 [ 730.416331] ? kernfs_put+0x3c2/0x5d0 [ 730.420148] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 730.425696] ? kernfs_create_link+0x1d2/0x250 [ 730.430215] sysfs_create_groups+0x9b/0x141 [ 730.434557] device_add+0x87e/0x1760 [ 730.438291] ? get_device_parent.isra.0+0x570/0x570 [ 730.443328] rfkill_register+0x1bf/0xb50 [ 730.447409] hci_register_dev+0x385/0x880 [ 730.451581] hci_uart_tty_ioctl+0x761/0xaf0 [ 730.455913] tty_ioctl+0x8b5/0x1510 [ 730.459547] ? hci_uart_init_work+0x140/0x140 [ 730.464053] ? tty_vhangup+0x30/0x30 [ 730.467771] ? mark_held_locks+0x100/0x100 [ 730.472028] ? __fget+0x340/0x540 [ 730.475507] ? __might_sleep+0x95/0x190 [ 730.479488] ? tty_vhangup+0x30/0x30 [ 730.483210] do_vfs_ioctl+0xd5f/0x1380 [ 730.487192] ? selinux_file_ioctl+0x46f/0x5e0 [ 730.491705] ? selinux_file_ioctl+0x125/0x5e0 [ 730.496213] ? ioctl_preallocate+0x210/0x210 [ 730.500627] ? selinux_file_mprotect+0x620/0x620 [ 730.505396] ? iterate_fd+0x360/0x360 [ 730.509216] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 730.514759] ? fput+0x128/0x1a0 [ 730.518052] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 730.523591] ? security_file_ioctl+0x8d/0xc0 [ 730.528006] ksys_ioctl+0xab/0xd0 [ 730.531473] __x64_sys_ioctl+0x73/0xb0 [ 730.535379] do_syscall_64+0xfd/0x620 [ 730.539210] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 730.544403] RIP: 0033:0x4598e9 [ 730.547615] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 730.566521] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 730.574238] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 730.581510] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 730.588781] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 730.596051] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 730.603324] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 730.610912] protocol 88fb is buggy, dev hsr_slave_0 [ 730.616014] protocol 88fb is buggy, dev hsr_slave_1 [ 730.619178] protocol 88fb is buggy, dev hsr_slave_0 [ 730.626094] protocol 88fb is buggy, dev hsr_slave_1 12:09:30 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:09:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xffb7) getsockopt$llc_int(r0, 0x10c, 0x6f8d7e60f42a502d, &(0x7f0000000000), &(0x7f0000000040)=0x4) creat(&(0x7f0000000840)='./file0\x00', 0x0) r1 = socket$inet(0x2b, 0x4, 0x0) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x6, &(0x7f0000000600)=[{&(0x7f00000002c0)="4d6f17df41dd996e662c9f6c82c28383e47fab0569e901ff1515f74fc7d9fa9d7d2c299818f0240de35eb6d55fa18c5e68e2fb847ea1f8dad171691e549fecbe1dc61bf67226659de69d1d4361c324523596e85a4ca92e7e506310a91829eed3369af3c14f517b30f1f128a783ae6253c54356fbb2ba9ab74a200a1e86d9e581debcb30aad01346233196be78b8c926f6b7a98f857c518bcdfd325165ff6835c29ea30c94710c07cdebfc1cc8f31da407babf7df5543c38793637c4845ff3a09a495e4c8e836cca1237dd111147957866292771b1c17e74c5eff4010c9bbaabf5e0a7bddded891b1385fa28995f8577cd3340b8cd7525ef2e46c", 0xfa, 0x7}, {&(0x7f0000000140)="eea5cb94feef8667a8809235da8a944b952c01a206f6ccddd74690fc48f8917726456f3330d97c6621b9eba34995cb884e42d6637e3381625cb58a8f3250a14b93e8a021bf460d1ca735f456bbff028dcd1ae57be93c4085bc169a93b005a2996e86e5b41d149d6eeb2966cde4942df232e4ca28ad07009bea555db3d465ab41d2228b4c86a896870eeffe57ba05", 0x8e, 0x9}, {&(0x7f00000003c0)="f6e305dcd634bf813228f81de39c56fe2737b60b13196a282fe93321101cce7de8ad1e4575507d6353606f996c0bbd6b4940f8793d784b72cbeb89a1c68b22c25c61f5361cb2db9c3d01c1e9fb22ac51129a5af95aeb119055b04a6fa7e303fd23700e1d9a1ab5d2ac40b9c948b89e2fadb35cbf6ccfc8b714f22d630c1b5fd5c0dac106", 0x84, 0x3}, {&(0x7f0000000c00)="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", 0x1000, 0x7}, {&(0x7f0000000480)="495ce97292daddbe1ea41532d7ff06015db842641349220f9357686bacb703d7206f0b47e7facf5616351c38e639c02f3dfc5c52ac0e55d649749fe031a1313bc2db1e35bbff43e5ca173677711c786f8067faaf725b9d2182f47e1be078fada496aa0e57cfde5445e8b9d44819390cfd853e27bf74e751969fce4c13c1bf081b7d4b825", 0x84, 0x48}, {&(0x7f0000000540)="ec993fcb0218935df97901bbbf1619c77a2841f97775dc049eb2b417001b05dfc54333e5177414169023d69c281f3ea3050f2d74e0264a479d19d254ecd92cb6b6b03e981d825793a1d3f00352cc5b6ba1da0469cd060feb9403b09962a8c73774708e3983e0302a3e0b299498d1fd3002226692d4453f9145bc1d89a5b48d16c5a82f081bec", 0x86, 0x81}], 0x502766f8858a76dc, &(0x7f0000000780)={[{@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@dax='dax'}, {@nojournal_checksum='nojournal_checksum'}], [{@uid_gt={'uid>', r2}}]}) accept4$inet(r1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)=0xffb7) r4 = dup2(r3, r1) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') 12:09:30 executing program 2: 12:09:30 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 730.631251] protocol 88fb is buggy, dev hsr_slave_0 [ 730.636318] protocol 88fb is buggy, dev hsr_slave_1 [ 730.667514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=19620 comm=syz-executor.5 12:09:30 executing program 2 (fault-call:3 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 730.759526] rdma_op 0000000038afdd78 conn xmit_rdma (null) [ 730.801443] FAULT_INJECTION: forcing a failure. [ 730.801443] name failslab, interval 1, probability 0, space 0, times 0 [ 730.822819] CPU: 1 PID: 19679 Comm: syz-executor.2 Not tainted 4.19.71 #0 [ 730.829790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 730.839170] Call Trace: [ 730.841775] dump_stack+0x172/0x1f0 [ 730.845432] should_fail.cold+0xa/0x1b [ 730.849337] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 730.854453] ? lock_downgrade+0x810/0x810 [ 730.858628] __should_failslab+0x121/0x190 [ 730.862879] should_failslab+0x9/0x14 [ 730.866686] kmem_cache_alloc_node_trace+0x274/0x720 [ 730.871798] ? __might_fault+0x12b/0x1e0 [ 730.875973] __get_vm_area_node+0x12b/0x3a0 [ 730.880311] __vmalloc_node_range+0xc7/0x790 [ 730.884832] ? do_replace+0x1d0/0x420 [ 730.888655] __vmalloc+0x44/0x50 [ 730.892034] ? do_replace+0x1d0/0x420 [ 730.895842] do_replace+0x1d0/0x420 [ 730.899483] ? compat_target_to_user+0x340/0x340 [ 730.904262] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 730.909864] ? ns_capable_common+0x141/0x170 [ 730.914287] do_ebt_set_ctl+0xe6/0x110 [ 730.918189] nf_setsockopt+0x77/0xd0 [ 730.921991] ip_setsockopt+0xdf/0x100 [ 730.925831] udp_setsockopt+0x68/0xb0 [ 730.929649] sock_common_setsockopt+0x94/0xd0 [ 730.934192] __sys_setsockopt+0x17a/0x280 [ 730.938357] ? kernel_accept+0x310/0x310 [ 730.942439] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 730.947203] ? do_syscall_64+0x26/0x620 [ 730.951185] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 730.956565] ? do_syscall_64+0x26/0x620 [ 730.960551] __x64_sys_setsockopt+0xbe/0x150 [ 730.965058] do_syscall_64+0xfd/0x620 [ 730.968870] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 730.974153] RIP: 0033:0x4598e9 [ 730.977352] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 730.996256] RSP: 002b:00007f4622919c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 731.003980] RAX: ffffffffffffffda RBX: 00007f4622919c90 RCX: 00000000004598e9 [ 731.011261] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000005 [ 731.018533] RBP: 000000000075bf20 R08: 00000000000002c8 R09: 0000000000000000 [ 731.025806] R10: 0000000020000040 R11: 0000000000000246 R12: 00007f462291a6d4 [ 731.033079] R13: 00000000004c79ee R14: 00000000004dd4d0 R15: 0000000000000006 [ 731.057393] syz-executor.2: vmalloc: allocation failure: 256 bytes, mode:0x7000c0(GFP_KERNEL_ACCOUNT), nodemask=(null) [ 731.107981] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 731.134774] CPU: 0 PID: 19679 Comm: syz-executor.2 Not tainted 4.19.71 #0 [ 731.141750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 731.151104] Call Trace: [ 731.153704] dump_stack+0x172/0x1f0 [ 731.157340] warn_alloc.cold+0x7b/0x173 [ 731.161319] ? zone_watermark_ok_safe+0x260/0x260 [ 731.166169] ? __get_vm_area_node+0x12b/0x3a0 [ 731.170674] ? rcu_read_lock_sched_held+0x110/0x130 [ 731.175710] ? __get_vm_area_node+0x2df/0x3a0 [ 731.180220] __vmalloc_node_range+0x486/0x790 [ 731.184731] __vmalloc+0x44/0x50 [ 731.188107] ? do_replace+0x1d0/0x420 [ 731.191915] do_replace+0x1d0/0x420 [ 731.195550] ? compat_target_to_user+0x340/0x340 [ 731.200332] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 731.205874] ? ns_capable_common+0x141/0x170 [ 731.210305] do_ebt_set_ctl+0xe6/0x110 [ 731.214204] nf_setsockopt+0x77/0xd0 [ 731.217931] ip_setsockopt+0xdf/0x100 [ 731.221740] udp_setsockopt+0x68/0xb0 [ 731.225550] sock_common_setsockopt+0x94/0xd0 [ 731.230059] __sys_setsockopt+0x17a/0x280 [ 731.234216] ? kernel_accept+0x310/0x310 [ 731.238292] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 731.243056] ? do_syscall_64+0x26/0x620 [ 731.247037] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 731.252408] ? do_syscall_64+0x26/0x620 [ 731.256411] __x64_sys_setsockopt+0xbe/0x150 [ 731.260842] do_syscall_64+0xfd/0x620 [ 731.264660] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 731.269862] RIP: 0033:0x4598e9 [ 731.273064] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 731.291971] RSP: 002b:00007f4622919c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 731.299694] RAX: ffffffffffffffda RBX: 00007f4622919c90 RCX: 00000000004598e9 [ 731.306964] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000005 [ 731.314235] RBP: 000000000075bf20 R08: 00000000000002c8 R09: 0000000000000000 [ 731.321508] R10: 0000000020000040 R11: 0000000000000246 R12: 00007f462291a6d4 [ 731.328785] R13: 00000000004c79ee R14: 00000000004dd4d0 R15: 0000000000000006 [ 731.351014] Mem-Info: [ 731.353642] active_anon:187224 inactive_anon:194 isolated_anon:0 [ 731.353642] active_file:8708 inactive_file:43025 isolated_file:0 [ 731.353642] unevictable:0 dirty:104 writeback:0 unstable:0 [ 731.353642] slab_reclaimable:15903 slab_unreclaimable:105398 [ 731.353642] mapped:59053 shmem:244 pagetables:2657 bounce:0 [ 731.353642] free:1096045 free_pcp:554 free_cma:0 [ 731.388767] Node 0 active_anon:748896kB inactive_anon:776kB active_file:34692kB inactive_file:172100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236212kB dirty:412kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 192512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 731.417808] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 731.453315] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 731.487813] lowmem_reserve[]: 0 2555 2557 2557 [ 731.493044] Node 0 DMA32 free:585196kB min:36248kB low:45308kB high:54368kB active_anon:748896kB inactive_anon:776kB active_file:34692kB inactive_file:172100kB unevictable:0kB writepending:412kB present:3129332kB managed:2619972kB mlocked:0kB kernel_stack:9504kB pagetables:10628kB bounce:0kB free_pcp:2208kB local_pcp:1348kB free_cma:0kB [ 731.530657] lowmem_reserve[]: 0 0 2 2 [ 731.534631] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2428kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 731.568414] lowmem_reserve[]: 0 0 0 0 [ 731.572673] Node 1 Normal free:3783064kB min:53608kB low:67008kB high:80408kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 731.607547] lowmem_reserve[]: 0 0 0 0 [ 731.612875] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 731.633813] Node 0 DMA32: 95*4kB (UM) 119*8kB (U) 357*16kB (UME) 154*32kB (UME) 588*64kB (UM) 306*128kB (UM) 173*256kB (UME) 131*512kB (UME) 34*1024kB (UM) 7*2048kB (ME) 82*4096kB (UM) = 585156kB [ 731.658741] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 731.677562] Node 1 Normal: 60*4kB (UE) 251*8kB (UE) 263*16kB (UE) 65*32kB (UME) 15*64kB (UME) 9*128kB (U) 4*256kB (UM) 6*512kB (UME) 2*1024kB (M) 1*2048kB (E) 919*4096kB (M) = 3783064kB [ 731.698878] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 731.707761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 731.716410] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 731.725318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 731.733954] 51978 total pagecache pages [ 731.737941] 0 pages in swap cache [ 731.741477] Swap cache stats: add 0, delete 0, find 0/0 [ 731.746836] Free swap = 0kB [ 731.749905] Total swap = 0kB [ 731.752920] 1965979 pages RAM [ 731.756026] 0 pages HighMem/MovableOnly [ 731.760062] 338856 pages reserved [ 731.763511] 0 pages cma reserved [ 732.719083] Bluetooth: hci0: command 0x1003 tx timeout [ 732.724497] Bluetooth: hci0: sending frame failed (-49) [ 734.718925] net_ratelimit: 17 callbacks suppressed [ 734.718935] protocol 88fb is buggy, dev hsr_slave_0 [ 734.728877] protocol 88fb is buggy, dev hsr_slave_0 [ 734.729000] protocol 88fb is buggy, dev hsr_slave_1 [ 734.733961] protocol 88fb is buggy, dev hsr_slave_1 [ 734.798920] protocol 88fb is buggy, dev hsr_slave_0 [ 734.798939] Bluetooth: hci0: command 0x1001 tx timeout [ 734.804024] protocol 88fb is buggy, dev hsr_slave_1 [ 734.816332] Bluetooth: hci0: sending frame failed (-49) [ 735.279105] protocol 88fb is buggy, dev hsr_slave_0 [ 735.284198] protocol 88fb is buggy, dev hsr_slave_1 [ 735.519076] protocol 88fb is buggy, dev hsr_slave_0 [ 735.524193] protocol 88fb is buggy, dev hsr_slave_1 [ 736.878918] Bluetooth: hci0: command 0x1009 tx timeout [ 740.958886] net_ratelimit: 22 callbacks suppressed [ 740.958895] protocol 88fb is buggy, dev hsr_slave_0 [ 740.958924] protocol 88fb is buggy, dev hsr_slave_1 [ 740.963911] protocol 88fb is buggy, dev hsr_slave_1 12:09:41 executing program 0 (fault-call:2 fault-nth:52): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:09:41 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x602000, 0x0) creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') 12:09:41 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:09:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0xa9aaaa0a00000000) 12:09:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:09:41 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 741.038977] protocol 88fb is buggy, dev hsr_slave_0 [ 741.044112] protocol 88fb is buggy, dev hsr_slave_1 [ 741.108545] rdma_op 00000000aaf16dd3 conn xmit_rdma (null) [ 741.116842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=19744 comm=syz-executor.5 [ 741.149841] FAULT_INJECTION: forcing a failure. [ 741.149841] name failslab, interval 1, probability 0, space 0, times 0 [ 741.170715] xt_cluster: node mask cannot exceed total number of nodes [ 741.177680] CPU: 1 PID: 19747 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 741.184624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 741.193991] Call Trace: [ 741.196600] dump_stack+0x172/0x1f0 [ 741.200249] should_fail.cold+0xa/0x1b [ 741.204153] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 741.209273] ? lock_downgrade+0x810/0x810 [ 741.213453] __should_failslab+0x121/0x190 [ 741.217707] should_failslab+0x9/0x14 [ 741.221519] kmem_cache_alloc+0x2ae/0x700 [ 741.225686] ? lock_downgrade+0x810/0x810 [ 741.229854] __kernfs_new_node+0xef/0x680 [ 741.234020] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 741.238792] ? wait_for_completion+0x440/0x440 [ 741.243591] ? mutex_unlock+0xd/0x10 [ 741.247317] ? kernfs_activate+0x192/0x1f0 [ 741.251569] kernfs_new_node+0x99/0x130 [ 741.255558] __kernfs_create_file+0x51/0x33b [ 741.259979] sysfs_add_file_mode_ns+0x222/0x560 [ 741.264673] internal_create_group+0x383/0xc30 [ 741.269279] ? remove_files.isra.0+0x190/0x190 [ 741.273866] ? kernfs_put+0x3c2/0x5d0 [ 741.277686] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 741.283234] ? kernfs_create_link+0x1d2/0x250 [ 741.287763] sysfs_create_groups+0x9b/0x141 [ 741.292102] device_add+0x87e/0x1760 [ 741.295832] ? get_device_parent.isra.0+0x570/0x570 [ 741.300872] rfkill_register+0x1bf/0xb50 [ 741.304943] hci_register_dev+0x385/0x880 [ 741.309109] hci_uart_tty_ioctl+0x761/0xaf0 [ 741.313440] tty_ioctl+0x8b5/0x1510 [ 741.317077] ? hci_uart_init_work+0x140/0x140 [ 741.321580] ? tty_vhangup+0x30/0x30 [ 741.325298] ? mark_held_locks+0x100/0x100 [ 741.329551] ? __fget+0x340/0x540 [ 741.333018] ? __might_sleep+0x95/0x190 [ 741.337005] ? tty_vhangup+0x30/0x30 [ 741.340732] do_vfs_ioctl+0xd5f/0x1380 [ 741.344626] ? selinux_file_ioctl+0x46f/0x5e0 [ 741.349129] ? selinux_file_ioctl+0x125/0x5e0 [ 741.353656] ? ioctl_preallocate+0x210/0x210 [ 741.358075] ? selinux_file_mprotect+0x620/0x620 [ 741.362854] ? iterate_fd+0x360/0x360 [ 741.366674] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 741.372223] ? fput+0x128/0x1a0 [ 741.375518] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 741.381148] ? security_file_ioctl+0x8d/0xc0 [ 741.385565] ksys_ioctl+0xab/0xd0 [ 741.389030] __x64_sys_ioctl+0x73/0xb0 [ 741.392939] do_syscall_64+0xfd/0x620 [ 741.396753] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 741.401944] RIP: 0033:0x4598e9 [ 741.405159] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 741.424077] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 741.431803] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 741.439082] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 12:09:41 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 741.446365] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 741.453648] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 741.460925] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 741.473291] Bluetooth: hci0: Frame reassembly failed (-84) 12:09:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x2, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 12:09:41 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') socket$bt_bnep(0x1f, 0x3, 0x4) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) 12:09:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x3, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) [ 741.519073] protocol 88fb is buggy, dev hsr_slave_0 [ 741.524213] protocol 88fb is buggy, dev hsr_slave_1 [ 741.546359] rdma_op 00000000f029ba10 conn xmit_rdma (null) 12:09:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x4, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 12:09:41 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 741.759033] protocol 88fb is buggy, dev hsr_slave_0 [ 741.764233] protocol 88fb is buggy, dev hsr_slave_1 [ 741.769402] protocol 88fb is buggy, dev hsr_slave_0 [ 741.778010] rdma_op 00000000e82276f4 conn xmit_rdma (null) [ 743.518953] Bluetooth: hci0: command 0x1003 tx timeout [ 743.524495] Bluetooth: hci0: sending frame failed (-49) [ 745.598948] Bluetooth: hci0: command 0x1001 tx timeout [ 745.604354] Bluetooth: hci0: sending frame failed (-49) [ 747.198897] net_ratelimit: 23 callbacks suppressed [ 747.198906] protocol 88fb is buggy, dev hsr_slave_0 [ 747.198924] protocol 88fb is buggy, dev hsr_slave_1 [ 747.203930] protocol 88fb is buggy, dev hsr_slave_1 [ 747.278935] protocol 88fb is buggy, dev hsr_slave_0 [ 747.284057] protocol 88fb is buggy, dev hsr_slave_1 [ 747.678938] Bluetooth: hci0: command 0x1009 tx timeout [ 747.759075] protocol 88fb is buggy, dev hsr_slave_0 [ 747.764324] protocol 88fb is buggy, dev hsr_slave_1 [ 747.999061] protocol 88fb is buggy, dev hsr_slave_0 [ 748.004155] protocol 88fb is buggy, dev hsr_slave_1 [ 748.009288] protocol 88fb is buggy, dev hsr_slave_0 12:09:51 executing program 0 (fault-call:2 fault-nth:53): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:09:51 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xffb7) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)=0xffb7) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x14e) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x0, {0x3, 0x2, "0616661d8a2e75f5cbdc12deb9ec01854b97ed9fc59a52aeddc666a564d8355810536a5489ad22382c465b235678e8c769b71934236f742537a22a56a401f0fcf8889c0b59e5d9ca9eb8e75e49138bc2390d4ba6395d1c53d8aafa3c0dec92133172d3ff5a858abf8f039383000dc6511409ffcfc383570ecdd65a147e75204ebbc57bf8d17eb4865879e604ce4f8bfb67e1a9c72f290399acce79e359f3d707658e5e234611dabf760270f78e01aed4fa7509a978f4a869fe162fa032c811c693c6da0fa562aeee614a8b9b5cd0efd330b70ab014cb4c1f6b280c21731835600ce34ac45f481d19a867f7297491b42af51ae332f880cec30c1aa867f99ac56e", 0x91, 0x12000000000000, 0xfff, 0x6, 0x0, 0x5, 0xffffffff, 0x1}, r2}}, 0x128) 12:09:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x5, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:09:51 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:09:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000040)={0x5, 0xffffffffffffff5f, 0x9, 0xfff, 0x7ff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r3, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:09:51 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 751.978368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=20080 comm=syz-executor.5 [ 751.999457] QAT: Invalid ioctl [ 752.008592] rdma_op 00000000db5a652c conn xmit_rdma (null) 12:09:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x6, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 752.035906] FAULT_INJECTION: forcing a failure. [ 752.035906] name failslab, interval 1, probability 0, space 0, times 0 [ 752.064063] CPU: 0 PID: 20090 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 752.071057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.080421] Call Trace: [ 752.083031] dump_stack+0x172/0x1f0 [ 752.086678] should_fail.cold+0xa/0x1b [ 752.090673] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 752.095790] ? lock_downgrade+0x810/0x810 [ 752.099961] __should_failslab+0x121/0x190 [ 752.104206] should_failslab+0x9/0x14 [ 752.108011] kmem_cache_alloc+0x2ae/0x700 [ 752.112166] ? lock_downgrade+0x810/0x810 [ 752.116336] __kernfs_new_node+0xef/0x680 [ 752.120505] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 752.125273] ? wait_for_completion+0x440/0x440 [ 752.129872] ? mutex_unlock+0xd/0x10 [ 752.133593] ? kernfs_activate+0x192/0x1f0 [ 752.137842] kernfs_new_node+0x99/0x130 [ 752.141827] __kernfs_create_file+0x51/0x33b [ 752.146247] sysfs_add_file_mode_ns+0x222/0x560 [ 752.150936] internal_create_group+0x383/0xc30 [ 752.155538] ? remove_files.isra.0+0x190/0x190 [ 752.160127] ? kernfs_put+0x3c2/0x5d0 [ 752.163940] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 752.169489] ? kernfs_create_link+0x1d2/0x250 [ 752.174006] sysfs_create_groups+0x9b/0x141 [ 752.178344] device_add+0x87e/0x1760 [ 752.182075] ? get_device_parent.isra.0+0x570/0x570 [ 752.187110] rfkill_register+0x1bf/0xb50 [ 752.191180] hci_register_dev+0x385/0x880 [ 752.195346] hci_uart_tty_ioctl+0x761/0xaf0 [ 752.199679] tty_ioctl+0x8b5/0x1510 [ 752.203317] ? hci_uart_init_work+0x140/0x140 [ 752.207819] ? tty_vhangup+0x30/0x30 [ 752.211537] ? mark_held_locks+0x100/0x100 [ 752.215789] ? __fget+0x340/0x540 [ 752.219258] ? __might_sleep+0x95/0x190 [ 752.223243] ? tty_vhangup+0x30/0x30 [ 752.226971] do_vfs_ioctl+0xd5f/0x1380 [ 752.230869] ? selinux_file_ioctl+0x46f/0x5e0 [ 752.235369] ? selinux_file_ioctl+0x125/0x5e0 [ 752.239875] ? ioctl_preallocate+0x210/0x210 [ 752.244308] ? selinux_file_mprotect+0x620/0x620 [ 752.249080] ? iterate_fd+0x360/0x360 [ 752.252892] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 752.258435] ? fput+0x128/0x1a0 [ 752.261841] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 752.267393] ? security_file_ioctl+0x8d/0xc0 [ 752.271820] ksys_ioctl+0xab/0xd0 [ 752.275292] __x64_sys_ioctl+0x73/0xb0 [ 752.279197] do_syscall_64+0xfd/0x620 [ 752.283017] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 752.288211] RIP: 0033:0x4598e9 [ 752.291411] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 752.310319] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.318037] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 752.325312] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 752.332585] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 752.339859] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 752.347133] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 752.354999] net_ratelimit: 18 callbacks suppressed [ 752.355008] protocol 88fb is buggy, dev hsr_slave_0 [ 752.365063] protocol 88fb is buggy, dev hsr_slave_1 [ 752.370220] protocol 88fb is buggy, dev hsr_slave_0 [ 752.375288] protocol 88fb is buggy, dev hsr_slave_1 [ 752.400755] Bluetooth: hci0: Frame reassembly failed (-84) 12:09:52 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:09:52 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xffb7) r1 = accept4$inet(r0, 0x0, &(0x7f0000000000), 0x800) recvmsg(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000000ac0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/106, 0x6a}], 0x2, &(0x7f0000002c00)=""/182, 0xb6}, 0x2000) sendmmsg$sock(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="35b28d95cde0b30861b0e78c391e55bf5f960196d4957c40e87f09e9a89dac1dc74e0f", 0x23}], 0x1, &(0x7f00000000c0)=[@txtime={{0x18, 0x1, 0x3d, 0x100}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0xeb7c}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xffffffffffffff5c}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000003380)="2ab3165edddc5f00565b11c11a2ff8b16893e71caf9ce048fba7c5690de4de0dc843ea890dfc9ad35709e65dfe612b268426a4fc623a83e344ff70aff8c49a70949ba0a9461b3492673ee489346041205fc75435e56b9fc9c4ba0d438ef64a382b9641870c079e35acb9b8ef66873e94d2d26d9df836241a8acee2c9701974c6ef372ed4979d5b01bd0eae1765fbd0", 0x8f}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000000240)="e8211f7340154279191da168144ad9b3d3e888707ab5f98a507de827dc9a7f1cfa4ce3e767ff08a7f43d8b93a78569abd0ad97038e2296b20804b9ce58335f409c7b475e1fe7cb0efb8305fc91028e331d25184a82f9316ed2f18b8452bba7d2bbb6708e33ede393e600eeb84e7c325b17c6cd4a022eaa41095f20a104894a1355e9484171ef3ca02a635576e8f50b856442b376cf1b00872bf27828530db21dce76a65401fbeebbaeb826e2896f46d1543d2551cc1953b921b1be475319922e6ba0b0865785b09a5277e29eab57a8ca650bee31", 0xd4}], 0x3, &(0x7f0000000380)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffd}}, @timestamping={{0x14, 0x1, 0x25, 0x2188}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x48}}, {{&(0x7f0000000400)=@generic={0x0, "6534f7ee9718b335707c83a18a35f1b0d28702db83623529c6f5f505a1084b6f45f4fb1a9181c35a54c1ca8dc0b964440bae083fa7f5c5e09113e64a006a595a21ba7fe2e6c4f4f8aa58cb8ab4223824cb55b2236e97b7ac2aff041d53904fe4cae60396004bd5f89ea3ac54de656ee0d37ade4922403bb19799d9d03706"}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000480)="c1b398aff7d68948bdf5213f19b5250284315597dd60d2b32131a4cd6a4113ae46ed37805be60a1647f1f31ed2cf61ba25cff10da715afb40087c76e61403bd34533e5f7afd749fdb49477b0e4dc70f3bd3007a1af52298703d4e170daf892dca811da0551ef61fa466e36582c58d9bd6d2cf19c409a4d9552aae9a803cb4c7d59988542e972da32792a55e977e605a4ea9b1c9670bfc1d3c9122c35fdb3945777c1920c", 0xa4}, {&(0x7f0000000540)="6284d3d1ec1cbfc6ba09810549b5240a30a2294d45d0042383462f62d888569ba8ede074d7d6186b79ad08024c868926b4ef86544e77e5c81cf310427fd9cb9d401a5fcca96c8632fb4e70b41ebe800e1d614e69b6ebc8fa5679c93e3b87957f01d9d9defb7677de662a2b5e685c8ed9176b53a72a43d3847d36e372f21325bef19aed409f506f3da5b0d52055a574318d0f7860c5105e54b375cca1acc417a3e2a2e31bad6f4ff88950788efcbe7c214b2b5fd58010057d747d07445c8bf7949a7740750cd4306f7bd1b3973f480565311547f5624aa5802dcb1f", 0xdb}, {&(0x7f0000000640)="e7ef4f914165976129aed5ed9f69da800fc3", 0x12}], 0x3, &(0x7f00000006c0)=[@txtime={{0x18, 0x1, 0x3d, 0x400}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x100000000}}, @timestamping={{0x14, 0x1, 0x25, 0x8eb}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffffffffffb}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x1a}}], 0xd8}}, {{&(0x7f00000007c0)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000880)="46cfc1a3e122aa3bef61824c8ccf340f737f4b9cdd1ab2aec199d03afe6e8e1fcc9a7cc9014432391c31f7c14cef1f5713b55a64cc8d8bccf59986a7ecce9b1e1c132adb442a3c24693673d4a5fcab19f34920856b75e640998a3d9ed5b60752445ef17419a81d06f82df4b9", 0x6c}, {&(0x7f0000000900)="86d247c5de414d9fef35350801a6d39f22bd5dabb5cc1b0de04de7deb5680834f326531bac2208", 0x27}, {&(0x7f0000000940)="ac5fa5fcbc2df1d5c29cefd758afc7d79cfdf409d39718b2c90c783bc37dc9520b2aeb8ac41f79da60a84aed3aea88773fbc", 0x32}], 0x3, &(0x7f0000000a40)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x1f}}, @timestamping={{0x14, 0x1, 0x25, 0x18}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x78}}, {{&(0x7f0000002d00)=@hci={0x1f, r2, 0xe1ca929a0ff1c8a8}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002d80)="fbb51b8cce9119e9347dafedc52b6083b2e51d17696147177668426aaa761c085187aba4ca4e3ca5e0396949eb21dc03b1beb579b82f4e75eaba53453b11d4a9ab9c31c144591b699a016682d3d52bd20994e1b66714f18ee8c35fca4df8a3947ed7931fe49a518415ac5f3032e977e2c2b9b33ee518c5b3477b4f46a30cbb5e508b8c8f8b895eda6757e02b2583ce7626865fd4729d69f20879a53ed3f2061f16d0254d6c97cf5695d31537d711438dced080a8f3ce21aa716efb1f8a6347bfb8e7bb8daee9c9", 0xc7}, {&(0x7f0000002e80)="aa680e9aef23a027dc7c5c77ef8609996d0aee7a7f440bfba85722383d0ddc7fe1dc2253086355e99b6c78c0b4934d3e962f5188e907560bf5047ef02a79093a5787c54501e4bacab55962af", 0x4c}, {&(0x7f0000002f00)="8fe8af28a3ace66edb1bfa624caaa67452ad7e48514b591361e1bb6b8787f9a8ee01a76e6326fe02986255cffe9b9445ab5d3467e64cc30a2de8be9178698ee9e59d449c8683ed6cdacfdf25f634be28648d600e7f31bfc67599df0e04f1643970112cbebeb56d7b48619f0c8137e2c671579471e0312495c35f328b36a2512387dc4ca00cc368016324358b79f0ad50faedbee7f0f9ff4c0b896136931ea29e5bb25685760079c2d6d2267b92f0de071d24c83b974395a6969c2396e2dcefc1fef9cc71746321d0ffcdd8388a", 0xcd}, {&(0x7f0000003000)="a68844639e4157e009efb12ab951efd6e8f71da09f1c5b6f80d4263197398ef4f688846a3c1061471205478da4ce11f25c00fc149e40a7936b07e288d6d14b07463dfd970b85f9b9", 0x48}, {&(0x7f0000003080)="5cef1965e104a71c101171069bc25cd7e8c7b37f777fc5dc11c9d9dfb457f7c78731ae56b677f1d4e777ad477926b9b74faa629d0b99d2626ffd0935d28af138416d0daa276bcf37d72a888347711a642e4baad29da2bafd4d9bc1662c31c219ce5bf7219d19b792a54589ddc1c784a48ca6a03c528a09b021ccdeccfce21a8c497d08d971afc43bb78a8577d6e02a6efc8718344ffd8be440fd59c2327515b83e4145385a5663c7d4f6f59320332628acf4bd4346a1291f4f40eb89a82fd43f76a27c713eede55b3669bd582706575b49fa10e7c3ec20ce2ee32deb2bef28c7f45341abfcef1613e7b1", 0xea}], 0x5}}], 0x5, 0x481) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') 12:09:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x7, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 752.519408] rdma_op 000000003ce8c690 conn xmit_rdma (null) 12:09:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:09:52 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 752.685905] rdma_op 00000000300ea039 conn xmit_rdma (null) [ 752.780157] QAT: Invalid ioctl [ 753.438918] protocol 88fb is buggy, dev hsr_slave_0 [ 753.438934] protocol 88fb is buggy, dev hsr_slave_0 [ 753.444039] protocol 88fb is buggy, dev hsr_slave_1 [ 753.449047] protocol 88fb is buggy, dev hsr_slave_1 [ 753.528945] protocol 88fb is buggy, dev hsr_slave_0 [ 753.534059] protocol 88fb is buggy, dev hsr_slave_1 [ 754.478884] Bluetooth: hci0: command 0x1003 tx timeout [ 754.484294] Bluetooth: hci0: sending frame failed (-49) [ 756.558870] Bluetooth: hci0: command 0x1001 tx timeout [ 756.564285] Bluetooth: hci0: sending frame failed (-49) [ 757.598911] net_ratelimit: 16 callbacks suppressed [ 757.598920] protocol 88fb is buggy, dev hsr_slave_0 [ 757.598957] protocol 88fb is buggy, dev hsr_slave_1 [ 757.603932] protocol 88fb is buggy, dev hsr_slave_1 [ 757.679008] protocol 88fb is buggy, dev hsr_slave_0 [ 757.684134] protocol 88fb is buggy, dev hsr_slave_1 [ 758.159061] protocol 88fb is buggy, dev hsr_slave_0 [ 758.164174] protocol 88fb is buggy, dev hsr_slave_1 [ 758.559050] protocol 88fb is buggy, dev hsr_slave_0 [ 758.564167] protocol 88fb is buggy, dev hsr_slave_1 [ 758.569469] protocol 88fb is buggy, dev hsr_slave_0 [ 758.638879] Bluetooth: hci0: command 0x1009 tx timeout [ 762.719149] net_ratelimit: 20 callbacks suppressed [ 762.719160] protocol 88fb is buggy, dev hsr_slave_0 [ 762.729243] protocol 88fb is buggy, dev hsr_slave_1 [ 762.734365] protocol 88fb is buggy, dev hsr_slave_0 [ 762.739454] protocol 88fb is buggy, dev hsr_slave_1 12:10:02 executing program 0 (fault-call:2 fault-nth:54): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:10:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x11, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:10:02 executing program 3: r0 = creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') ioctl$TCGETX(r0, 0x5432, &(0x7f0000000000)) 12:10:02 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:10:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4) r2 = epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") r4 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpid() r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x4030582a, &(0x7f0000000000)=0xffb7) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x4030582a, &(0x7f0000000000)=0xffb7) ioctl$EVIOCSABS0(r10, 0x401845c0, &(0x7f00000001c0)={0x443, 0x1, 0x5, 0x0, 0xfffffffffffffff8, 0xffffffffffffff90}) r11 = dup2(0xffffffffffffffff, r9) sendmsg$nl_netfilter(r11, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x11020000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x9, 0x2, 0x403, 0x70bd29, 0x25dfdbfd, {0x2, 0x0, 0xa}, [@typed={0x8, 0x1e, @u32=0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$unix(r5, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8}}}], 0x40}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x49249249249262e, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:10:02 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 762.850632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=20426 comm=syz-executor.5 [ 762.863474] rdma_op 00000000ea2f38c4 conn xmit_rdma (null) [ 762.892009] FAULT_INJECTION: forcing a failure. [ 762.892009] name failslab, interval 1, probability 0, space 0, times 0 [ 762.904959] CPU: 0 PID: 20434 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 762.911922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 762.911928] Call Trace: [ 762.911953] dump_stack+0x172/0x1f0 [ 762.911974] should_fail.cold+0xa/0x1b [ 762.931441] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 762.936561] ? lock_downgrade+0x810/0x810 [ 762.940734] __should_failslab+0x121/0x190 [ 762.944985] should_failslab+0x9/0x14 [ 762.945005] kmem_cache_alloc+0x2ae/0x700 [ 762.952946] ? lock_downgrade+0x810/0x810 [ 762.957112] __kernfs_new_node+0xef/0x680 [ 762.957134] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 762.957154] ? wait_for_completion+0x440/0x440 [ 762.970623] ? mutex_unlock+0xd/0x10 [ 762.970643] ? kernfs_activate+0x192/0x1f0 [ 762.978575] kernfs_new_node+0x99/0x130 [ 762.978595] __kernfs_create_file+0x51/0x33b [ 762.987000] sysfs_add_file_mode_ns+0x222/0x560 [ 762.991710] internal_create_group+0x383/0xc30 [ 762.996324] ? remove_files.isra.0+0x190/0x190 [ 763.000924] ? kernfs_put+0x3c2/0x5d0 [ 763.004747] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 763.010296] ? kernfs_create_link+0x1d2/0x250 [ 763.014815] sysfs_create_groups+0x9b/0x141 [ 763.019154] device_add+0x87e/0x1760 [ 763.022905] ? get_device_parent.isra.0+0x570/0x570 [ 763.027956] rfkill_register+0x1bf/0xb50 [ 763.032029] hci_register_dev+0x385/0x880 [ 763.036206] hci_uart_tty_ioctl+0x761/0xaf0 12:10:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x60, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:10:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x88, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 763.040542] tty_ioctl+0x8b5/0x1510 [ 763.044176] ? hci_uart_init_work+0x140/0x140 [ 763.048675] ? tty_vhangup+0x30/0x30 [ 763.052394] ? mark_held_locks+0x100/0x100 [ 763.056650] ? __fget+0x340/0x540 [ 763.060126] ? __might_sleep+0x95/0x190 [ 763.064137] ? tty_vhangup+0x30/0x30 [ 763.067954] do_vfs_ioctl+0xd5f/0x1380 [ 763.071851] ? selinux_file_ioctl+0x46f/0x5e0 [ 763.076349] ? selinux_file_ioctl+0x125/0x5e0 [ 763.080855] ? ioctl_preallocate+0x210/0x210 [ 763.085273] ? selinux_file_mprotect+0x620/0x620 [ 763.090044] ? iterate_fd+0x360/0x360 [ 763.093882] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 763.099435] ? fput+0x128/0x1a0 [ 763.102731] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 763.108275] ? security_file_ioctl+0x8d/0xc0 [ 763.112697] ksys_ioctl+0xab/0xd0 [ 763.116170] __x64_sys_ioctl+0x73/0xb0 [ 763.120066] do_syscall_64+0xfd/0x620 [ 763.123877] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 763.129074] RIP: 0033:0x4598e9 [ 763.132281] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 763.151188] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 763.158924] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 763.166198] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 763.173472] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 763.180749] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 12:10:03 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x50) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='\x00') [ 763.188022] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 763.206194] Bluetooth: hci0: Frame reassembly failed (-84) 12:10:03 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:10:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x300, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 763.381817] rdma_op 00000000c9016896 conn xmit_rdma (null) 12:10:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x500, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 763.838915] protocol 88fb is buggy, dev hsr_slave_0 [ 763.844081] protocol 88fb is buggy, dev hsr_slave_1 [ 763.848897] protocol 88fb is buggy, dev hsr_slave_0 [ 763.854174] protocol 88fb is buggy, dev hsr_slave_1 [ 763.918959] protocol 88fb is buggy, dev hsr_slave_0 [ 763.924083] protocol 88fb is buggy, dev hsr_slave_1 [ 765.278905] Bluetooth: hci0: command 0x1003 tx timeout [ 765.284396] Bluetooth: hci0: sending frame failed (-49) [ 767.358932] Bluetooth: hci0: command 0x1001 tx timeout [ 767.364340] Bluetooth: hci0: sending frame failed (-49) [ 767.998906] net_ratelimit: 18 callbacks suppressed [ 767.998914] protocol 88fb is buggy, dev hsr_slave_0 [ 767.998947] protocol 88fb is buggy, dev hsr_slave_1 [ 768.003932] protocol 88fb is buggy, dev hsr_slave_1 [ 768.078970] protocol 88fb is buggy, dev hsr_slave_0 [ 768.084109] protocol 88fb is buggy, dev hsr_slave_1 [ 768.559055] protocol 88fb is buggy, dev hsr_slave_0 [ 768.564171] protocol 88fb is buggy, dev hsr_slave_1 [ 768.958984] protocol 88fb is buggy, dev hsr_slave_0 [ 768.964274] protocol 88fb is buggy, dev hsr_slave_1 [ 768.969397] protocol 88fb is buggy, dev hsr_slave_0 [ 769.438985] Bluetooth: hci0: command 0x1009 tx timeout [ 773.119058] net_ratelimit: 21 callbacks suppressed [ 773.119067] protocol 88fb is buggy, dev hsr_slave_0 [ 773.129179] protocol 88fb is buggy, dev hsr_slave_1 [ 773.134363] protocol 88fb is buggy, dev hsr_slave_0 [ 773.139477] protocol 88fb is buggy, dev hsr_slave_1 12:10:13 executing program 0 (fault-call:2 fault-nth:55): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:10:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x600, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 12:10:13 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:10:13 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') r0 = socket$inet(0x2b, 0x4, 0x0) r1 = accept4$inet(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)=0xffb7) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x7f, 0x80) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000001c0)=0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e23, @multicast2}, {0x6, @link_local}, 0x6, {0x2, 0x4e21, @rand_addr=0xad8}, 'bcsh0\x00'}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000000)={r6, 0xee, "5792132546d574fc36dbf1e4d0e30e84b8216e95c4b59095bd648c2f2402110fec9a2bddf22ca0e39a26dcb6b55dc40ec747e4451f50d541dfc95fe4a491a593861d670f44aca8484f123aad1a0245ba9918558b5ef732490a68872b7d322c3df8f5d178d2699e0e33040fb7e38785cdafe3e156b8f687a427ed1c81a0ec2f55bfbc5a3f096bbdedd2ab0bfdc0a4592414e452377af9575eaf9b955ed528ffefd0810ced772ba3f1d673bb438a2ee4cef0dc6ccda583cc7f303591cdd60675a88be1b2f5ceff678623129a680f95254f8414ecaec85f15c8f39d5006852acc38d18ac799ee25a797c45497111a73"}, &(0x7f0000000100)=0xf6) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r7, 0x7}, 0x8) 12:10:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x420000, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:10:13 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 773.739246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=20663 comm=syz-executor.5 [ 773.751384] rdma_op 000000001fe42b3b conn xmit_rdma (null) 12:10:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x700, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 773.788382] FAULT_INJECTION: forcing a failure. [ 773.788382] name failslab, interval 1, probability 0, space 0, times 0 [ 773.807767] CPU: 0 PID: 20676 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 773.814763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.824231] Call Trace: [ 773.826854] dump_stack+0x172/0x1f0 [ 773.830522] should_fail.cold+0xa/0x1b [ 773.834443] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 773.839580] ? lock_downgrade+0x810/0x810 [ 773.843756] __should_failslab+0x121/0x190 [ 773.848017] should_failslab+0x9/0x14 [ 773.852759] kmem_cache_alloc+0x2ae/0x700 [ 773.856923] ? lock_downgrade+0x810/0x810 [ 773.861091] __kernfs_new_node+0xef/0x680 [ 773.865262] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 773.870188] ? wait_for_completion+0x440/0x440 [ 773.874795] ? mutex_unlock+0xd/0x10 [ 773.878524] ? kernfs_activate+0x192/0x1f0 [ 773.882776] kernfs_new_node+0x99/0x130 [ 773.886770] __kernfs_create_file+0x51/0x33b [ 773.891206] sysfs_add_file_mode_ns+0x222/0x560 [ 773.895910] internal_create_group+0x383/0xc30 [ 773.900524] ? remove_files.isra.0+0x190/0x190 [ 773.905123] ? kernfs_put+0x3c2/0x5d0 [ 773.908951] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 773.914506] ? kernfs_create_link+0x1d2/0x250 [ 773.919025] sysfs_create_groups+0x9b/0x141 [ 773.923366] device_add+0x87e/0x1760 [ 773.927192] ? get_device_parent.isra.0+0x570/0x570 [ 773.932240] rfkill_register+0x1bf/0xb50 [ 773.936326] hci_register_dev+0x385/0x880 [ 773.940499] hci_uart_tty_ioctl+0x761/0xaf0 [ 773.944928] tty_ioctl+0x8b5/0x1510 [ 773.948701] ? hci_uart_init_work+0x140/0x140 [ 773.953218] ? tty_vhangup+0x30/0x30 [ 773.956945] ? mark_held_locks+0x100/0x100 [ 773.961208] ? __fget+0x340/0x540 [ 773.964691] ? __might_sleep+0x95/0x190 [ 773.968688] ? tty_vhangup+0x30/0x30 [ 773.972423] do_vfs_ioctl+0xd5f/0x1380 [ 773.976445] ? selinux_file_ioctl+0x46f/0x5e0 [ 773.980955] ? selinux_file_ioctl+0x125/0x5e0 [ 773.985550] ? ioctl_preallocate+0x210/0x210 [ 773.989981] ? selinux_file_mprotect+0x620/0x620 [ 773.994766] ? iterate_fd+0x360/0x360 [ 773.998590] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 774.004144] ? fput+0x128/0x1a0 [ 774.007450] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 774.013002] ? security_file_ioctl+0x8d/0xc0 [ 774.017430] ksys_ioctl+0xab/0xd0 [ 774.020991] __x64_sys_ioctl+0x73/0xb0 [ 774.024899] do_syscall_64+0xfd/0x620 [ 774.028724] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 774.033931] RIP: 0033:0x4598e9 [ 774.037142] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 774.056148] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 774.063883] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 774.071168] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 774.078620] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 12:10:14 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 774.085914] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 774.093212] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 774.113229] Bluetooth: hci0: Frame reassembly failed (-84) 12:10:14 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') 12:10:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) [ 774.160544] rdma_op 000000007930550e conn xmit_rdma (null) 12:10:14 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:10:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x1100, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) [ 774.238908] protocol 88fb is buggy, dev hsr_slave_0 [ 774.238960] protocol 88fb is buggy, dev hsr_slave_1 [ 774.244109] protocol 88fb is buggy, dev hsr_slave_1 [ 774.318949] protocol 88fb is buggy, dev hsr_slave_0 [ 774.324331] protocol 88fb is buggy, dev hsr_slave_1 [ 774.334524] rdma_op 000000002315c263 conn xmit_rdma (null) [ 774.799056] protocol 88fb is buggy, dev hsr_slave_0 [ 776.158944] Bluetooth: hci0: command 0x1003 tx timeout [ 776.164635] Bluetooth: hci0: sending frame failed (-49) [ 778.238941] Bluetooth: hci0: command 0x1001 tx timeout [ 778.244375] Bluetooth: hci0: sending frame failed (-49) [ 778.398922] net_ratelimit: 17 callbacks suppressed [ 778.398931] protocol 88fb is buggy, dev hsr_slave_0 [ 778.398964] protocol 88fb is buggy, dev hsr_slave_0 [ 778.404151] protocol 88fb is buggy, dev hsr_slave_1 [ 778.409211] protocol 88fb is buggy, dev hsr_slave_1 [ 778.479068] protocol 88fb is buggy, dev hsr_slave_0 [ 778.484209] protocol 88fb is buggy, dev hsr_slave_1 [ 778.959084] protocol 88fb is buggy, dev hsr_slave_0 [ 778.964439] protocol 88fb is buggy, dev hsr_slave_1 [ 779.359228] protocol 88fb is buggy, dev hsr_slave_0 [ 779.364399] protocol 88fb is buggy, dev hsr_slave_1 [ 780.328866] Bluetooth: hci0: command 0x1009 tx timeout [ 783.519149] net_ratelimit: 22 callbacks suppressed [ 783.519160] protocol 88fb is buggy, dev hsr_slave_0 [ 783.529249] protocol 88fb is buggy, dev hsr_slave_1 [ 783.534372] protocol 88fb is buggy, dev hsr_slave_0 [ 783.539458] protocol 88fb is buggy, dev hsr_slave_1 12:10:24 executing program 0 (fault-call:2 fault-nth:56): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:10:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x2000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 12:10:24 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:10:24 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000000)) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x263, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') 12:10:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) readahead(0xffffffffffffffff, 0x3, 0x3) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:10:24 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:10:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x3f00, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:10:24 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x4, 0xe8, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000000)='./file0\x00') [ 784.621755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=21011 comm=syz-executor.5 [ 784.636811] rdma_op 00000000151d716f conn xmit_rdma (null) [ 784.643493] protocol 88fb is buggy, dev hsr_slave_0 [ 784.643551] protocol 88fb is buggy, dev hsr_slave_1 [ 784.648906] protocol 88fb is buggy, dev hsr_slave_0 [ 784.658845] protocol 88fb is buggy, dev hsr_slave_1 [ 784.702696] FAULT_INJECTION: forcing a failure. [ 784.702696] name failslab, interval 1, probability 0, space 0, times 0 [ 784.718932] protocol 88fb is buggy, dev hsr_slave_0 [ 784.724100] protocol 88fb is buggy, dev hsr_slave_1 [ 784.740228] CPU: 0 PID: 21021 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 784.747291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 784.756663] Call Trace: [ 784.759275] dump_stack+0x172/0x1f0 [ 784.762925] should_fail.cold+0xa/0x1b [ 784.766838] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 784.771977] ? lock_downgrade+0x810/0x810 [ 784.776153] __should_failslab+0x121/0x190 [ 784.780407] should_failslab+0x9/0x14 [ 784.784217] kmem_cache_alloc+0x2ae/0x700 [ 784.788373] ? lock_downgrade+0x810/0x810 [ 784.792547] __kernfs_new_node+0xef/0x680 [ 784.796714] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 784.801486] ? wait_for_completion+0x440/0x440 [ 784.806092] ? mutex_unlock+0xd/0x10 [ 784.809814] ? kernfs_activate+0x192/0x1f0 [ 784.814063] kernfs_new_node+0x99/0x130 [ 784.818052] __kernfs_create_file+0x51/0x33b [ 784.822476] sysfs_add_file_mode_ns+0x222/0x560 [ 784.827167] internal_create_group+0x383/0xc30 [ 784.831772] ? remove_files.isra.0+0x190/0x190 [ 784.836358] ? kernfs_put+0x3c2/0x5d0 [ 784.840174] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 784.845722] ? kernfs_create_link+0x1d2/0x250 [ 784.850235] sysfs_create_groups+0x9b/0x141 [ 784.854571] device_add+0x87e/0x1760 [ 784.858300] ? get_device_parent.isra.0+0x570/0x570 [ 784.863340] rfkill_register+0x1bf/0xb50 [ 784.867416] hci_register_dev+0x385/0x880 [ 784.871581] hci_uart_tty_ioctl+0x761/0xaf0 [ 784.875914] tty_ioctl+0x8b5/0x1510 [ 784.879550] ? hci_uart_init_work+0x140/0x140 [ 784.884057] ? tty_vhangup+0x30/0x30 [ 784.887780] ? mark_held_locks+0x100/0x100 [ 784.892040] ? __fget+0x340/0x540 [ 784.895518] ? __might_sleep+0x95/0x190 [ 784.899504] ? tty_vhangup+0x30/0x30 [ 784.903228] do_vfs_ioctl+0xd5f/0x1380 [ 784.907125] ? selinux_file_ioctl+0x46f/0x5e0 [ 784.911626] ? selinux_file_ioctl+0x125/0x5e0 [ 784.916131] ? ioctl_preallocate+0x210/0x210 [ 784.920547] ? selinux_file_mprotect+0x620/0x620 [ 784.925318] ? iterate_fd+0x360/0x360 [ 784.929126] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 784.934668] ? fput+0x128/0x1a0 [ 784.937969] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 784.943613] ? security_file_ioctl+0x8d/0xc0 [ 784.948039] ksys_ioctl+0xab/0xd0 [ 784.951505] __x64_sys_ioctl+0x73/0xb0 [ 784.955406] do_syscall_64+0xfd/0x620 [ 784.959227] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 784.964418] RIP: 0033:0x4598e9 [ 784.967615] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 784.989993] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:10:25 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:10:25 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') [ 784.997717] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 785.005102] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 785.012378] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 785.019647] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 785.026924] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 12:10:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x4000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 785.076626] rdma_op 000000001129f0f2 conn xmit_rdma (null) 12:10:25 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 785.230081] Bluetooth: hci0: Frame reassembly failed (-84) [ 785.281473] rdma_op 0000000078d76714 conn xmit_rdma (null) [ 787.288962] Bluetooth: hci0: command 0x1003 tx timeout [ 787.294417] Bluetooth: hci0: sending frame failed (-49) [ 788.798900] net_ratelimit: 16 callbacks suppressed [ 788.798909] protocol 88fb is buggy, dev hsr_slave_0 [ 788.798931] protocol 88fb is buggy, dev hsr_slave_1 [ 788.803926] protocol 88fb is buggy, dev hsr_slave_1 [ 788.878919] protocol 88fb is buggy, dev hsr_slave_0 [ 788.884042] protocol 88fb is buggy, dev hsr_slave_1 [ 789.358989] Bluetooth: hci0: command 0x1001 tx timeout [ 789.359047] protocol 88fb is buggy, dev hsr_slave_0 [ 789.364383] Bluetooth: hci0: sending frame failed (-49) [ 789.369431] protocol 88fb is buggy, dev hsr_slave_1 [ 789.759071] protocol 88fb is buggy, dev hsr_slave_0 [ 789.764217] protocol 88fb is buggy, dev hsr_slave_1 [ 789.769363] protocol 88fb is buggy, dev hsr_slave_0 [ 791.439038] Bluetooth: hci0: command 0x1009 tx timeout [ 793.919150] net_ratelimit: 19 callbacks suppressed [ 793.919160] protocol 88fb is buggy, dev hsr_slave_0 [ 793.929238] protocol 88fb is buggy, dev hsr_slave_1 [ 793.934352] protocol 88fb is buggy, dev hsr_slave_0 [ 793.939440] protocol 88fb is buggy, dev hsr_slave_1 [ 795.038894] protocol 88fb is buggy, dev hsr_slave_0 [ 795.038899] protocol 88fb is buggy, dev hsr_slave_0 [ 795.038950] protocol 88fb is buggy, dev hsr_slave_1 [ 795.043994] protocol 88fb is buggy, dev hsr_slave_1 [ 795.118985] protocol 88fb is buggy, dev hsr_slave_0 [ 795.124113] protocol 88fb is buggy, dev hsr_slave_1 12:10:35 executing program 0 (fault-call:2 fault-nth:57): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:10:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x6000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:10:35 executing program 3: r0 = creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x33d2, 0xa43, 0x1, 0x1ff}, 0x10) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3f) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) kcmp(r1, r2, 0x4, 0xffffffffffffffff, r0) r3 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r3, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000040)={r6, 0xffffffffe62baf44}, 0x8) 12:10:35 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:10:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)=0xffb7) ioctl$CAPI_CLR_FLAGS(r3, 0x80044325, &(0x7f0000000000)=0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:10:35 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 795.492945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=21355 comm=syz-executor.5 [ 795.495935] rdma_op 00000000a10669e8 conn xmit_rdma (null) [ 795.538633] FAULT_INJECTION: forcing a failure. [ 795.538633] name failslab, interval 1, probability 0, space 0, times 0 [ 795.550859] CPU: 1 PID: 21362 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 795.557835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.567188] Call Trace: [ 795.569787] dump_stack+0x172/0x1f0 [ 795.569808] should_fail.cold+0xa/0x1b [ 795.569827] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 795.582428] ? lock_downgrade+0x810/0x810 [ 795.586609] __should_failslab+0x121/0x190 [ 795.590863] should_failslab+0x9/0x14 [ 795.594677] kmem_cache_alloc+0x2ae/0x700 [ 795.598841] ? perf_trace_lock+0xeb/0x510 [ 795.603008] __kernfs_new_node+0xef/0x680 [ 795.607168] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 795.611956] ? lock_downgrade+0x810/0x810 [ 795.616122] ? mutex_trylock+0x1e0/0x1e0 [ 795.620194] kernfs_new_node+0x99/0x130 [ 795.624181] __kernfs_create_file+0x51/0x33b [ 795.628600] sysfs_add_file_mode_ns+0x222/0x560 [ 795.633290] sysfs_merge_group+0x1a0/0x340 [ 795.637531] ? sysfs_mount+0x1e0/0x1e0 [ 795.641424] ? kernfs_put+0x3c2/0x5d0 [ 795.645257] dpm_sysfs_add+0x164/0x210 [ 795.649160] device_add+0xa47/0x1760 [ 795.652896] ? get_device_parent.isra.0+0x570/0x570 [ 795.657928] rfkill_register+0x1bf/0xb50 [ 795.661998] hci_register_dev+0x385/0x880 [ 795.666163] hci_uart_tty_ioctl+0x761/0xaf0 [ 795.670496] tty_ioctl+0x8b5/0x1510 [ 795.674128] ? hci_uart_init_work+0x140/0x140 [ 795.679409] ? tty_vhangup+0x30/0x30 [ 795.683131] ? mark_held_locks+0x100/0x100 [ 795.687388] ? __fget+0x340/0x540 [ 795.690856] ? __might_sleep+0x95/0x190 [ 795.694837] ? tty_vhangup+0x30/0x30 [ 795.698557] do_vfs_ioctl+0xd5f/0x1380 [ 795.702461] ? selinux_file_ioctl+0x46f/0x5e0 [ 795.706958] ? selinux_file_ioctl+0x125/0x5e0 [ 795.711465] ? ioctl_preallocate+0x210/0x210 [ 795.715878] ? selinux_file_mprotect+0x620/0x620 [ 795.720649] ? iterate_fd+0x360/0x360 [ 795.724462] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 795.730016] ? fput+0x128/0x1a0 [ 795.733310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 795.738850] ? security_file_ioctl+0x8d/0xc0 [ 795.743267] ksys_ioctl+0xab/0xd0 [ 795.746735] __x64_sys_ioctl+0x73/0xb0 [ 795.750634] do_syscall_64+0xfd/0x620 [ 795.754464] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 795.759656] RIP: 0033:0x4598e9 [ 795.762857] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 795.781759] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:10:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x8800, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:10:35 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 795.789473] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 795.796743] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 795.804017] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 795.811292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 795.818564] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 12:10:35 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000040)='./file0\x00') [ 795.845214] Bluetooth: hci0: Frame reassembly failed (-84) [ 795.881810] rdma_op 00000000d1ca16de conn xmit_rdma (null) 12:10:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x20000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 12:10:35 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:10:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x28f5c, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 796.059244] rdma_op 000000004598bc2d conn xmit_rdma (null) [ 797.918933] Bluetooth: hci0: command 0x1003 tx timeout [ 797.924354] Bluetooth: hci0: sending frame failed (-49) [ 799.198895] net_ratelimit: 18 callbacks suppressed [ 799.198903] protocol 88fb is buggy, dev hsr_slave_0 [ 799.198932] protocol 88fb is buggy, dev hsr_slave_1 [ 799.204004] protocol 88fb is buggy, dev hsr_slave_1 [ 799.278990] protocol 88fb is buggy, dev hsr_slave_0 [ 799.284139] protocol 88fb is buggy, dev hsr_slave_1 [ 799.918901] protocol 88fb is buggy, dev hsr_slave_0 [ 799.924026] protocol 88fb is buggy, dev hsr_slave_1 [ 799.998957] Bluetooth: hci0: command 0x1001 tx timeout [ 800.004442] Bluetooth: hci0: sending frame failed (-49) [ 800.159154] protocol 88fb is buggy, dev hsr_slave_0 [ 800.164293] protocol 88fb is buggy, dev hsr_slave_1 [ 800.169414] protocol 88fb is buggy, dev hsr_slave_0 [ 802.078975] Bluetooth: hci0: command 0x1009 tx timeout [ 804.319087] net_ratelimit: 20 callbacks suppressed [ 804.319097] protocol 88fb is buggy, dev hsr_slave_0 [ 804.329165] protocol 88fb is buggy, dev hsr_slave_1 [ 804.334240] protocol 88fb is buggy, dev hsr_slave_0 [ 804.339350] protocol 88fb is buggy, dev hsr_slave_1 [ 805.438923] protocol 88fb is buggy, dev hsr_slave_0 [ 805.438928] protocol 88fb is buggy, dev hsr_slave_0 [ 805.438989] protocol 88fb is buggy, dev hsr_slave_1 [ 805.444025] protocol 88fb is buggy, dev hsr_slave_1 [ 805.518989] protocol 88fb is buggy, dev hsr_slave_0 [ 805.524132] protocol 88fb is buggy, dev hsr_slave_1 12:10:46 executing program 0 (fault-call:2 fault-nth:58): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:10:46 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x1000) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)=0xffb7) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) name_to_handle_at(r2, &(0x7f00002e4000)='./file\xff\xff', &(0x7f0000000080)=ANY=[], 0x0, 0x1400) r3 = syz_genetlink_get_family_id$team(0x0) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14, 0x800) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x80) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x80) connect(r8, &(0x7f0000000040)=@xdp={0x2c, 0x6, r9, 0x38}, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000380)=""/15, 0xf}], 0x2, &(0x7f0000000400)=""/47, 0x2f}, 0x3}, {{&(0x7f0000000440)=@xdp, 0x80, &(0x7f0000000e80)=[{&(0x7f00000004c0)=""/233, 0xe9}, {&(0x7f0000000b00)=""/138, 0x8a}, {&(0x7f00000005c0)=""/1, 0x1}, {&(0x7f0000000bc0)=""/233, 0xe9}, {&(0x7f0000000600)=""/53, 0x35}, {&(0x7f0000000cc0)=""/60, 0x3c}, {&(0x7f0000000d40)=""/166, 0xa6}, {&(0x7f0000000e00)=""/24, 0x18}, {&(0x7f0000000e40)=""/2, 0x2}], 0x9, &(0x7f0000000f40)=""/83, 0x53}, 0x2}, {{&(0x7f00000013c0), 0x80, &(0x7f00000028c0)=[{&(0x7f0000001440)=""/68, 0x44}, {&(0x7f00000014c0)=""/47, 0x2f}, {&(0x7f0000001500)=""/39, 0x27}, {&(0x7f0000001540)=""/202, 0xca}, {&(0x7f0000001640)=""/87, 0x57}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/217, 0xd9}, {&(0x7f00000027c0)=""/37, 0x25}, {&(0x7f0000002800)=""/153, 0x99}], 0x9}, 0x9}, {{&(0x7f0000002980)=@ll={0x11, 0x0, 0x0}, 0x80, 0x0, 0x0, &(0x7f0000002a80)=""/4096, 0x1000}, 0xff}, {{&(0x7f0000003a80)=@rc, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/29, 0x1d}, 0x4}], 0x5, 0x40000000, &(0x7f0000003fc0)={0x77359400}) accept4$packet(0xffffffffffffffff, &(0x7f00000041c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004200)=0x14, 0x80c00) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000004880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004840)={&(0x7f00000048c0)=ANY=[@ANYBLOB="c4050000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="b80002004000018e194cd9058c765bd733411ddbedb100240001006c625f707b3b9f72745f737461747300000000000000000000080003000b0000000600000000000000", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400230000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="a40102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000600000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040005000000080007000000000040000100240001006c625f706f72745f737461747300"/158, @ANYRES32, @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000400000008000100", @ANYRES32=r7, @ANYBLOB="a0010200400001002400010071756575655f69640000000000000000", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e7400000000", @ANYRES32, @ANYBLOB="9473745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400040000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c00040000007400810000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600"/174, @ANYRES32=r11, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000100000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000010000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000700000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000008000300030000000800040001000000"], 0x1e}, 0x1, 0x0, 0x0, 0x40881}, 0x24000000) sendmmsg$sock(r1, &(0x7f0000004980)=[{{&(0x7f0000000040)=@caif, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)="372b394aab69e665019460f186785da207324d0d259786d905bb9ddca41b04d37950e30f82d71cccbfd6e9b2ea82b30b6bd84cd50ee6ef3d2ad9e0c8ec4337ce5a7d6686dd285b6265d55f14752b72d8ed09a20fc16a19bc39b773310577f6094bc8c59ba3bc9a7daceaae73e78a020a", 0x70}, {&(0x7f0000000140)="2c1ebc3367a3f4b058f244e1af40c2ee87bacfd0c19292a2ca84bc2224cf091005987af46c65179366a2c76f15e55f42f76c2c6bf45f8d52617d1333869abbf6474dd5cde759bea3559646fa8513115ceff4f051a6622cf0292a99f2a00e", 0x5e}, {&(0x7f00000001c0)="e5437cbd49697241779ef5bd0806cfa64629dcf16039e442ea4e18775f9a467d98be60630a1105a48d16d5cd02799997696b2c1f3087b44ac915bfd1eadeae4dabf6092f53686156a1ebeab6c6ea775d", 0x50}, {&(0x7f0000000240)="b7ccf73cd9789ca6a3db259251111a7c694dd6187a3e6e5f95fb7e6bb8bb913faa26242165432e85040e312e52b4b031b0d55ce805", 0x35}, {&(0x7f0000000280)="345a071a00460680541d7a98", 0xc}, {&(0x7f0000000c00)="236a3c757b66f171d5916044efc1c0baaaa6d3b5f3977842778008e21af4e16d9a145d9afb9ae6cc17d35386d696578c67055f1a8c73c7c6b16fdba4a58d742015151fe5bf1cf8920ebfe9aa9f216eb0f772be9a2cb4ebacb7a6c7cde0460179f58293e04adade9dff95f84bc5c47f2019a672fac19fb2260d0e62fc5c1d07df92d9a3e4dfa76100490e501f2c587e3ea1d8d2017744210797f6e6bae6a8ec6c370bc2d97dc71ca6e63ec858fa41acc7edc0e6d68a45ea395a7ff9721ed44e6c8c1a5607ceca93138cc896d59be7de06c03bd287d0032d727036c4fef5e4e1e5385c6447d9086766731773cdb5d999ff9fbc30477cdabb9a153344354e6f7e91701366a8154098cde0850fbb563dc826639dba2085fd3d0e3e94684af7d94473c6157e208a017d6780a259e9ab0637193cf491c321d8c2422f7ca9b39a4cc2c964550f02294edde083ea264fd6aa046a2960dee58063d8920fbaaa981e87ab71bbb7431cc74b711f145a9a7725d28be3293644826704aaae5e92289b164a81a244e9af83ff591aa6927226f663fee477f47738e5db4cd3cdf4a89ba281a96cb2c53c93c949c51aefeef1b58a107deee6f14b1c1fc872b86d4c486ab88124db9e67fc1aea27708966f7a4e86cb39672432a952126ae15f36f05ed017b188635f67d1fd6190468c18dd67b48c9a382fbb7b23bd6fede42739385a39e28187eef58d1899bde9527d0c4ca699ba58cf05b684837fedd05510fcd84ac7c4c95ced96fca3fc24d719718b9778b6b80c53547a309c194ead94693bd11a6c67b4eef34bc1d4a25c016d588f4f205d892b8ce1acefdbe5d290270555d34a164bffcf83a28d466d6594b72d5ad2370ff9a5ade4255178e6c37b43f8de89f1c3db56b073f25f786d13f1d4ed1c182b219ff326dd6e9a7a3043cf6c720cb156e17cc83d71ff98c145df801d4dee28dde533bc3f05a632483d7c07d3571d195b6be95d111f6e468852b66faa710b7034594307d0144f444d9f6dc8ad99696755aa14589ba75041dcd7900cd0f163c7d550d2ed396c5d7ce4f214d5e266f5984bc352e718fef33c2751454c6fae959d14efb9869c445dc19b76026247f612a44c3dbba79da5ce8839f3ecda898659c951a82183373d59aaa9dc692509f0989f03b8a6064a61a80ff6d096df240ad06d585737c54e8eed3794d91a29ad16f9e27373a260137608be2646672699a3d35e3445cbbfcc41f9dc58f865c57898013428bbaf6739e52086b96aff73832a70d8af805e8bba3207c19884af218df90013d2c66b44cf4363b3fb6a52e8bd4a7a3b63cbded778841485a6afadd5cda66ed9c387671c26f61151a68a09f0bee54852c2f2de4675cf51f1bad07936aa4566f4a2be0aa7bffa389def45df635a48029099c5004446e316a7c55b3554da1dc0be519f78ed73f498a1462196b1278155e4a394645ab6076e07ede94ddc77e6835a23c077dbd4463add934a28896ade659cf2c2f8e50ec1e867da4c5ede29c086a8997959a9e696a52b980b7cbfa122ddf0438042de35f5dcdbbd66be7b065d333aa73ad8cfb4440c05d152c27c96a963907c3dcc7165d9fa9c2e0426cc37968c1e26090f18ad634eadd87dcf8f36f43f79fae0c7f2bbb425bcaff80883eccf0b9b4507354d7f0603dc63f4861c7a1d4830616be1e8266c234fa9ce0a89ee032dc441afcbae6b1b016af31c3465031888a5e9cd2d05005c579a4879f55df99d6f3a169e499eba782eca6eced24e13c66d822632b121852e94a2de23153bd557096972068d4db6368be7fda4eb5292b8369e93954bb7e32a36d0eec2296a08449aa1409ce1757a244df66a9448f84d7356c7a376d847e0239a887cf102c612d445cb37071b949c6f13b54f7a593fcf9d885bf96c56931634138a2dbce16f16a6bb19c3a6776bdd2921f42cf2a31e299bfa581a60c175141215a77be3b50a62b95dafde27d56a17345234801aeeb042815fddc6479c4655f70de87a31a2d97fdf93433290e7026463b42c8d36d72c8ebd3c53e28cdc83cc6c3d98b58e2e333373ffcba413cc056e3f2a499610e4943dc161521a0d6f97f054f76a5358d1bcfd044ca161992456fa20d300f537fd88786a761eca752a03c0b239c75f1de0604723da404881877074f8d2801d311bc2865f926d2550edf5c1dacc32879b8aa8f901920a160aa172ae048bdd5ae8b2e85f50976da41ee35744cc25f8c6d3daf34da4780985be1e984218b189ce4c545d0e2564df80475b6277b306e91074df234d904be9fb6259da87aee559bbb46e18e06c8b6eae37f12d633b311fed7adf1af4bcf62e28823c95cb4eefa8e1946d1fe8d8464072d70ce43bff9c3c80eee90870c939f9471ff172dcfb22a5f3f6f1540c4dcfd6c3757f2d08413f71834ba1ed89c1e7d39ecb4c80d7d8621eeb77fab4dc97146bf9708531df68cb485dccdd2c2ab9ef876b19260cfb3f02cfe822e818a13c8e3792299be01b1fdd73090dcbda4773f5bb160fb2a909c49eadcbe52a6a7d8f643bac3a79addc98488c4e17caf9d5b423d41cf0ff5910d335bf4ecbf08db181a77bc7331fb1cef59ec4574046bc75ce8abe0bfdbdaddf739684b7a921feb9ab36ae4c36efa3b6e6cb9fbce38839b4078ed6e60d850198f39af48dfbc761eb842eef7f471a3cf4be8fc42be52e765d8b1ddc0b8fbd7b51a1219ba426631c9e5b74a994f0da1cb955c75c99f46a8ff42e937d579e6ba9434fb4dbb6da1eb8a609252365ada307b6f0854052e55607fac767838d4ae15c463a455c642669db79841a024450305092ed7fedf2a0826d6e2a46e283cedaac66319d4b633c7d2fbd8a97b5cef76f7c0409277d018b0c67e8447fb0d8792bf043df3c6aa9e03a5a8783d7e837f2938f15476d442bea185dde6d4b184f783fd7ed06e1de9d32bbf8cb37163de17c88efbe083d99182078fd820e230904eb9a09e2a206940c44c8bf16ebdd553326018e50193af5a2a809691283fb7f2fc3a7549c9976e8c0c8a60e894674b427d3f346dc5536129008a4c0637d8e44ea20b9c841709bdabceecd7dc6f4f8b1faeee6f24777a9f87f7f19b0c10664fa57a3892c357aef95a8fe5168a5590e13c4a2f0e35c4a28c550860d6c48e1e32095bf783ab6ac5a3104c10e4664862605bb8e784487874a22d743316e887fa2428470e5fb9f729661826fb06b35b47ac9c990a3069c027e1e2a4c44ede8e773eec5b07a4c6726af2b73f2df08b5b82b433657a634417340bfb65bcdc41c7f6766a374736b57875658cc269ee4f4e2d94488d4ba1f40a84f4f9b6a5ee6b2babe71570789742eb0d815bbf0492a3a0045b52290cbb529b0151fa1d81f10331c96f364e5df0b42feb6f6dadd0276f886cfa7b9a97183fcd515b4f09bc27bb2bd2a81a5272d042a020474ee808666421af94587f9d288cdd044f32af39b333c51b2f4bfa88cb665ee0c6191916dd35bf7a4a12147574002f11a9c7921280570242fe41149a489e6e74eb6c117f7e8e077d15267bffc6cf93660761623375bd18252318568f9c9f5b912ee593a5fcfc9fd1937336e9daf5166df2055ecefa499d921c2583539f65650ee24f848f4eae71e1ad98c78c8313cec76f200ca0ad9c01d4ba88e17a3ec6e86cfb4e6102747483671abb6d3d50658d76558f94e940d1f4bd55d1363712050dde3a28c088a0c614a607d78b6838d7d462de9a0c858216ea9b11e3e5e911f84662aceffec22a6940af4dee5f874f442b042e2d0e32ad0e4439f1f1fe9815e8aeeb3a2e7bc848da2c8eb0bfe2e16db1c579b1ca5678e186475140e312203b52ad4744137f3b2a22f09a6e62ab126eccfa0d3af099afa80675776d474d89be3d979d9eb552f3fb15be4e857c8149080df1d09decf75e85b567ebcbb8311883ded95111d54e3910e50ca344d106c6b41319fa1826d72eb10d62ee770eacc8ac31a30fc882ea755850d97ece665491886408f263ebaf5a53ddcca3ea088f4b38edd872d7bc30f007f5ff6130727066c3b73a8b9a6f8177eafb6ea79061c9cdf7488ef48f7b8b9a9d9c18a059eedc66a1d22defc1dfec0f672e3e529363de2f2fab42c6191ec7fc11dd989fcf765d482e282c515d11acda03f25fb6198535963cc7ba9090f197fd82fc3bd8827e3d9f8c1f6da2e4f1d46934738614a421387a2358bf47d570cee91b828ba3a46af0cd72d754fe426195703e5bec5fd0bcc09bc79db86a7ae7c0c01f31726ff208df65c98b8ef3eda7717aaf26e76768d7ee528ba92e391f86f45dc3a765fc444b565aa461e22883c10e026dd5003bef3f5ad22d12f4e014313db4647188ad018b8320c9dc434dd75b946bcd5b92d8c0e3019d30f7d8f35f756a2de95b5ae2c96608551bcc53dfd439efa6ad1f1b227a87010c051f4869702e157e738acd011bc64ba3c20db681f9ee4986e43a2e34c5dd427bcc06e0103f466f3bbdd90febea5bf06242fe72b1e726be749912b25228b0f19c0f1695279fbe13204e875a7a7187c286fbca3e0f2024dad8ce76b990a9b8b54fa59afea7cba5797430481a8eeb2f897051f7bb9de1e1f650ff061d9c878a5401c6b83900ee4024c0da7e0b394e30440fe0f2a1e797881a6dce636a6361f0a1f44e7876c9226870ba55dcb598274ab85c035123df0375fed6e40bf9a5df576b92ac51a8273c03fc39245d706e9d9a51c99f281f2ed0ade1e6bad9e8f6f44e15415e6079e1022a4e90818ca91854422d09ab21c875df56d4f0e35046269bfb7e8b33f41d65b52272ff8bbac360f4814db5201f196090475dc68bd578440fc88ef7d5661d7e03e463a2d6bdb9fd9b196ecbdfd4f844fbeea0c3198a7cfaf479a6284f1b70496d1817c56a9974e2c59816b45349a22f962136fe1cbc2eeadb3b54b9ce8abece8aabbf7774e616137f851f5722d28ac087b7b4e1a36e9badf1ca5fb81b93bed5bba9de072e98a6ed13e5d3822af20a97119a1a27b23a3525be83c680d79b8332d82f859c6a0a3cede29e902d14bb1b5bbaf6d2a42edbf159b95fc4dbb5c298f850d15e1a586fae9d10d024dd69014feb89d2733a9510bd412b5d36196758929916906e00172c49dafed4b4decded54678874a4feb668f312ef4395b8b2d95be7fcd4b49797484c8b71f15522ec161da126c325e0d58bf5b29f4f537bc814ff2e92cefcc13813837acf93e857d319b3f4d9985030fe69957ae19db79fc2b7c757b9651c8a1e746d4660fccfc1f5a3fb45825dbec5e585bbee69c6a51cd39cb2125dab9fa988e9be4ab126df16c7850bb8bcd431a3b1a31bdbf0c101eb5d03e2c906f6f372bab2598508e22ca2b68d45a5fb7a1e771ae0ebce9d0582e299bf1aaa5525bb68ae0db4a6ac8109c24b15aaa356b2075412239ae6a598ee36c81363e601346b02ec4869dc8842d016d370607ada47225e21760c362864d1eb95a3013e2bad924eb9a0490b716f6d170b093f292231fe3d648290aacb9fc8025744b676cff82ff9db6b001a5ca79f980ad5b95e5dfbaa98a290ee2ce2dc830274953d59a422fd493d45fa934df118f3a3e743d0db74b4b69b200978c9e5d547b84dfab61e2828d1bca781eabc0ea662c18a2da7ae8d55ffdb659a0841de8703b61208b068f55d4a7fa8e5b06fb67cc53bedfd435aba722b7f012ece12401eb57ce4030e9d1f7608616aa1b7f55f8de0bf5647ddb7a7b90dfc36ad4effae0b7cbd27d6b3bd124088108ec3b067b4b9d62b3befb0cb8b24d825ddf890e2013ad84c0ae4354e", 0x1000}, {&(0x7f00000002c0)="3b28371a6bc4ef100852d3ea9eb6150e7087f55ba7e8fbebaa91461c24b84f51f7c763201bfbe6fcdda03b12d945d54588eec6088f37f044b28f3b1759a8cd6947a16f72485ccdddbd72a0706da19c5ed5ccc4b97a2183545ba2ce0a30bb150208512efffc07baed03c380c72b185d925afb8625f1830a7f4b35805a", 0x7c}], 0x7, &(0x7f00000003c0)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x30}}, {{&(0x7f0000000400)=@l2={0x1f, 0x200, {0x1f, 0x200, 0xc403, 0x3, 0x4, 0x2}, 0x1, 0xffff}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000480)="027bfd61fa98f2ce30d9dda6ee507471f6e48254acfe4f9887ae0143d432d781697d0d4bce70001fb86d59117cd7260ecc7c2c770cd08d72de4e4d5c6b35", 0x3e}, {&(0x7f00000004c0)="27a9b7c118015e57c2a00980b9db20570427dc6daf4d13ea1cdae09128cfc1ca0dfe3dd38ab279f036429742306932e29600259ede80bbf74a913894ae83523d95738999f93b5a5d3291ca61fce08ce187140a379295f02158a1a5d9a389a63fa94dfc4a3756c5bc1da951531a377814875763cef24f910502ab74be671733a406f8945e9a16888a5fa38b5f87d94e748fc6a7157f1be7ea84837b5abd024a3bcb1618ccead12ff57bcf2526fbc77e3754d3e97d9a7509572d595270d71378d008a77618b6d52b1e0bf704c50d18cb487b45e23642513fc8e6f706cfbf0d1cf2e0a191", 0xe3}, {&(0x7f0000001c00)="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", 0x1000}, {&(0x7f0000002c00)="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", 0x1000}, {&(0x7f00000005c0)="5c57f211d74e1d69994e010f458044e7ee6be41e55108cc4cf2e0d8caa1c3132a7c5c82a8787fc0bbd953f2d52ba163c9340bd77665324636b5679765bf7580120c4880a328b79316e15f0210d6f0c5bca5bb5bd4bea11fb5ca9db7e58a90aed8edab1a40e824be6221567f76c6d36556e1a5af7cdff4fea63a5e0152d9ceda8ce0d6e30f824cc9d16c1562defe1f1cf66f51961d20115d3778e8f9eebe4ea82528a3581194f8eef", 0xa8}], 0x5, &(0x7f0000000700)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xffffffff00000001}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="00becabf8fdfa5a84acec7776247613e39302919d889c3075ee02b266d1d2765e39cb82945255cd6dc38d03d9e155441f1f4dad8baeaeb47a26ca7527adace8bf2912bd641c73cb733a8547d63a53ec12fdd3a2a323eb79ef1e03aabc2ad0463343765a284fe3798ba49d09b360a0e15a2149e2c0b74a535e297a8a0182d5fd80098d332a38a6d72b0272611b12be0cb6a47c30f3b3cd7b3d76aca0193f6178a78d466bbbe8cc60b135ab97f21", 0xad}, {&(0x7f0000000880)="fe81c45f61851c2a878e2f6cead33b670341d760e04251d0e9b858c14fc474ab839a2f165e483001cf5a76b372cbaede93e10c70414c40882bd5513f839ad9c393f37e90b6cc5e9e8ebbfb231e9ab39d063db9140b57249325741db29985edf2526eb54c0a8af7b1a074eceef5967d66e9883bda88f7736702e0e4386eac517eb3570c288fd61cd71a0b4efc5e9ea25a4ca0c0034621fd477888029ba76b901030a7521484d11b22d650797f6764bd9319d03642ddf086a3540fc13507effec3e60beb3c2accb266fb43a7d4b92e6ac9d69c77e180c38b814213c97f6274a0", 0xdf}, {&(0x7f0000000800)="141b8caf4636b43503990b41993973c69eb621128af51d70b8cb10d9765b7266404ad9139c52d0e389c70bcbbe", 0x2d}, {&(0x7f0000000a40)="468d8ae90d183644246e9a3c8e52a4978195d747967633550ed238aabbccada35eb72090d4a9333e7067d47f3aba395e3cc22d8d365284887e2dbddc43e3b022ce2f34c54faa85b1d0631a8b07eaf27458140cd856737d891afdc7c721da9b217c237d03afc34fb735421ce4786e364f7d553b5bf8883b7a6f73d75a913c0005e141a9a826aac75379d5154a0316ecc90ae4aaf8a1e11b9aeb88718a1991cffa67e2f3297965", 0xa6}], 0x4}}, {{&(0x7f0000000b00)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @remote}, 0x4, 0x1, 0x1, 0x3}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000003c00)="445a30ff921d130456e2c8667adf08b3673f4902c917aef1d0f5d8b07bd5581c7b79153dab93d709c54910ab569ba17ec0d119e16099b1d25201301eefafdfe53c9bfa158eea77ca242045b9469d5a67c0fe1976261370b39af3f844ab13fd3f045dec0ab38f", 0x66}], 0x1}}, {{&(0x7f0000003c80)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast6-avx\x00'}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000003d00)="10bc4165758130b450f0d638b41eba3756f20b2bcad438565ea8402cd64a69c23b73a575ca38da6cad057e1dc56aa80ecbc30b5042bfbfa17be4245d8db9f20db01d24307e95980e0847b565c376976fc8e70a54a5de153bce8bc656384d840d5f7c6cff8446716ceadb19d9dd8cbc72442f8b80ff1c71063f09fac568b8a5dba5ad07396cc7c3087d5ebc9aeec8dfe48d68bdfc7eb4bb53c9b383b6f0840db0ea41303a70278827fdeb3cca59881acbfddd1c994df0cec17b7b058b978d246a77d923b77e133491fb77a79a437638", 0xcf}, {&(0x7f0000003e00)="b7fd109352158db16103795f47b13c86fdbcfe9356d3667c6d7ba0f472029852e9edb226d4ac7eee611bccc950ddd4487c19cfebf30eeb466a2c3605136c8d96cee8ac020c19c169261b5c22b8f7c6a896a3ac60ac80ecd4dc953ba883147d082049d382596b405638bc8d2d3f274985fd6a8d05ed4dd7cd68addcba76ce5194ce47feadca5d5db2cc663526902277b2d97eacb9eaee9242094f7036154c2e3a178e7ba8c4751bae2ad10f20a8a1eab365dbfe5457cdffc8447434db90006ce1ae0d1bae716c2e28260f13c3dd29e7a4548706625fb3f4abce1ea178f697ca7c112aa2", 0xe3}], 0x2, &(0x7f0000003f00)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff00000000}}], 0x30}}, {{&(0x7f0000003f40)=@rc={0x1f, {0x3, 0x3f, 0x100, 0x2, 0x4, 0x2}, 0x6f}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003fc0)="78b0cfa310c055761f3ae15b762f0734bc04616998df831bad5df9c4b9384743661a7fdb5423943403ba42e10babf6d62d4ded2f80baff043c38b119060099beb20c55920e6dd180f239337136fcfba79d8aa41c90fc6e7652afeb6a36fc918b2b31fd159d848854e1e6217aa6b57d89878a93fa43c82e621b4e34eb8084f05ee61583dda353e5104896d26edf9adaf851bfd4afe2c65614717a99cbf03bb72f7465f604a89bbdf6d3b12426d22e27e9401e91122ca3b3bc79b4", 0xba}, {&(0x7f0000004080)}, {&(0x7f00000040c0)="a610f2f8fa651c9e2d3fbb01076b26865614367b957114be058cba3cba674ea89512f975a07bf462fc79b326673e67a28600c6", 0x33}, {&(0x7f0000004100)="afb8f31aef25053cfa6deeae1d941f1c2e962971a47190cf776ea5bae10a1338487c730b76abb4ff49d3319921fab788ad44972963845b475cb2ba3f3e365a685725307a61dc2482e3e5131005ea40130c1591ed99b49265484afb390a1191a2c4a5e76ea6af122b6ffd3ff07491cfb7d11af440100736004c6f5f73ae16e48977964027504db1abc8ea", 0x8a}], 0x4}}, {{&(0x7f0000004200)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x80, &(0x7f0000004380)=[{&(0x7f0000004280)}, {&(0x7f00000042c0)="030065fd1c7368a9881eef7659df1d83641fc155c7b356591d7adf79f9626191ae880acda119d1038ca4f53ad5ecd810da6d111a2c804ac31016ceab59ea71a5b44f0a3070480b723d8172b5902cc4f73e3689dab3b78b4cdb10f0934978d473f4d3c162c4be285a43ce680f68aed4ae55fb1ce71b40ff39c81923559302a49b817be18bd440c21309c5", 0x8a}], 0x2}}, {{&(0x7f00000043c0)=@rc={0x1f, {0x8, 0x3, 0xfff, 0x3, 0xffff, 0x80}, 0x7fffffff}, 0x80, &(0x7f0000004540)=[{&(0x7f0000004440)="f7aee32945abb26d5d8273ca354c8de31f501fc0fbcadc1ad2e618e4dfc8c91cde1a5f2b02a0590c7052d37f78ed04ca3f7e43b28adf4f023a78bd7a5182095cf8a782f638044dda35a54b1080d69d7b4fe162f0f47a22bb955b84f29e318eaa65a52fbb791a76701af1da71714132ea52eba8a611760effe5190269f0ee1cc08680152c80cdcf30a13f3d89604e1701ceb46efde32e378ec48ac498a103df27a54c35d23289400e8a4e53a704747fa7c7040a8455894d216f31eba77286eb9056812c0f86a17adb77621275d0caa92985e4fbc034", 0xd5}], 0x1, &(0x7f0000004580)=[@mark={{0x14, 0x1, 0x24, 0x100000001}}, @mark={{0x14, 0x1, 0x24, 0x2a}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}], 0xc0}}, {{&(0x7f0000004640)=@ll={0x11, 0xf7, r7, 0x1, 0x10000, 0x6, @remote}, 0x80, &(0x7f0000004880)=[{&(0x7f00000046c0)="7f3f255b5e831a6786ae8764116e6fb14b2a64baffbf67380313d0525ca242ec662b4e58338f18d5b63f3bc2b068affe2bd4dc035e88a411e142dc026c1799058ae642b3ad747eb0808889a1bf83c3b183106085e044fec7a8c01871784851d6ed1ebf0894829c7755973f35547dc3fefe7f829ee5c41f03e209afd0f0d3d1edd60fdbf4bec346d9b973688c128cd5c5c1df50840b684dccfa8bbd15bb7c28dd0675a39ef86716dc7ff61e7ed637c2853dc5ed00540217aa512006011c18dbed37146430c4abf7e4b65e2d304c8926d4f4795b2f2683309b5bd67f31c1c6e6c25446", 0xe2}, {&(0x7f00000047c0)="bcdbc6d5a251690d9f63ebdac81c0f3419e98ec182157319d0bbc97bdbc7f9c185047a6f2eca47c2279e39e70a3c8abba55044a8bd8d67c056a88544bf8b9f457dc4c7eebc7c523779339e43fbff4b8e8632", 0x52}, {&(0x7f0000004840)="fcc6c35f78836f53a3ae015637924b74ac0938c7f4154305520899ca8276fd322b4e8846cb276a48ddecd817241e03d87ed14ff89b9cb516b53f5437f1", 0x3d}], 0x3, &(0x7f00000048c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffffffffffa}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x90}}], 0x9, 0x40000) creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') 12:10:46 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:10:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x1000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:10:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x155556c4, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) 12:10:46 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 806.381659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=21696 comm=syz-executor.5 [ 806.402878] rdma_op 000000000cceecb1 conn xmit_rdma (null) 12:10:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x2000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 806.432512] FAULT_INJECTION: forcing a failure. [ 806.432512] name failslab, interval 1, probability 0, space 0, times 0 [ 806.460626] CPU: 1 PID: 21703 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 806.467610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 806.476981] Call Trace: 12:10:46 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 806.479603] dump_stack+0x172/0x1f0 [ 806.483260] should_fail.cold+0xa/0x1b [ 806.487172] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 806.492291] ? lock_downgrade+0x810/0x810 [ 806.496472] __should_failslab+0x121/0x190 [ 806.500716] should_failslab+0x9/0x14 [ 806.504523] kmem_cache_alloc+0x2ae/0x700 [ 806.508685] ? lock_downgrade+0x810/0x810 [ 806.512857] __kernfs_new_node+0xef/0x680 [ 806.517010] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 806.521765] ? wait_for_completion+0x440/0x440 [ 806.526341] ? mutex_unlock+0xd/0x10 [ 806.530046] ? kernfs_activate+0x192/0x1f0 [ 806.534267] kernfs_new_node+0x99/0x130 [ 806.538282] __kernfs_create_file+0x51/0x33b [ 806.542680] sysfs_add_file_mode_ns+0x222/0x560 [ 806.547342] internal_create_group+0x383/0xc30 [ 806.551918] ? remove_files.isra.0+0x190/0x190 [ 806.556534] ? kernfs_put+0x3c2/0x5d0 [ 806.560359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 806.565918] ? kernfs_create_link+0x1d2/0x250 [ 806.570406] sysfs_create_groups+0x9b/0x141 [ 806.574751] device_add+0x87e/0x1760 [ 806.578469] ? get_device_parent.isra.0+0x570/0x570 [ 806.583489] rfkill_register+0x1bf/0xb50 [ 806.587553] hci_register_dev+0x385/0x880 [ 806.591698] hci_uart_tty_ioctl+0x761/0xaf0 [ 806.596014] tty_ioctl+0x8b5/0x1510 [ 806.599631] ? hci_uart_init_work+0x140/0x140 [ 806.604116] ? tty_vhangup+0x30/0x30 [ 806.607817] ? mark_held_locks+0x100/0x100 [ 806.612069] ? __fget+0x340/0x540 [ 806.615533] ? __might_sleep+0x95/0x190 [ 806.619498] ? tty_vhangup+0x30/0x30 [ 806.623201] do_vfs_ioctl+0xd5f/0x1380 [ 806.627078] ? selinux_file_ioctl+0x46f/0x5e0 [ 806.631560] ? selinux_file_ioctl+0x125/0x5e0 [ 806.636043] ? ioctl_preallocate+0x210/0x210 [ 806.640435] ? selinux_file_mprotect+0x620/0x620 [ 806.645180] ? iterate_fd+0x360/0x360 [ 806.649037] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 806.654585] ? fput+0x128/0x1a0 [ 806.657857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 806.663436] ? security_file_ioctl+0x8d/0xc0 [ 806.667832] ksys_ioctl+0xab/0xd0 [ 806.671275] __x64_sys_ioctl+0x73/0xb0 [ 806.675155] do_syscall_64+0xfd/0x620 [ 806.678948] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 806.684124] RIP: 0033:0x4598e9 [ 806.687304] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 806.706195] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 806.713903] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 806.721162] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 806.728417] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 806.735671] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 806.742926] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 806.756754] Bluetooth: hci0: Frame reassembly failed (-84) [ 806.762719] Bluetooth: hci0: Frame reassembly failed (-84) [ 806.830232] rdma_op 00000000ea87a133 conn xmit_rdma (null) 12:10:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x3000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 12:10:46 executing program 3: r0 = creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) name_to_handle_at(r1, &(0x7f00002e4000)='./file\xff\xff', &(0x7f0000000080)=ANY=[], 0x0, 0x1400) r2 = syz_genetlink_get_family_id$team(0x0) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14, 0x800) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@ll, &(0x7f00000001c0)=0x80) socket$inet_sctp(0x2, 0x5, 0x84) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@ll, &(0x7f00000001c0)=0x80) r6 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @remote, 0xe3}}, 0xfffffffffffffe01, 0x2}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000640)={r7, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xfffffffffffffffa, 0x4}, 0x90) recvmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000380)=""/15, 0xf}], 0x2, &(0x7f0000000400)=""/47, 0x2f}, 0x3}, {{&(0x7f0000000440)=@xdp, 0x80, &(0x7f0000000080)=[{&(0x7f0000000740)=""/104, 0x68}], 0x1, &(0x7f0000000f40)=""/83, 0x53}, 0x3}, {{&(0x7f00000013c0), 0x80, &(0x7f00000028c0)=[{&(0x7f0000001440)=""/68, 0x44}, {&(0x7f00000014c0)=""/47, 0x2f}, {&(0x7f0000001500)=""/39, 0x27}, {&(0x7f0000001540)=""/202, 0xca}, {&(0x7f0000001640)=""/87, 0x57}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/217, 0xd9}, {&(0x7f00000027c0)=""/37, 0x25}, {&(0x7f0000002800)=""/153, 0x99}], 0x9}, 0x9}, {{&(0x7f0000002980)=@ll={0x11, 0x0, 0x0}, 0x80, 0x0, 0x0, &(0x7f0000002a80)=""/4096, 0x1000}, 0xff}, {{&(0x7f0000003a80)=@rc, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/29, 0x1d}, 0x4}], 0x5, 0x40000000, &(0x7f0000003fc0)={0x77359400}) accept4$packet(0xffffffffffffffff, &(0x7f00000041c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004200)=0x14, 0x80c00) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x4030582a, &(0x7f00000008c0)=0xffb7) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x4030582a, &(0x7f0000000000)=0xffb7) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0x4030582a, &(0x7f0000000000)=0xffb7) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0x4030582a, &(0x7f0000000000)=0xffb7) r14 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r14, 0x0, 0x0, 0x0) r15 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r15, 0x4030582a, &(0x7f0000000000)=0xffb7) r16 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r16, 0x0, 0x0, 0x0) r17 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r17, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000004880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004840)={&(0x7f0000004dc0)=ANY=[@ANYBLOB="c4050000", @ANYRES16=r2, @ANYBLOB="560000007000fcdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="b80002004000018e194cd9058c765bd733411ddbedb100240001006c625f707b3b9f72745f737461747300000000000000000000080003000b0000000600000000000000", @ANYRES32=r10, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000500000000000000010024000100757365725f6c696e6b75705f656e610000080003000600000004000400080006002016ab72da54ad00"/119, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="a40102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000600000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040005000000080007000000000040000100240001006c625f706f72745f737461747300"/158, @ANYPTR64=&(0x7f0000001100)=ANY=[@ANYRES64=r11, @ANYBLOB="a88168cdcba7e2f220b4cb61c59bbc7894698f3b25d5e29d28a7bda27c25fd3fbd82c07f48a79d2c9eb7867465238aa72b925fe5c9c7e73774e9b790dcaf268bb930bf2f59830c63754f6e3c21f35d26a1d4e8f02b85e3fe18e87242bc4d4593d01d5f52ded9463a4304f576c9110d22845f269be115af2a65da3ce2684e59bed4bbe08d32424c5d13faedae31e97889b3d5d6d8483a4545c7", @ANYRESOCT=r15, @ANYBLOB="8cf75026d7a2b175ef09b9102a464edba62487516559620c1d274f1003", @ANYRESHEX=r12, @ANYPTR=&(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32=r16], @ANYRES32=r13, @ANYRESOCT=r14], @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000400000008000100", @ANYRESOCT=r17, @ANYBLOB="a0010200400001002400010071756575655f69640000000000000000", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYRESOCT], @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e7400000000", @ANYRES32, @ANYBLOB="9473745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400040000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c00040000007400810000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600"/174, @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000100000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000010000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000700000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000008000300030000000800040001000000"], 0x1e}, 0x1, 0x0, 0x0, 0x40881}, 0x24000000) sendto$packet(r0, &(0x7f0000000000), 0xffffffffffffff40, 0x4090, &(0x7f0000000040)={0x11, 0x131, r4, 0x1, 0x919a, 0x6, @local}, 0x14) 12:10:46 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:10:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x4000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 807.070741] rdma_op 000000001a64d067 conn xmit_rdma (null) [ 808.798993] Bluetooth: hci0: command 0x1003 tx timeout [ 808.804552] Bluetooth: hci0: sending frame failed (-49) [ 809.598906] net_ratelimit: 17 callbacks suppressed [ 809.598914] protocol 88fb is buggy, dev hsr_slave_0 [ 809.598948] protocol 88fb is buggy, dev hsr_slave_1 [ 809.604011] protocol 88fb is buggy, dev hsr_slave_1 [ 809.678930] protocol 88fb is buggy, dev hsr_slave_0 [ 809.684153] protocol 88fb is buggy, dev hsr_slave_1 [ 810.318910] protocol 88fb is buggy, dev hsr_slave_0 [ 810.324035] protocol 88fb is buggy, dev hsr_slave_1 [ 810.558996] protocol 88fb is buggy, dev hsr_slave_0 [ 810.564070] protocol 88fb is buggy, dev hsr_slave_1 [ 810.569196] protocol 88fb is buggy, dev hsr_slave_0 [ 810.878936] Bluetooth: hci0: command 0x1001 tx timeout [ 810.884341] Bluetooth: hci0: sending frame failed (-49) [ 812.958933] Bluetooth: hci0: command 0x1009 tx timeout [ 814.718998] net_ratelimit: 19 callbacks suppressed [ 814.719004] protocol 88fb is buggy, dev hsr_slave_0 [ 814.729198] protocol 88fb is buggy, dev hsr_slave_1 [ 814.734390] protocol 88fb is buggy, dev hsr_slave_0 [ 814.739506] protocol 88fb is buggy, dev hsr_slave_1 [ 815.838897] protocol 88fb is buggy, dev hsr_slave_0 [ 815.838902] protocol 88fb is buggy, dev hsr_slave_0 [ 815.838955] protocol 88fb is buggy, dev hsr_slave_1 [ 815.843994] protocol 88fb is buggy, dev hsr_slave_1 [ 815.918894] protocol 88fb is buggy, dev hsr_slave_0 [ 815.923978] protocol 88fb is buggy, dev hsr_slave_1 12:10:57 executing program 0 (fault-call:2 fault-nth:59): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:10:57 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xd00, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000040)=""/76, &(0x7f00000000c0)=0x4c) unlink(&(0x7f0000000bc0)='./file0\x00') 12:10:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x5000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:10:57 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:10:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000005c0)=[{}], 0x1, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3f) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) ptrace$setregset(0x4205, r2, 0x4bba90e6f9d515ef, &(0x7f00000000c0)={&(0x7f0000000000)="8cf08213984c7702cbf49d265825975ab37a2b69406140a2f06192b401bef50255af9c86bb69ce62c29eef999030f74c279416a736334a00861c63416642b0fa72184e87a3b1f4faee3cc71e0c07c70fc70d5c719c4691f4a86aad09f5c780886ccd928ece98a96483804aa281d375b5f1fe35ee2c18f9515f13f9b59eb4bb5df129d028751678", 0x87}) 12:10:57 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 817.250307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=22045 comm=syz-executor.5 [ 817.261345] rdma_op 00000000959feaeb conn xmit_rdma (null) 12:10:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x6000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:10:57 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x287095, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xffb7) ioctl$KVM_NMI(r0, 0xae9a) unlink(&(0x7f0000000bc0)='./file0\x00') r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400000, 0x0) r2 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000002c0)={{0x2, 0x1, 0xed52, 0x0, '\x00', 0x5}, 0x1, 0x20000000, 0x8, r2, 0x5, 0xfffffffffffffffd, 'syz0\x00', &(0x7f0000000080)=['eth1\xe8\x00', '/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', '/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 'vboxnet0+\x00', '\x00'], 0x123, [], [0xffff, 0x8, 0x6, 0x6]}) 12:10:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x60a6abdd143969c3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000)=0xffb7) r5 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r5, 0x0, 0x0, 0x0) setsockopt$inet_buf(r5, 0x0, 0x28, &(0x7f0000000080)="f817b43ca43a7090f81d6d170f0fac59fa99f16020cbd771e933aa9abb08a3f372ba566cc4dae689d9c120992e72e4859dfda9d21fe17c2b4cf06f345c79c415657dda3ac36044770cd5b5639da800218fda0aa7cad6f04197e4c1754cb0ca905f51ecbad0f97698893838bfb37f2c9100048afbcc97ca8918e52802a7589b6c152d17970e4bfe", 0xffffffffffffff57) sendmmsg$unix(r2, &(0x7f00000002c0)=[{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000280)=[@rights={{0xfffffefa, 0x1, 0x1, [r3, 0xffffffffffffffff, r4]}}], 0x20, 0x40000}], 0x1, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) [ 817.348638] FAULT_INJECTION: forcing a failure. [ 817.348638] name failslab, interval 1, probability 0, space 0, times 0 12:10:57 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 817.430418] CPU: 0 PID: 22091 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 817.437413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.446782] Call Trace: [ 817.449398] dump_stack+0x172/0x1f0 [ 817.453041] should_fail.cold+0xa/0x1b [ 817.456941] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 817.462055] ? lock_downgrade+0x810/0x810 [ 817.466223] __should_failslab+0x121/0x190 [ 817.470464] should_failslab+0x9/0x14 [ 817.474268] kmem_cache_alloc+0x2ae/0x700 [ 817.478429] ? lock_downgrade+0x810/0x810 [ 817.482580] ? kasan_check_read+0x11/0x20 [ 817.486741] __kernfs_new_node+0xef/0x680 [ 817.490905] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 817.495675] ? wait_for_completion+0x440/0x440 [ 817.500274] ? mutex_unlock+0xd/0x10 [ 817.503993] ? kernfs_activate+0x192/0x1f0 [ 817.508241] kernfs_new_node+0x99/0x130 [ 817.512226] __kernfs_create_file+0x51/0x33b [ 817.516644] sysfs_add_file_mode_ns+0x222/0x560 [ 817.521337] sysfs_merge_group+0x1a0/0x340 [ 817.525584] ? sysfs_mount+0x1e0/0x1e0 [ 817.529475] ? kernfs_put+0x3c2/0x5d0 [ 817.533300] dpm_sysfs_add+0x164/0x210 [ 817.537204] device_add+0xa47/0x1760 [ 817.540934] ? get_device_parent.isra.0+0x570/0x570 [ 817.545969] rfkill_register+0x1bf/0xb50 [ 817.550042] hci_register_dev+0x385/0x880 [ 817.554205] hci_uart_tty_ioctl+0x761/0xaf0 [ 817.558542] tty_ioctl+0x8b5/0x1510 [ 817.562179] ? hci_uart_init_work+0x140/0x140 [ 817.566683] ? tty_vhangup+0x30/0x30 [ 817.570401] ? mark_held_locks+0x100/0x100 [ 817.574653] ? __fget+0x340/0x540 [ 817.578120] ? __might_sleep+0x95/0x190 [ 817.582103] ? tty_vhangup+0x30/0x30 [ 817.585848] do_vfs_ioctl+0xd5f/0x1380 [ 817.589762] ? selinux_file_ioctl+0x46f/0x5e0 [ 817.594271] ? selinux_file_ioctl+0x125/0x5e0 [ 817.598783] ? ioctl_preallocate+0x210/0x210 [ 817.603198] ? selinux_file_mprotect+0x620/0x620 [ 817.607977] ? iterate_fd+0x360/0x360 [ 817.611791] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 817.617335] ? fput+0x128/0x1a0 [ 817.620632] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 817.626192] ? security_file_ioctl+0x8d/0xc0 [ 817.630614] ksys_ioctl+0xab/0xd0 [ 817.634082] __x64_sys_ioctl+0x73/0xb0 [ 817.637979] do_syscall_64+0xfd/0x620 [ 817.641794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 817.646987] RIP: 0033:0x4598e9 [ 817.650185] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 817.669093] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:10:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x7000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 817.676812] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 817.684087] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 817.691365] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 817.698640] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 817.705912] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 12:10:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xffb7) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'os2.', '\x00'}, &(0x7f0000000340)=""/128, 0x80) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r3, &(0x7f00000005c0)=[{}], 0x1, 0x0) [ 817.754368] Bluetooth: hci0: Frame reassembly failed (-84) [ 817.761542] rdma_op 00000000f83497f9 conn xmit_rdma (null) [ 819.759019] Bluetooth: hci0: command 0x1003 tx timeout [ 819.764564] Bluetooth: hci0: sending frame failed (-49) [ 819.998899] net_ratelimit: 16 callbacks suppressed [ 819.998908] protocol 88fb is buggy, dev hsr_slave_0 [ 819.998940] protocol 88fb is buggy, dev hsr_slave_1 [ 820.003924] protocol 88fb is buggy, dev hsr_slave_1 [ 820.078957] protocol 88fb is buggy, dev hsr_slave_0 [ 820.084088] protocol 88fb is buggy, dev hsr_slave_1 [ 820.718901] protocol 88fb is buggy, dev hsr_slave_0 [ 820.724047] protocol 88fb is buggy, dev hsr_slave_1 [ 820.958990] protocol 88fb is buggy, dev hsr_slave_0 [ 820.964073] protocol 88fb is buggy, dev hsr_slave_1 [ 820.969237] protocol 88fb is buggy, dev hsr_slave_0 [ 821.838996] Bluetooth: hci0: command 0x1001 tx timeout [ 821.844406] Bluetooth: hci0: sending frame failed (-49) [ 823.918968] Bluetooth: hci0: command 0x1009 tx timeout [ 825.119142] net_ratelimit: 21 callbacks suppressed [ 825.119153] protocol 88fb is buggy, dev hsr_slave_0 [ 825.129260] protocol 88fb is buggy, dev hsr_slave_1 [ 825.134386] protocol 88fb is buggy, dev hsr_slave_0 [ 825.139484] protocol 88fb is buggy, dev hsr_slave_1 [ 826.238950] protocol 88fb is buggy, dev hsr_slave_0 [ 826.238987] protocol 88fb is buggy, dev hsr_slave_1 [ 826.244052] protocol 88fb is buggy, dev hsr_slave_1 [ 826.318927] protocol 88fb is buggy, dev hsr_slave_0 [ 826.324059] protocol 88fb is buggy, dev hsr_slave_1 [ 826.958895] protocol 88fb is buggy, dev hsr_slave_0 12:11:08 executing program 0 (fault-call:2 fault-nth:60): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:11:08 executing program 3: creat(&(0x7f0000000840)='./file0\x00', 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='-em0\x00', 0xffffffffffffffff}, 0x30) ptrace$getregset(0x4204, r0, 0x4, &(0x7f0000000100)={&(0x7f0000000080)=""/72, 0x48}) 12:11:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x7fffffe, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:11:08 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:11:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r3, 0x1, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'hsr0\x00'}}}}}, 0x34}}, 0x4000) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80801800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xfffffffffffffffa}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x5c810}, 0x8) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r4, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:11:08 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 828.121619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=22289 comm=syz-executor.5 [ 828.135965] Enabling of bearer rejected, already enabled [ 828.146347] rdma_op 00000000a8ccd00d conn xmit_rdma (null) 12:11:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 828.183404] FAULT_INJECTION: forcing a failure. [ 828.183404] name failslab, interval 1, probability 0, space 0, times 0 [ 828.222248] CPU: 0 PID: 22299 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 828.229240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 828.238601] Call Trace: [ 828.241214] dump_stack+0x172/0x1f0 [ 828.244865] should_fail.cold+0xa/0x1b [ 828.248767] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 828.253894] ? lock_downgrade+0x810/0x810 [ 828.258069] __should_failslab+0x121/0x190 [ 828.262320] should_failslab+0x9/0x14 [ 828.266129] kmem_cache_alloc+0x2ae/0x700 [ 828.270287] ? lock_downgrade+0x810/0x810 [ 828.274545] ? kasan_check_read+0x11/0x20 [ 828.278705] __kernfs_new_node+0xef/0x680 [ 828.282863] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 828.287633] ? wait_for_completion+0x440/0x440 [ 828.292239] ? mutex_unlock+0xd/0x10 [ 828.295958] ? kernfs_activate+0x192/0x1f0 [ 828.300207] kernfs_new_node+0x99/0x130 [ 828.304199] __kernfs_create_file+0x51/0x33b [ 828.308619] sysfs_add_file_mode_ns+0x222/0x560 [ 828.313310] sysfs_merge_group+0x1a0/0x340 [ 828.317549] ? sysfs_mount+0x1e0/0x1e0 [ 828.321441] ? kernfs_put+0x3c2/0x5d0 [ 828.325266] dpm_sysfs_add+0x164/0x210 [ 828.329165] device_add+0xa47/0x1760 [ 828.332893] ? get_device_parent.isra.0+0x570/0x570 [ 828.337928] rfkill_register+0x1bf/0xb50 [ 828.342001] hci_register_dev+0x385/0x880 [ 828.346167] hci_uart_tty_ioctl+0x761/0xaf0 [ 828.350500] tty_ioctl+0x8b5/0x1510 [ 828.354155] ? hci_uart_init_work+0x140/0x140 [ 828.358694] ? tty_vhangup+0x30/0x30 [ 828.362421] ? mark_held_locks+0x100/0x100 [ 828.366676] ? __fget+0x340/0x540 [ 828.370155] ? __might_sleep+0x95/0x190 [ 828.374146] ? tty_vhangup+0x30/0x30 [ 828.377869] do_vfs_ioctl+0xd5f/0x1380 [ 828.381777] ? selinux_file_ioctl+0x46f/0x5e0 [ 828.386280] ? selinux_file_ioctl+0x125/0x5e0 [ 828.390784] ? ioctl_preallocate+0x210/0x210 [ 828.395224] ? selinux_file_mprotect+0x620/0x620 [ 828.400017] ? iterate_fd+0x360/0x360 [ 828.403853] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 828.409420] ? fput+0x128/0x1a0 [ 828.412735] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 828.418298] ? security_file_ioctl+0x8d/0xc0 [ 828.422741] ksys_ioctl+0xab/0xd0 [ 828.426330] __x64_sys_ioctl+0x73/0xb0 [ 828.430236] do_syscall_64+0xfd/0x620 [ 828.434052] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 828.439254] RIP: 0033:0x4598e9 [ 828.442458] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 828.461362] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 828.469081] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 828.476354] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 828.483631] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 828.490902] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 828.498177] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 12:11:08 executing program 3: r0 = creat(&(0x7f0000000840)='./file0\x00', 0x0) r1 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r1, 0x0, 0x0, 0x0) r2 = dup3(r1, r0, 0x180000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)=0xffb7) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000040)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @adapter={0xf000000000000000, 0x1, 0x1ff, 0x3, 0x1}}, {0x51c, 0x4, 0x0, 0x0, @adapter={0x3, 0x120000000, 0x3, 0x6, 0x80}}]}) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000)=0xffb7) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3, 0x4, 0x460898d, r4}) syz_mount_image$nfs(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8b000, 0x0) unlink(&(0x7f0000000bc0)='./file0\x00') 12:11:08 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:11:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x11000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 828.555786] Bluetooth: hci0: Frame reassembly failed (-84) [ 828.644061] rdma_op 000000001ead7523 conn xmit_rdma (null) 12:11:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x20000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:11:08 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 828.833035] rdma_op 0000000080cb29ee conn xmit_rdma (null) [ 828.922894] Enabling of bearer rejected, already enabled [ 830.558908] net_ratelimit: 17 callbacks suppressed [ 830.558917] protocol 88fb is buggy, dev hsr_slave_0 [ 830.559033] protocol 88fb is buggy, dev hsr_slave_0 [ 830.563965] protocol 88fb is buggy, dev hsr_slave_1 [ 830.568980] protocol 88fb is buggy, dev hsr_slave_1 [ 830.574087] Bluetooth: hci0: command 0x1003 tx timeout [ 830.579061] protocol 88fb is buggy, dev hsr_slave_0 [ 830.584050] Bluetooth: hci0: sending frame failed (-49) [ 830.589300] protocol 88fb is buggy, dev hsr_slave_1 [ 831.118922] protocol 88fb is buggy, dev hsr_slave_0 [ 831.124065] protocol 88fb is buggy, dev hsr_slave_1 [ 831.358937] protocol 88fb is buggy, dev hsr_slave_0 [ 831.364078] protocol 88fb is buggy, dev hsr_slave_1 [ 832.639051] Bluetooth: hci0: command 0x1001 tx timeout [ 832.644466] Bluetooth: hci0: sending frame failed (-49) [ 834.719024] Bluetooth: hci0: command 0x1009 tx timeout [ 836.798882] net_ratelimit: 26 callbacks suppressed [ 836.798892] protocol 88fb is buggy, dev hsr_slave_0 [ 836.799074] protocol 88fb is buggy, dev hsr_slave_0 [ 836.803919] protocol 88fb is buggy, dev hsr_slave_1 [ 836.808959] protocol 88fb is buggy, dev hsr_slave_1 [ 836.824053] protocol 88fb is buggy, dev hsr_slave_0 [ 836.829135] protocol 88fb is buggy, dev hsr_slave_1 [ 837.358910] protocol 88fb is buggy, dev hsr_slave_0 [ 837.364099] protocol 88fb is buggy, dev hsr_slave_1 [ 837.598896] protocol 88fb is buggy, dev hsr_slave_0 [ 837.604017] protocol 88fb is buggy, dev hsr_slave_1 12:11:18 executing program 0 (fault-call:2 fault-nth:61): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:11:18 executing program 3: 12:11:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x3f000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:11:18 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:11:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) flistxattr(r1, &(0x7f0000000600)=""/4096, 0x1000) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000b82000)={0x10000004}) r3 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001740)={r3, 0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000140)='posix_acl_access,,vboxnet1mime_type\'[nodev[vmnet0+\x00', 0xffffffffffffffff}, 0x30) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) ioprio_set$uid(0x3, r7, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001780)='/dev/dlm_plock\x00', 0xf662ade7a86ad117, 0x0) r10 = syz_open_dev$audion(&(0x7f00000017c0)='/dev/audio#\x00', 0x7f, 0x40000) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x4030582a, &(0x7f0000000000)=0xffb7) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0x4030582a, &(0x7f0000000000)=0xffb7) r13 = socket$inet(0x2b, 0x4, 0x0) r14 = accept4$inet(r13, 0x0, 0x0, 0x0) r15 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r15, 0x0, 0x0, 0x0) r16 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r16, 0x4030582a, &(0x7f0000000000)=0xffb7) r17 = gettid() ptrace$setopts(0x4206, r17, 0x0, 0x0) tkill(r17, 0x3f) ptrace$cont(0x18, r17, 0x0, 0x0) ptrace$setregs(0xd, r17, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r17, 0x0, 0x0) r18 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r19) ioprio_set$uid(0x3, r19, 0x0) r20 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r20, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r21, 0x0, 0x0) r22 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r22, 0x0, 0x0, 0x0) r23 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r23, 0x4030582a, &(0x7f0000000000)=0xffb7) r24 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r24, 0x0, 0x0, 0x0) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r26) ioprio_set$uid(0x3, r26, 0x0) fstat(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r28 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r28) r29 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r29, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r30, 0x0, 0x0) r31 = openat$uhid(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/uhid\x00', 0x2, 0x0) r32 = accept4$packet(r12, 0x0, &(0x7f0000002500), 0x800) r33 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r33, 0x4030582a, &(0x7f0000000000)=0xffb7) r34 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r34, 0x0, 0x0, 0x0) r35 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r35, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r20, 0x8904, &(0x7f0000002cc0)=0x0) getresgid(&(0x7f0000002d00), &(0x7f0000002d40)=0x0, &(0x7f0000002d80)) r38 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r38, 0x4030582a, &(0x7f0000000000)=0xffb7) r39 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002dc0)='/selinux/enforce\x00', 0x80, 0x0) r40 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002e00)='/dev/dsp\x00', 0x20000, 0x0) r41 = gettid() ptrace$setopts(0x4206, r41, 0x0, 0x0) tkill(r41, 0x3f) ptrace$cont(0x18, r41, 0x0, 0x0) ptrace$setregs(0xd, r41, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r41, 0x0, 0x0) stat(&(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r43 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r43, 0x0, 0x0, 0x0) r44 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r44, 0x0, 0x0, 0x0) r45 = syz_open_procfs$namespace(r4, &(0x7f0000003580)='ns/user\x00') r46 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r46, 0x4030582a, &(0x7f0000000000)=0xffb7) r47 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000035c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r48 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r48, 0x0, 0x0, 0x0) r49 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r49, 0x0, 0x0, 0x0) r50 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r50, 0x0, 0x0, 0x0) r51 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r51, 0x4030582a, &(0x7f0000000000)=0xffb7) r52 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r52, 0x0, 0x0, 0x0) r53 = socket$nl_netfilter(0x10, 0x3, 0xc) r54 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000003600)='/dev/video37\x00', 0x2, 0x0) r55 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r55, 0x0, 0x0, 0x0) r56 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r56, 0x4030582a, &(0x7f0000000000)=0xffb7) r57 = syz_open_dev$mice(&(0x7f0000003640)='/dev/input/mice\x00', 0x0, 0x200200) r58 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r58) r59 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r59, 0x4030582a, &(0x7f0000000000)=0xffb7) fstat(r59, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0}) r61 = gettid() ptrace$setopts(0x4206, r61, 0x0, 0x0) tkill(r61, 0x3f) ptrace$cont(0x18, r61, 0x0, 0x0) ptrace$setregs(0xd, r61, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r61, 0x0, 0x0) r62 = getuid() r63 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r63, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r64, 0x0, 0x0) r65 = gettid() ptrace$setopts(0x4206, r65, 0x0, 0x0) tkill(r65, 0x3f) ptrace$cont(0x18, r65, 0x0, 0x0) ptrace$setregs(0xd, r65, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r65, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003800)=[{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000080)="295ca8a8520427bcdaf76a26ab5344730ed7a4c852e2eee48bd3ba03aadd3dc9d79ed51de839e5756d535048dddbae45b0c3d6d5661984382520fe8658350a26198a324747258cc904bd5508bad69bfc1b021e070ca9d28c19ae7f1cb0648e6a15637216477553819b590a96df68a43c365d21f024de1e63afe9fcad1ae3bcdbdaa53c302a3b3e2cd0a355172ed874f236628c3068db378a81cd7911b390d9c889f607ef9affd26f408f597b29b8f349016f4011f21136720322daac2d1c", 0xbe}, {&(0x7f00000001c0)="d6b41e097277833f342846d01122260e2d6948b61435f6e547aa8a295b461d8ea08a2d92f8d2771a0073ff4149ef1f7a1c7e4996006db62e30e63ad26464ac1b3eb2b48f23597efc35989e43f05d4b69cbcb603f89a11b27731c73a15487a8aad161d88fe338ae243efdf5c03715b3baa0d09afeb323fc6b6b2f6da097db932c9bc3ab6eeb545f7d1f451cec75c58b4276f7161da665784ab1af84be154dc2e11110415bedeb5cdab18b5cdda7881f6a850affe15d682821663a9627d86e82825fd947", 0xc3}, {&(0x7f00000002c0)="4d374a31c3caadc0e95aa98e75720628cc25e48aa75d9c0106b45561fecb88425a182258b1bdbeeea6eea8ea555e40a84c25938031e67779ece14bb88df68527611d48ccf39114a9305846d712330c555c560d341571a54e8890c5d9eee49aff59ac7d2f193dcc49188085f96f916c4e2df68126ab3dff84e2cf5385f3c60ed7dcbed173e22cf1c3599a86bf02ccc770", 0x90}, {&(0x7f0000000380)="5a4a7936534b9305ac032f77bfd9d27229d8c97a67fce4b7582a1bca6e073081fac9f0bf002b751954f23dab0dad4497726b83603b6fcbfc0bd612fed52e1848e268016d34efe8ea1e4a1a4562406fb5d85bd803895c9a85da622349d2773094b535391a705fbe", 0x67}, {&(0x7f0000000400)="38c6d2d67c72af1872d61d1e4659343f611e15b66e35d089f9d4d4d9738cf0d59bfecf2c897bed447df9991c09d25d6ea79d155c08973e08154b28030a61bf31cbb2c143a62f29609a8ab3b049033cdc6c15e9d64a19f6e6d64ef084d59576014e72392500ac2463eee69785ea1df642c91b258027268ee2a91795d30e8875936f63dc8fbd4ffc4f64314986510f657805fc81dbfe997da0ff4a25862f4fa5c875444ab01e40ae2a5b9b5c6279fc4e6218646ea5217cfc53341098f59d6fe4eb22ee428907a4813b12dfde7a47f362eaf2aa623cdd2bd244d0e80c56ae7eb09bf96b7cd263b1e726595eb89dbab34b5ed4bc60", 0xf3}, {&(0x7f0000000500)="2979b060ac342efb5d69465cf7f6b62d89766d4fcd2bff8edaa1a65bc23e41acdf4faf4d6a4aba0905a32bb57e92d5b352bdffbe6016506ba30e7b00771ade39ffab5acbbc7a2e1914b85b93faef0d94f41bb09d6b92891460a08f34dbe3aae0c55138090c3610234ad5b8fc6220217bddc19497374b2e640ae908763f5f098a5382fff0ec4bdb4b1bc1ca0b", 0x8c}, {&(0x7f0000001600)="80d74ca097be847bf9ded3d317b001223d81e2c7de1d2bd20a9d5cfd2d5d9e23ca8d0fb5a87a7ecd0661d9d5caa1a1bd525620cfaa23ed2752eb32fc18be1a2250963a207d28187b96df7558711c390a2e50be3b97c1adcdcde728f9ca87200d500dfe359342a7dd6d807d626a559439befc615dadaa4ca367b77ad5949633fddd65f2f4175c91eb87257934b4642878b0f779356e7a43445480184db30806d5b31763", 0xa3}], 0x7, &(0x7f0000001800)=[@cred={{0x1c, 0x1, 0x2, {r4, r7, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [r9, 0xffffffffffffffff, r10, r11, 0xffffffffffffffff, 0xffffffffffffffff, r2, r12, r0, r13]}}, @rights={{0x24, 0x1, 0x1, [r1, r15, r1, r16, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x90, 0x20000840}, {&(0x7f00000018c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001940)="122e9abfb425cd415021a94852996b4356e5e130aa2a210bb449715f59a36c0690f984a8bbaf2dd4ef856b5e86fd989b2404c34a54f0d46bbc9c2652f743f6eb83befa20b0", 0x45}, {&(0x7f00000019c0)="0d103bc5977acd2fccbfd2d0587224f876781ecb5bed28cbde5167d1b05d15a8a2ef0696ca4b35f234bb476b2e2e116a790f15beb8c5dfb564620b39e3fc6a906deb5cde98117e12406c9432b5abde4d7f8047a0c9a409a35144ff40b7a18348c70dee7d2d24adbfcad4fb3388410f6d9b14", 0x72}], 0x2, 0x0, 0x0, 0x10}, {&(0x7f0000001a80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001b00)="76abb2abfdab85acc545560562bda58b37f1215d08d70929829721cc43d51d009264fa4448819fcedefa8f8baa89eb0760388c573f66a7e4d82d1f1b9d26aa01d2773edcb841744cf3bf4c8dd4f6d09a4a", 0x51}, {&(0x7f0000001b80)="7ddbce2afdf92669f82a000bb2ad053ccfd365c2a865a256d4cee577536002ae94cdd263c973a604dbe20455ea59ba7893faa8653db43889e4396bdce98fb23a3d970961fae22553db9c850259368e202e0e71840799d3328135114bc30d45407a126eeff07c7ed0469627c094376610bef012a5842dfb5c604e5b4f6e406f5fe8859c5ae0ad171dfe7758f8d35ff817ab1e8e4684b7bbee672d51c6c19e3326834e946af510ebac3e8de51ce2bb2dcb", 0xb0}, {&(0x7f0000001c40)="66b70a849ac5ee9ddca0d496b014d19baf89633af77f35e81e7127d239cc54472a5cc362c79daa9e11", 0x29}, {&(0x7f0000001c80)="4ccdbf5273c72562bd2531e3fc906721550b35c5712e53ccdd69e9e23582cd267674c44fd7eb76e74366c87381ece375f09ac9a9cac00ad85078c6e660cf0c6f71d77b595f1e1f1a99a5a46629c73751015b43285fe535a53fb196acb29bfc885538471f76a78ed6e1d136d2d7204075936ae8c12b6caf2c97b33540f208e93012c8e9be9e58f71f3e900733a9e7e811098acf02425aac19a5233dda1dab18f660316e3bc917923d3622f7c8", 0xac}], 0x4}, {&(0x7f0000001d80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001e00)="c185327986b8f65a7a92b17da5d56e1f006af653c4d1471e3804c36993f624f6e0785e001cefe1412ae3ca7d7afd09e3829849d9f1c1c36bd17984f6cb7324d15044cace4bd128c0a780550062e162391b0558a6c7942402f439a9c70dda00c20be4a23b58e035792321f970151d427c4a010c53aa730d407ec7a4f22b62e2d61b2595c779c5c950b7f2774a375aaeabc52391abc661538e90670228018d055042655b987f2a", 0xa6}, {&(0x7f0000001ec0)="97ac931335f31baad7a2d11ccc14f0f36f3913bf24921925c1b341f29f0d2600e52dac6604fb4df30d757f870ae997a6d75d32ccb500b1f4872793c477669189", 0x40}], 0x2, 0x0, 0x0, 0x4d9fd64fc25ab8cb}, {&(0x7f0000001f40)=@file={0x1, '.\x00'}, 0x6e, &(0x7f00000023c0)=[{&(0x7f0000001fc0)="78aa01d36e5cbeb752d2de6e59e0833cc25927f7967d3d93fe36d48d00a16d21543f659792b6e7fc3857dc291668edc0f281562fd4ad6e5c5f402ab07f245e271426e2f9f041ac50b9da17f007cb7b822e12397e959190ea044f43f514c0f673cc0e77a9ea758883c1f0e261620f7e185e9b88f9817fdb2d76e58df5bda9fa79573afb7fe92ac5d246470dd20fce4fefc4a973c5c3a6256471161e7745ea115dbd6bd0", 0xa3}, {&(0x7f0000002080)="3c2d82a99ac62d74565459e2ba2c47911b4c50504d05e7847f891c3782734b24be0042058bbc1803d3c9fce391eba81410fe0f7ffd7c3f8dca861e95f397739f47be5bebf2e900bd18025a40628b34da2ec1ffbcc9d07b4f7b075430ec584265f4f22ec3df259a640ea1cf0f5e36136164a8e7649bc82cf7387a5b01ea2f2a406525a508c1a39042fb1a3af962", 0x8d}, {&(0x7f0000002140)="62fff299884b65e07f7ffe29a34df7fd2ba95ba1716aa84077b54d4b0f3b5e71055f011ac3736caab9a229f0976bf81c4a87447fe2f572b9966592cd796efcaf47cfa1faf4a5caf606a30e3f13e6f99e6ebc6ea1c8587238a6035dd9d24458dbec883e18c092c8db4173c115ee3e940f784e2419967478a7cb7496d971299cce22602f77e2448e3a4e561665c65c67a07150c574724775fda1c10566398ec7f598cc40c0cd2faf4466b59f180826b3", 0xaf}, {&(0x7f0000002200)="4fc77274c676e77831e4b8854339009a4dec53f411014a1d529da6be23b305099a405375648e846f22fe088f295e3209e2213318385989a0baf4d11177050072cee74ac87493fc34c84f0e5fafb14a4fbc4be01fd65df8fccb2f8189363626c8907bf46220de5dcf9b20993222a9b55c1d997aaa0c9be3ef604e1e7e971c285731df881c53f0e77cfb51e82ee935b048bd190ce296e0dbeba4f8640b24e4ab7f277e240b0db7b7f925646fe89367facefd9851477dd05fbb293fd2c286042ca6635509c75d435e7085fa9484cf24fa7c9d670faa356e1b98820e", 0xda}, {&(0x7f0000002300)="2552e35112d845530d53adf19e5e48dc43cde835536930f06f76f8fc01e522b98cc8de134e92ddfefe332b5f13ddcccdd8864cf06d3eb75fd7d3a4e401dbbf127f678343e8b280686755a4000dc9ed503f005659e7453af9e317a1a7a57153b3e75f740e6edd4b1c0c2386844ce0792688040ff1cb6389563f191bc9bbe681fff670a63aaf34e0dcee5f523d2ebab66465f826855a4c70b19be5b2008878", 0x9e}], 0x353, &(0x7f0000002540)=[@cred={{0x1c, 0x1, 0x2, {r17, r19, r21}}}, @rights={{0x30, 0x1, 0x1, [r22, r11, r13, r23, r2, r24, r16, r15]}}, @cred={{0x1c, 0x1, 0x2, {r3, r26, r27}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r28, 0xffffffffffffffff, r30}}}, @rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, r31, r32, r33, r34, r35]}}], 0xe0, 0x40}, {&(0x7f0000002640)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002c00)=[{&(0x7f00000026c0)="6d44cb72325a617f26681b7f21f4b26ecea24aa0fecf04a2ca129b00723c58df28237ffdccef4887c90463e1f6005ab5a2c7b40e3818f0ae98ce46409154b54702272ce3", 0x44}, {&(0x7f0000002740)="89e9700d87cb58cb7c5928ede0fb4b8466f5d68591827591f0e4849a9d07a521f53b0d0f9cf048176855bf98a16612ef713a33479252fa403751e115660cce77a1293d38b0de9c05a139573d2b0bd5b0c24d9b471f2c97846b756db3e59aaedcf4729c3c371dec3df365cf03b969c0cd97d8d8b33940812a5f1306b70ab49dcbe62571634538", 0x86}, {&(0x7f0000002800)="b78aeb0497104b03fcc017c5387898e80e7988ef840bd0dae1daa328be078d53d76fa11c4b2d0de4a2f72d61757dd7f9b5ce77c6c99630dc7fc34a86b3096b23b0b9a6cf613046f4db198e78acf063b3a6c880a103157fdae43611ea19636ddcf16dce3714c9284cdd9e7f189754135a228fdb6491692307bd747a630cbdc12473617dbca6f05286b89d83c0378dcf159ac81815c62cb3c22fac337e360aadf8f8a3e7f2cc4d", 0xa6}, {&(0x7f00000028c0)="c26ebc984377a1546974f43ad23a5fd653dfd12e581685fb627ab39b5863007159dde29808d6f593ac91177d569d26e93d06eedf25fa18cb8b02ebecded543bdeb1ba89fe573844860a300cd69b2602ab09dcf52e24cb825d6515ecfbf948e33758cf71342e04744c131dbfd1dde20326cce9495d868cf706a09986e3c15a17947ab5106896c2c1d5c42e7e5da8ee0250c2f6244dd64c5f5b623c0ed2cd962422b5be7451bbd903c2c1ede983766bc5545ddf7e864e2173bbe88c99c34b2b28a812787e3a28e94d84b35b9abb2edeaa69d4eb9bc5608a6e3643e40c6c10c22342a8023cbb701", 0xe6}, {&(0x7f00000029c0)="d3b016086f79eed31da5b4eafc9eb8e56917e5cbcf7dd5cbada5bb8ee9d61b77a1b3e114d43b9049a364bcf3f819690878ac0d2b80d22e1d937126e49f19ac", 0x3f}, {&(0x7f0000002a00)="4321e24d717ee1a83b63852f1d818c8d6202bd92fc6fce89647015de9d662809910dd41151cc870cf0b64ec843e1020912bcdaed947243efca931a9d993b3d5d2c4760bdcb6c266a9319e41a9e81ed3db0ade02bbb7a8cfa2c1944de3d234fa4464a30873eb67ec93d447dd1fc2016aba8", 0x71}, {&(0x7f0000002a80)="b9d9456fe36e3d78ccadc1d85db812fed4a571940b08c2751b2730b6eee33b637d6d0b166f814df090c3ae0dd46d0f938d2ea9e68e70f66504796881e7b89790e1d4fec337934fbe755b2b07d7f69e8be67eb1332d37dbb2e80f0e35e05dfc4b937d4cc99518", 0x66}, {&(0x7f0000002b00)="38866c2d65a6b3b3e6b5c608296bdb43e9aeb57d0a61b2d90f623ab9cf4e1aa9456c091631323e47a980a02ee809137a29e4ed6196a79aeaf43e18350b7920f8369753b916c5ed3f2fee059311680d828458f5570399bad3c089204f6758a232b8d53cdc4d1cb0", 0x67}, {&(0x7f0000002b80)="7148e018150014eed8b69048d217a84fbe73690e77c630986b944ed4ca69c2696b1f26320f69400f3b831c8eed725a5e1daeb0c8c6329f21e3155b139c1656a998512f27", 0x44}], 0x9, &(0x7f0000002f00)=[@cred={{0x1c, 0x1, 0x2, {r36, r26, r37}}}, @rights={{0x28, 0x1, 0x1, [r38, 0xffffffffffffffff, r34, r1, r39, r40]}}, @cred={{0x1c, 0x1, 0x2, {r41, 0xee01, r42}}}], 0x68, 0x44090}, {&(0x7f0000002f80)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000003500)=[{&(0x7f0000003000)="98ad23faf1f0b286fe5878d35e236b28ca115bcb544c0d9ce00d693c5a292b4bffd540fce3999c40a11e259d97a39ad493f577d0c48c6b1b459030e495886d941d36026e13273c590dd3dc7dd5911baa7cebfb8074b6231a035d57a6c0df165cfe39cf957d483bca84cf27196d5c21f4382d45448e1e6ac9f2a95d0025aa5248addf14e04d63a89cf97c23aa1466490e03a03f72ae62f5aeba7f1470ebf511b4bbba9757bb6e0c289ae568cc129a88423cd3caa51d77ae8ea7212642503e09ce7d880bdb849add34f34fe4a5421f94a88eaf90a7e40c146f0732770a3e2eed613c0e99bf8c351d09", 0xe8}, {&(0x7f0000003100)="b4684ab23ecac71e44e486", 0xb}, {&(0x7f0000003140)="f09a31b5599ceafb30647ddcd07bead48ac1834e01efd25ac3177f14a7a2dc20b164da8c9653d0a16724eea8f5af1faa19acf48069d22a9aa5e84eae9db1258622bdd1154bbf9298c7ae6de37948819ec9cf465ec753a33f8cf1a37a0f69fc3b585fca804b166a6c48aec224de195393bc77d654f5", 0x75}, {&(0x7f00000031c0)="165449e13445e361c82b19e3347638e5cbda3713d7cb2fc9648bb7ea3da6103ed0f026c22da675d2ef8c32a13f7c9e3c441d543fad609267269e9979453143191029612d9c57d5941aaf40e347813dbaa9b5a2bc7bb3f2b6d3c08ea70d41d29f8108df999ad7836ddabd0124f2b53447b70ba6f06a5c125f805e15ffeb0b7fbd2eb1e3c4095256ae95bc07c6b5bb0a5aeb3e334a318ba56922ea1258906af48cd34f9e685e1d55b396b843e91f14412f881dd80ad8949563a27a75f96b079e6ead95a84d994ce63ddfff81fc6f40088a678390609a809ae62cbde3d4623c23da66f37c937c5a", 0xe6}, {&(0x7f00000032c0)="e6b88fafafeb516386e2932c956855b42cbdeeec73e17cc814020e327af961fdf8d1007f402c76271237e37e74e6018666c2bc7d090a2d5d9b9fc47ef310bffa49213f57d1c346403e034efe87b349ae6d62c4bdeaf98937c5920b62c764f0becc5f798fa2307ce9a6a6aa6967dca5bc341d9c053cb96affed43c12645a69c14d4e638f956efb2b36156424137d1ff9185d2686e01", 0x95}, {&(0x7f0000003380)="2aba09e619179174f14a0a109fc73a54866c51d132ed3b1761cfa24ef8f8dd24915baaf8c032c68f653b50625ee87c97aed339469210a4983cfa627dc8a3f0bf3001e41f479bc8daacb9a3e7cd44ac086c21dd6ba31d86489367ccafad0ad0a8ac6716558df68a805d723d714c38533ee3d04c0e662e61981934ba7f810aaf69e29b893509b5", 0x86}, {&(0x7f0000003440)="b85341bc1548a1b6bcf8bd5225130df1783bd2aadbd25f75c1d594a4fb09bf587b0e7c0fa1d2dccb7f180c0091da8e40a7e993fb114f37e4b913b8fbc30ca879edaeda28564238fae97124b65a2067952155a6318846d03288daef4cc8a5d0d61752133e21854537001b8c550e0a28cbbf24de0995c0a2da2484e8b609c08bc32712e40c3dfdf3db69676978803e", 0x8e}], 0x7, &(0x7f0000003700)=[@rights={{0x20, 0x1, 0x1, [r43, r14, r22, r44]}}, @rights={{0x28, 0x1, 0x1, [r45, r6, r35, r46, r47, r48]}}, @rights={{0x34, 0x1, 0x1, [r33, r49, r50, r11, r39, r51, r52, r53, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r54]}}, @rights={{0x1c, 0x1, 0x1, [r55, r56, r57]}}, @cred={{0x1c, 0x1, 0x2, {r58, r60, r42}}}, @cred={{0x1c, 0x1, 0x2, {r65, r62, r64}}}], 0xf8, 0x808c4}], 0x7, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:11:18 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:11:19 executing program 3: [ 839.021330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=22638 comm=syz-executor.5 [ 839.022774] rdma_op 0000000036839459 conn xmit_rdma (null) 12:11:19 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4006, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:11:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x40000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 839.109351] FAULT_INJECTION: forcing a failure. [ 839.109351] name failslab, interval 1, probability 0, space 0, times 0 [ 839.113818] ptrace attach of "/root/syz-executor.5"[22671] was attempted by "/root/syz-executor.5"[22672] [ 839.163723] CPU: 1 PID: 22642 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 839.170717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 839.180088] Call Trace: [ 839.182696] dump_stack+0x172/0x1f0 [ 839.186347] should_fail.cold+0xa/0x1b [ 839.190261] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 839.195386] ? lock_downgrade+0x810/0x810 [ 839.199565] __should_failslab+0x121/0x190 [ 839.203913] should_failslab+0x9/0x14 [ 839.203938] kmem_cache_alloc+0x2ae/0x700 [ 839.211879] ? lock_downgrade+0x810/0x810 [ 839.216153] ? kasan_check_read+0x11/0x20 [ 839.216177] __kernfs_new_node+0xef/0x680 [ 839.216196] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 839.229236] ? wait_for_completion+0x440/0x440 [ 839.229260] ? mutex_unlock+0xd/0x10 [ 839.229275] ? kernfs_activate+0x192/0x1f0 [ 839.229294] kernfs_new_node+0x99/0x130 [ 839.229312] __kernfs_create_file+0x51/0x33b [ 839.229331] sysfs_add_file_mode_ns+0x222/0x560 [ 839.237619] sysfs_merge_group+0x1a0/0x340 [ 839.237637] ? sysfs_mount+0x1e0/0x1e0 [ 839.263019] ? kernfs_put+0x3c2/0x5d0 [ 839.266854] dpm_sysfs_add+0x164/0x210 [ 839.270757] device_add+0xa47/0x1760 [ 839.274489] ? get_device_parent.isra.0+0x570/0x570 [ 839.279526] rfkill_register+0x1bf/0xb50 [ 839.283599] hci_register_dev+0x385/0x880 [ 839.287770] hci_uart_tty_ioctl+0x761/0xaf0 [ 839.292106] tty_ioctl+0x8b5/0x1510 [ 839.295741] ? hci_uart_init_work+0x140/0x140 [ 839.300246] ? tty_vhangup+0x30/0x30 [ 839.303970] ? mark_held_locks+0x100/0x100 [ 839.308220] ? __fget+0x340/0x540 [ 839.311692] ? __might_sleep+0x95/0x190 [ 839.315673] ? tty_vhangup+0x30/0x30 [ 839.319398] do_vfs_ioctl+0xd5f/0x1380 [ 839.323293] ? selinux_file_ioctl+0x46f/0x5e0 [ 839.327797] ? selinux_file_ioctl+0x125/0x5e0 [ 839.332404] ? ioctl_preallocate+0x210/0x210 [ 839.336837] ? selinux_file_mprotect+0x620/0x620 [ 839.341702] ? iterate_fd+0x360/0x360 [ 839.345513] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 839.351054] ? fput+0x128/0x1a0 [ 839.354350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 839.359894] ? security_file_ioctl+0x8d/0xc0 [ 839.364318] ksys_ioctl+0xab/0xd0 [ 839.367785] __x64_sys_ioctl+0x73/0xb0 [ 839.371684] do_syscall_64+0xfd/0x620 [ 839.375501] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 839.380695] RIP: 0033:0x4598e9 [ 839.383893] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 839.402826] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:11:19 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 12:11:19 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:11:19 executing program 3: [ 839.410550] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 839.417842] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 839.425125] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 839.432515] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 839.439792] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 839.477522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=22759 comm=syz-executor.5 [ 839.500231] Bluetooth: hci0: Frame reassembly failed (-84) [ 839.506155] rdma_op 000000008fbbd378 conn xmit_rdma (null) [ 841.519084] Bluetooth: hci0: command 0x1003 tx timeout [ 841.524671] Bluetooth: hci0: sending frame failed (-49) [ 843.038893] net_ratelimit: 26 callbacks suppressed [ 843.039032] protocol 88fb is buggy, dev hsr_slave_0 [ 843.043898] protocol 88fb is buggy, dev hsr_slave_0 [ 843.048971] protocol 88fb is buggy, dev hsr_slave_1 [ 843.053921] protocol 88fb is buggy, dev hsr_slave_1 [ 843.058986] protocol 88fb is buggy, dev hsr_slave_0 [ 843.068995] protocol 88fb is buggy, dev hsr_slave_1 [ 843.598946] protocol 88fb is buggy, dev hsr_slave_0 [ 843.604169] protocol 88fb is buggy, dev hsr_slave_1 [ 843.609332] Bluetooth: hci0: command 0x1001 tx timeout [ 843.614700] Bluetooth: hci0: sending frame failed (-49) [ 843.838909] protocol 88fb is buggy, dev hsr_slave_0 [ 843.844088] protocol 88fb is buggy, dev hsr_slave_1 [ 845.679093] Bluetooth: hci0: command 0x1009 tx timeout [ 849.278894] net_ratelimit: 26 callbacks suppressed [ 849.278903] protocol 88fb is buggy, dev hsr_slave_0 [ 849.279076] protocol 88fb is buggy, dev hsr_slave_0 [ 849.283910] protocol 88fb is buggy, dev hsr_slave_1 [ 849.288949] protocol 88fb is buggy, dev hsr_slave_1 [ 849.304081] protocol 88fb is buggy, dev hsr_slave_0 [ 849.309170] protocol 88fb is buggy, dev hsr_slave_1 12:11:29 executing program 0 (fault-call:2 fault-nth:62): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:11:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x5c8f0200, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:11:29 executing program 3: 12:11:29 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:11:29 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, 0x0) ptrace$cont(0x7, r2, 0x0, 0x0) 12:11:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/relabel\x00', 0x2, 0x0) r4 = dup(r2) r5 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r5, 0x0, 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000400)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) r8 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r8) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) ioprio_set$uid(0x3, r10, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0xffffffffffffffff) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r14) ioprio_set$uid(0x3, r14, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r15, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000580), &(0x7f0000000700)=0xc) setresgid(r16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000680)=[{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)="c48d0e921024eec0715f069459ace7f6f6c4088825f4933e80b8e61e459fba4623ba6a7dc52ad601aed737c9bc951cd58d6cea6a6682d1bce56cb7a66e6103dbf75320652295bf7178889ab63b1d60fe2fb92a7d9b47a87118c41aeba4b0b20694de584a3a3d400551f3d6a85f776e0b73cdbea754f5268852835efaf048db3e89a85fb531b767ff51292cae65f9154df7b71aaed586e6f1e0ba7cd0de273885c1fc5891e7f43b76ebace8c0ba582df556c8dbe0fc3a2c0fb901b3bc3f90360ae515a3a0dc1a3bee13951da4ccdbe0fd38108e", 0xd3}], 0x1, &(0x7f0000000240)=[@rights={{0x18, 0x1, 0x1, [r3, r1]}}, @rights={{0x30, 0x1, 0x1, [r1, r2, r2, r4, r0, r2, r5, r2]}}], 0x48, 0x24000179}, {&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000340)="8297fee44a3c8fcf12d1ee3e3115d9e2388a6becbf3d877ba47af3265172bd86581e55473cc191fb41fbccdf50c401c78420b85ee93aa7ebc1cdec4781dcc3ae8b54c1ab3fa62215497644867666dbe27ecdfa6afc283e2bdd2563b3caa06480b5cca3fa2ae4", 0x66}], 0x1, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r16}}}], 0x60, 0x40014}], 0x2, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) [ 849.838984] protocol 88fb is buggy, dev hsr_slave_0 [ 849.844199] protocol 88fb is buggy, dev hsr_slave_1 12:11:29 executing program 3: [ 849.901273] rdma_op 00000000acdb44b0 conn xmit_rdma (null) [ 849.914216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=22868 comm=syz-executor.5 12:11:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x60000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:11:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)=0xffb7) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000000)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:11:30 executing program 3: [ 849.988424] FAULT_INJECTION: forcing a failure. [ 849.988424] name failslab, interval 1, probability 0, space 0, times 0 [ 850.064445] CPU: 0 PID: 22888 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 850.071430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 850.080799] Call Trace: [ 850.083409] dump_stack+0x172/0x1f0 [ 850.087056] should_fail.cold+0xa/0x1b [ 850.090965] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 850.096080] ? lock_downgrade+0x810/0x810 [ 850.100246] __should_failslab+0x121/0x190 [ 850.104493] should_failslab+0x9/0x14 [ 850.108310] kmem_cache_alloc+0x2ae/0x700 [ 850.112472] ? lock_downgrade+0x810/0x810 [ 850.116621] ? kasan_check_read+0x11/0x20 [ 850.116648] __kernfs_new_node+0xef/0x680 [ 850.124930] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 850.129701] ? wait_for_completion+0x440/0x440 [ 850.134310] ? mutex_unlock+0xd/0x10 [ 850.138036] ? kernfs_activate+0x192/0x1f0 [ 850.142279] kernfs_new_node+0x99/0x130 [ 850.142298] __kernfs_create_file+0x51/0x33b [ 850.142318] sysfs_add_file_mode_ns+0x222/0x560 [ 850.142343] sysfs_merge_group+0x1a0/0x340 [ 850.142358] ? sysfs_mount+0x1e0/0x1e0 12:11:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x88000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:11:30 executing program 3 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) [ 850.142368] ? kernfs_put+0x3c2/0x5d0 [ 850.142398] dpm_sysfs_add+0x164/0x210 [ 850.163552] device_add+0xa47/0x1760 [ 850.163582] ? get_device_parent.isra.0+0x570/0x570 [ 850.174981] rfkill_register+0x1bf/0xb50 [ 850.175001] hci_register_dev+0x385/0x880 [ 850.188216] hci_uart_tty_ioctl+0x761/0xaf0 [ 850.192558] tty_ioctl+0x8b5/0x1510 [ 850.196197] ? hci_uart_init_work+0x140/0x140 [ 850.200701] ? tty_vhangup+0x30/0x30 [ 850.200716] ? mark_held_locks+0x100/0x100 [ 850.200742] ? __fget+0x340/0x540 [ 850.200763] ? __might_sleep+0x95/0x190 [ 850.200780] ? tty_vhangup+0x30/0x30 [ 850.200798] do_vfs_ioctl+0xd5f/0x1380 [ 850.223706] ? selinux_file_ioctl+0x46f/0x5e0 [ 850.228205] ? selinux_file_ioctl+0x125/0x5e0 [ 850.232721] ? ioctl_preallocate+0x210/0x210 [ 850.237140] ? selinux_file_mprotect+0x620/0x620 [ 850.241941] ? iterate_fd+0x360/0x360 [ 850.245747] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 850.245773] ? fput+0x128/0x1a0 [ 850.254585] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 850.260131] ? security_file_ioctl+0x8d/0xc0 [ 850.264556] ksys_ioctl+0xab/0xd0 [ 850.268016] __x64_sys_ioctl+0x73/0xb0 [ 850.268034] do_syscall_64+0xfd/0x620 [ 850.268053] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 850.275706] RIP: 0033:0x4598e9 [ 850.275722] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 850.275729] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 850.302986] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 850.302995] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 850.303003] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 850.303012] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 850.303021] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 850.303281] protocol 88fb is buggy, dev hsr_slave_0 [ 850.340007] protocol 88fb is buggy, dev hsr_slave_1 [ 850.359247] Bluetooth: hci0: Frame reassembly failed (-84) [ 852.398952] Bluetooth: hci1: command 0x1003 tx timeout [ 852.404365] Bluetooth: hci1: sending frame failed (-49) [ 852.409846] Bluetooth: hci0: command 0x1003 tx timeout [ 852.415386] Bluetooth: hci0: sending frame failed (-49) [ 854.478867] Bluetooth: hci0: command 0x1001 tx timeout [ 854.479127] net_ratelimit: 22 callbacks suppressed [ 854.479135] protocol 88fb is buggy, dev hsr_slave_0 [ 854.484234] Bluetooth: hci1: command 0x1001 tx timeout [ 854.489215] protocol 88fb is buggy, dev hsr_slave_1 [ 854.504613] protocol 88fb is buggy, dev hsr_slave_0 [ 854.509701] protocol 88fb is buggy, dev hsr_slave_1 [ 854.514944] Bluetooth: hci0: sending frame failed (-49) [ 854.520386] Bluetooth: hci1: sending frame failed (-49) [ 855.518900] protocol 88fb is buggy, dev hsr_slave_0 [ 855.519076] protocol 88fb is buggy, dev hsr_slave_0 [ 855.524083] protocol 88fb is buggy, dev hsr_slave_1 [ 855.529125] protocol 88fb is buggy, dev hsr_slave_1 [ 855.539262] protocol 88fb is buggy, dev hsr_slave_0 [ 855.544347] protocol 88fb is buggy, dev hsr_slave_1 [ 856.559486] Bluetooth: hci1: command 0x1009 tx timeout [ 856.564972] Bluetooth: hci0: command 0x1009 tx timeout [ 859.678905] net_ratelimit: 18 callbacks suppressed [ 859.678914] protocol 88fb is buggy, dev hsr_slave_0 [ 859.679065] protocol 88fb is buggy, dev hsr_slave_0 [ 859.683937] protocol 88fb is buggy, dev hsr_slave_1 [ 859.688984] protocol 88fb is buggy, dev hsr_slave_1 [ 859.704116] protocol 88fb is buggy, dev hsr_slave_0 [ 859.709205] protocol 88fb is buggy, dev hsr_slave_1 [ 860.238924] protocol 88fb is buggy, dev hsr_slave_0 [ 860.244115] protocol 88fb is buggy, dev hsr_slave_1 12:11:40 executing program 0 (fault-call:2 fault-nth:63): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:11:40 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x6, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:11:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)=0xffb7) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000000)='vmnet1$\x00', 0x8) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000)=0xffb7) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="f30f0966b9800000c00f326635004000000f30baf80c66b81afe8a8b66efbafc0ced3e0fa39700603e650f30ba4200ecbad004ed66b9371001c066b8f8ffffff66ba000000000f300f2017f265660f2007", 0x51}], 0x1, 0x4, &(0x7f0000000100)=[@efer], 0x1) 12:11:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xfeffff07, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:11:40 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, 0x0) ptrace$cont(0x7, r2, 0x0, 0x0) [ 860.719144] protocol 88fb is buggy, dev hsr_slave_0 [ 860.724271] protocol 88fb is buggy, dev hsr_slave_1 12:11:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) [ 860.790812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=23005 comm=syz-executor.5 12:11:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xffffff7f, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) [ 860.856906] FAULT_INJECTION: forcing a failure. [ 860.856906] name failslab, interval 1, probability 0, space 0, times 0 [ 860.891637] CPU: 0 PID: 23024 Comm: syz-executor.0 Not tainted 4.19.71 #0 12:11:40 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0xa, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 860.898736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 860.908103] Call Trace: [ 860.910730] dump_stack+0x172/0x1f0 [ 860.914384] should_fail.cold+0xa/0x1b [ 860.918300] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 860.923422] ? lock_downgrade+0x810/0x810 [ 860.927600] __should_failslab+0x121/0x190 [ 860.931851] should_failslab+0x9/0x14 [ 860.935665] kmem_cache_alloc+0x2ae/0x700 [ 860.939827] ? lock_downgrade+0x810/0x810 [ 860.943986] ? kasan_check_read+0x11/0x20 [ 860.948161] __kernfs_new_node+0xef/0x680 [ 860.952331] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 860.957092] ? wait_for_completion+0x440/0x440 [ 860.957126] ? mutex_unlock+0xd/0x10 [ 860.957140] ? kernfs_activate+0x192/0x1f0 [ 860.957159] kernfs_new_node+0x99/0x130 [ 860.969664] __kernfs_create_file+0x51/0x33b [ 860.969687] sysfs_add_file_mode_ns+0x222/0x560 [ 860.969713] sysfs_merge_group+0x1a0/0x340 [ 860.969729] ? sysfs_mount+0x1e0/0x1e0 [ 860.969740] ? kernfs_put+0x3c2/0x5d0 [ 860.969769] dpm_sysfs_add+0x164/0x210 [ 860.969788] device_add+0xa47/0x1760 [ 860.969808] ? get_device_parent.isra.0+0x570/0x570 [ 860.969831] rfkill_register+0x1bf/0xb50 [ 861.011386] hci_register_dev+0x385/0x880 [ 861.015565] hci_uart_tty_ioctl+0x761/0xaf0 [ 861.019903] tty_ioctl+0x8b5/0x1510 [ 861.023541] ? hci_uart_init_work+0x140/0x140 [ 861.028051] ? tty_vhangup+0x30/0x30 [ 861.031782] ? mark_held_locks+0x100/0x100 [ 861.036037] ? __fget+0x340/0x540 [ 861.039517] ? __might_sleep+0x95/0x190 [ 861.043504] ? tty_vhangup+0x30/0x30 [ 861.047235] do_vfs_ioctl+0xd5f/0x1380 [ 861.051135] ? selinux_file_ioctl+0x46f/0x5e0 12:11:41 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0xf, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 861.055636] ? selinux_file_ioctl+0x125/0x5e0 [ 861.060148] ? ioctl_preallocate+0x210/0x210 [ 861.064570] ? selinux_file_mprotect+0x620/0x620 [ 861.069345] ? iterate_fd+0x360/0x360 [ 861.073160] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 861.078715] ? fput+0x128/0x1a0 [ 861.082020] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 861.087570] ? security_file_ioctl+0x8d/0xc0 [ 861.087603] ksys_ioctl+0xab/0xd0 [ 861.087621] __x64_sys_ioctl+0x73/0xb0 [ 861.087640] do_syscall_64+0xfd/0x620 [ 861.103180] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 861.108374] RIP: 0033:0x4598e9 [ 861.111585] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 861.130501] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 861.138242] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 861.145531] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 12:11:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x2000000000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 861.152810] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 861.160093] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 861.167379] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 861.180035] Bluetooth: hci1: Frame reassembly failed (-84) [ 861.186404] Bluetooth: hci0: Frame reassembly failed (-84) [ 861.195043] Bluetooth: hci0: Frame reassembly failed (-84) 12:11:41 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x14, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 861.294508] rdma_op 0000000030a1f5b6 conn xmit_rdma (null) [ 861.306834] xt_cluster: node mask cannot exceed total number of nodes 12:11:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x100000000000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) [ 861.440124] xt_cluster: node mask cannot exceed total number of nodes [ 861.456244] xt_cluster: node mask cannot exceed total number of nodes [ 863.198871] Bluetooth: hci0: command 0x1003 tx timeout [ 863.204482] Bluetooth: hci0: sending frame failed (-49) [ 863.210565] Bluetooth: hci1: command 0x1003 tx timeout [ 863.221545] Bluetooth: hci1: sending frame failed (-49) [ 864.879153] net_ratelimit: 22 callbacks suppressed [ 864.879163] protocol 88fb is buggy, dev hsr_slave_0 [ 864.889265] protocol 88fb is buggy, dev hsr_slave_1 [ 864.894391] protocol 88fb is buggy, dev hsr_slave_0 [ 864.899484] protocol 88fb is buggy, dev hsr_slave_1 [ 865.278905] Bluetooth: hci1: command 0x1001 tx timeout [ 865.284321] Bluetooth: hci1: sending frame failed (-49) [ 865.290211] Bluetooth: hci0: command 0x1001 tx timeout [ 865.295573] Bluetooth: hci0: sending frame failed (-49) [ 865.918882] protocol 88fb is buggy, dev hsr_slave_0 [ 865.919033] protocol 88fb is buggy, dev hsr_slave_0 [ 865.923979] protocol 88fb is buggy, dev hsr_slave_1 [ 865.929041] protocol 88fb is buggy, dev hsr_slave_1 [ 865.939150] protocol 88fb is buggy, dev hsr_slave_0 [ 865.944203] protocol 88fb is buggy, dev hsr_slave_1 [ 867.358862] Bluetooth: hci0: command 0x1009 tx timeout [ 867.364363] Bluetooth: hci1: command 0x1009 tx timeout [ 870.078888] net_ratelimit: 18 callbacks suppressed [ 870.078897] protocol 88fb is buggy, dev hsr_slave_0 [ 870.079017] protocol 88fb is buggy, dev hsr_slave_0 [ 870.083900] protocol 88fb is buggy, dev hsr_slave_1 [ 870.088943] protocol 88fb is buggy, dev hsr_slave_1 [ 870.104037] protocol 88fb is buggy, dev hsr_slave_0 [ 870.109262] protocol 88fb is buggy, dev hsr_slave_1 [ 870.638937] protocol 88fb is buggy, dev hsr_slave_0 [ 870.644035] protocol 88fb is buggy, dev hsr_slave_1 [ 871.119142] protocol 88fb is buggy, dev hsr_slave_0 [ 871.124291] protocol 88fb is buggy, dev hsr_slave_1 12:11:51 executing program 0 (fault-call:2 fault-nth:64): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:11:51 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x2f, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:11:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x200000000000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:11:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x3cb) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000000c0)="2cc508fe41314be952d5d6dea163b5cfe0765fea27043de5e5cb168b17410813fd2dfac7bd8dcc7312a1e7e1432a16") r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x10000004}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x523, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)=@req3={0x7f, 0xfffffffffffff000, 0x2, 0x1, 0x5, 0x2, 0x5}, 0x1c) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x200000) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:11:51 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, 0x0) ptrace$cont(0x7, r2, 0x0, 0x0) 12:11:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x2, &(0x7f0000000100)) [ 871.672309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=23449 comm=syz-executor.5 [ 871.702461] rdma_op 00000000c9adb06a conn xmit_rdma (null) [ 871.716578] xt_cluster: node mask cannot exceed total number of nodes [ 871.733380] FAULT_INJECTION: forcing a failure. [ 871.733380] name failslab, interval 1, probability 0, space 0, times 0 [ 871.753436] CPU: 0 PID: 23456 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 871.760419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 871.769786] Call Trace: 12:11:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x300000000000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) [ 871.772403] dump_stack+0x172/0x1f0 [ 871.776058] should_fail.cold+0xa/0x1b [ 871.779981] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 871.785111] ? lock_downgrade+0x810/0x810 [ 871.789276] __should_failslab+0x121/0x190 [ 871.793527] should_failslab+0x9/0x14 [ 871.797341] kmem_cache_alloc+0x2ae/0x700 [ 871.801506] ? perf_trace_lock+0xeb/0x510 [ 871.805674] __kernfs_new_node+0xef/0x680 [ 871.809840] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 871.814618] ? lock_downgrade+0x810/0x810 [ 871.818787] ? mutex_trylock+0x1e0/0x1e0 [ 871.822862] kernfs_new_node+0x99/0x130 [ 871.826856] __kernfs_create_file+0x51/0x33b [ 871.831274] sysfs_add_file_mode_ns+0x222/0x560 [ 871.831299] sysfs_merge_group+0x1a0/0x340 [ 871.831316] ? sysfs_mount+0x1e0/0x1e0 [ 871.831327] ? kernfs_put+0x3c2/0x5d0 [ 871.831359] dpm_sysfs_add+0x164/0x210 [ 871.831376] device_add+0xa47/0x1760 [ 871.831397] ? get_device_parent.isra.0+0x570/0x570 [ 871.861615] rfkill_register+0x1bf/0xb50 [ 871.865701] hci_register_dev+0x385/0x880 12:11:51 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x48, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 871.869867] hci_uart_tty_ioctl+0x761/0xaf0 [ 871.874206] tty_ioctl+0x8b5/0x1510 [ 871.877847] ? hci_uart_init_work+0x140/0x140 [ 871.882367] ? tty_vhangup+0x30/0x30 [ 871.886093] ? mark_held_locks+0x100/0x100 [ 871.890360] ? __fget+0x340/0x540 [ 871.893833] ? __might_sleep+0x95/0x190 [ 871.897809] ? tty_vhangup+0x30/0x30 [ 871.897830] do_vfs_ioctl+0xd5f/0x1380 [ 871.897850] ? selinux_file_ioctl+0x46f/0x5e0 [ 871.909928] ? selinux_file_ioctl+0x125/0x5e0 [ 871.914434] ? ioctl_preallocate+0x210/0x210 [ 871.918887] ? selinux_file_mprotect+0x620/0x620 [ 871.923669] ? iterate_fd+0x360/0x360 [ 871.927485] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 871.933045] ? fput+0x128/0x1a0 [ 871.936359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 871.941917] ? security_file_ioctl+0x8d/0xc0 [ 871.946345] ksys_ioctl+0xab/0xd0 [ 871.949831] __x64_sys_ioctl+0x73/0xb0 [ 871.953734] do_syscall_64+0xfd/0x620 [ 871.957555] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 871.962755] RIP: 0033:0x4598e9 [ 871.965963] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 871.984882] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 871.992610] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 871.999894] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 872.007174] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 872.014457] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 12:11:52 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0) [ 872.021745] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 872.057645] rdma_op 00000000bb75e48d conn xmit_rdma (null) [ 872.092462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=23574 comm=syz-executor.5 [ 872.105160] xt_cluster: node mask cannot exceed total number of nodes 12:11:52 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x3c6, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:11:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x400000000000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 872.229792] Bluetooth: hci1: Frame reassembly failed (-84) [ 872.236471] Bluetooth: hci0: Frame reassembly failed (-84) [ 872.300478] rdma_op 00000000fc64b7ae conn xmit_rdma (null) [ 872.338133] xt_cluster: node mask cannot exceed total number of nodes [ 872.366943] xt_cluster: node mask cannot exceed total number of nodes 12:11:52 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x20000010, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 872.535979] rdma_op 000000007094328e conn xmit_rdma (null) [ 874.239487] Bluetooth: hci0: command 0x1003 tx timeout [ 874.244904] Bluetooth: hci0: sending frame failed (-49) [ 874.250573] Bluetooth: hci1: command 0x1003 tx timeout [ 874.261768] Bluetooth: hci1: sending frame failed (-49) [ 875.288993] net_ratelimit: 22 callbacks suppressed [ 875.288999] protocol 88fb is buggy, dev hsr_slave_0 [ 875.299059] protocol 88fb is buggy, dev hsr_slave_1 [ 875.304178] protocol 88fb is buggy, dev hsr_slave_0 [ 875.309261] protocol 88fb is buggy, dev hsr_slave_1 [ 876.318899] protocol 88fb is buggy, dev hsr_slave_0 [ 876.319046] protocol 88fb is buggy, dev hsr_slave_0 [ 876.324000] protocol 88fb is buggy, dev hsr_slave_1 [ 876.329048] protocol 88fb is buggy, dev hsr_slave_1 [ 876.339158] protocol 88fb is buggy, dev hsr_slave_0 [ 876.344198] protocol 88fb is buggy, dev hsr_slave_1 [ 876.349339] Bluetooth: hci1: command 0x1001 tx timeout [ 876.354644] Bluetooth: hci0: command 0x1001 tx timeout [ 876.354692] Bluetooth: hci1: sending frame failed (-49) [ 876.360017] Bluetooth: hci0: sending frame failed (-49) [ 878.399049] Bluetooth: hci1: command 0x1009 tx timeout [ 878.399367] Bluetooth: hci0: command 0x1009 tx timeout [ 880.478901] net_ratelimit: 18 callbacks suppressed [ 880.478910] protocol 88fb is buggy, dev hsr_slave_0 [ 880.479113] protocol 88fb is buggy, dev hsr_slave_0 [ 880.483916] protocol 88fb is buggy, dev hsr_slave_1 [ 880.488976] protocol 88fb is buggy, dev hsr_slave_1 [ 880.504154] protocol 88fb is buggy, dev hsr_slave_0 [ 880.509241] protocol 88fb is buggy, dev hsr_slave_1 [ 881.038928] protocol 88fb is buggy, dev hsr_slave_0 [ 881.044080] protocol 88fb is buggy, dev hsr_slave_1 [ 881.519168] protocol 88fb is buggy, dev hsr_slave_0 [ 881.524314] protocol 88fb is buggy, dev hsr_slave_1 12:12:02 executing program 0 (fault-call:2 fault-nth:65): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:12:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x500000000000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:12:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) r3 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r3, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:12:02 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0xf4720844, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:12:02 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0) 12:12:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x4b47, &(0x7f0000000100)) 12:12:02 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r2, 0x0, 0x0) [ 882.545772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=23898 comm=syz-executor.5 [ 882.561806] xt_cluster: node mask cannot exceed total number of nodes 12:12:02 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:12:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x600000000000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 882.607449] Bluetooth: hci0: Frame reassembly failed (-84) [ 882.628382] FAULT_INJECTION: forcing a failure. [ 882.628382] name failslab, interval 1, probability 0, space 0, times 0 [ 882.686434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=24012 comm=syz-executor.5 [ 882.695535] CPU: 0 PID: 23968 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 882.705732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 882.715103] Call Trace: [ 882.717728] dump_stack+0x172/0x1f0 [ 882.721382] should_fail.cold+0xa/0x1b [ 882.725286] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 882.730406] ? lock_downgrade+0x810/0x810 [ 882.734585] __should_failslab+0x121/0x190 [ 882.735692] xt_cluster: node mask cannot exceed total number of nodes [ 882.738831] should_failslab+0x9/0x14 [ 882.738850] kmem_cache_alloc_trace+0x2cc/0x760 [ 882.738863] ? kasan_check_write+0x14/0x20 [ 882.738880] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 882.738901] kobject_uevent_env+0x387/0x101d [ 882.738926] kobject_uevent+0x20/0x26 [ 882.738946] device_add+0xb3a/0x1760 [ 882.738969] ? get_device_parent.isra.0+0x570/0x570 [ 882.738991] rfkill_register+0x1bf/0xb50 [ 882.739010] hci_register_dev+0x385/0x880 [ 882.788219] hci_uart_tty_ioctl+0x761/0xaf0 [ 882.792563] tty_ioctl+0x8b5/0x1510 [ 882.796211] ? hci_uart_init_work+0x140/0x140 [ 882.800732] ? tty_vhangup+0x30/0x30 [ 882.804459] ? mark_held_locks+0x100/0x100 [ 882.808723] ? __fget+0x340/0x540 [ 882.808749] ? __might_sleep+0x95/0x190 [ 882.816167] ? tty_vhangup+0x30/0x30 [ 882.819902] do_vfs_ioctl+0xd5f/0x1380 [ 882.823800] ? selinux_file_ioctl+0x46f/0x5e0 [ 882.823818] ? selinux_file_ioctl+0x125/0x5e0 [ 882.832803] ? ioctl_preallocate+0x210/0x210 [ 882.837234] ? selinux_file_mprotect+0x620/0x620 [ 882.842023] ? iterate_fd+0x360/0x360 [ 882.845843] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 882.851391] ? fput+0x128/0x1a0 [ 882.854690] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 882.860237] ? security_file_ioctl+0x8d/0xc0 [ 882.864660] ksys_ioctl+0xab/0xd0 [ 882.868132] __x64_sys_ioctl+0x73/0xb0 [ 882.872032] do_syscall_64+0xfd/0x620 [ 882.875846] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 882.881042] RIP: 0033:0x4598e9 [ 882.884242] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 882.903152] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 882.910872] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 882.918147] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 882.925426] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 12:12:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x700000000000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:12:02 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 882.932705] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 882.939984] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 882.959839] Bluetooth: hci1: Frame reassembly failed (-84) [ 883.000043] xt_cluster: node mask cannot exceed total number of nodes [ 883.007174] rdma_op 0000000056d56b18 conn xmit_rdma (null) 12:12:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 883.157917] xt_cluster: node mask cannot exceed total number of nodes [ 884.639161] Bluetooth: hci0: command 0x1003 tx timeout [ 884.646191] Bluetooth: hci0: sending frame failed (-49) [ 885.038890] Bluetooth: hci1: command 0x1003 tx timeout [ 885.044468] Bluetooth: hci1: sending frame failed (-49) [ 885.679117] net_ratelimit: 22 callbacks suppressed [ 885.679127] protocol 88fb is buggy, dev hsr_slave_0 [ 885.689204] protocol 88fb is buggy, dev hsr_slave_1 [ 885.694327] protocol 88fb is buggy, dev hsr_slave_0 [ 885.699438] protocol 88fb is buggy, dev hsr_slave_1 [ 886.718920] protocol 88fb is buggy, dev hsr_slave_0 [ 886.719082] protocol 88fb is buggy, dev hsr_slave_0 [ 886.724035] protocol 88fb is buggy, dev hsr_slave_1 [ 886.729077] protocol 88fb is buggy, dev hsr_slave_1 [ 886.734173] Bluetooth: hci0: command 0x1001 tx timeout [ 886.739203] protocol 88fb is buggy, dev hsr_slave_0 [ 886.744441] Bluetooth: hci0: sending frame failed (-49) [ 886.749461] protocol 88fb is buggy, dev hsr_slave_1 [ 887.118863] Bluetooth: hci1: command 0x1001 tx timeout [ 887.124284] Bluetooth: hci1: sending frame failed (-49) [ 888.799028] Bluetooth: hci0: command 0x1009 tx timeout [ 889.198894] Bluetooth: hci1: command 0x1009 tx timeout [ 890.878886] net_ratelimit: 18 callbacks suppressed [ 890.878895] protocol 88fb is buggy, dev hsr_slave_0 [ 890.879035] protocol 88fb is buggy, dev hsr_slave_0 [ 890.883902] protocol 88fb is buggy, dev hsr_slave_1 [ 890.888964] protocol 88fb is buggy, dev hsr_slave_1 [ 890.904059] protocol 88fb is buggy, dev hsr_slave_0 [ 890.909150] protocol 88fb is buggy, dev hsr_slave_1 [ 891.438942] protocol 88fb is buggy, dev hsr_slave_0 [ 891.444067] protocol 88fb is buggy, dev hsr_slave_1 [ 891.918960] protocol 88fb is buggy, dev hsr_slave_0 [ 891.924251] protocol 88fb is buggy, dev hsr_slave_1 12:12:13 executing program 0 (fault-call:2 fault-nth:66): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:12:13 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:12:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x1100000000000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:12:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)=0xffb7) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000000)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:12:13 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 12:12:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x4b49, &(0x7f0000000100)) [ 893.414257] Bluetooth: hci0: Frame reassembly failed (-84) [ 893.419380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=24239 comm=syz-executor.5 [ 893.422179] rdma_op 000000006e436594 conn xmit_rdma (null) [ 893.450319] xt_cluster: node mask cannot exceed total number of nodes [ 893.459754] FAULT_INJECTION: forcing a failure. [ 893.459754] name failslab, interval 1, probability 0, space 0, times 0 [ 893.480505] CPU: 0 PID: 24245 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 893.487481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 893.496850] Call Trace: [ 893.499476] dump_stack+0x172/0x1f0 [ 893.503117] should_fail.cold+0xa/0x1b [ 893.507017] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 893.512133] ? lock_downgrade+0x810/0x810 [ 893.516305] __should_failslab+0x121/0x190 [ 893.520554] should_failslab+0x9/0x14 [ 893.524364] kmem_cache_alloc_trace+0x2cc/0x760 [ 893.529038] ? kasan_check_write+0x14/0x20 [ 893.533280] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 893.538141] kobject_uevent_env+0x387/0x101d [ 893.542580] kobject_uevent+0x20/0x26 [ 893.546393] device_add+0xb3a/0x1760 [ 893.550127] ? get_device_parent.isra.0+0x570/0x570 [ 893.555164] rfkill_register+0x1bf/0xb50 [ 893.559234] hci_register_dev+0x385/0x880 [ 893.563397] hci_uart_tty_ioctl+0x761/0xaf0 [ 893.567727] tty_ioctl+0x8b5/0x1510 [ 893.571360] ? hci_uart_init_work+0x140/0x140 [ 893.575862] ? tty_vhangup+0x30/0x30 [ 893.579580] ? mark_held_locks+0x100/0x100 [ 893.583829] ? __fget+0x340/0x540 [ 893.587298] ? __might_sleep+0x95/0x190 [ 893.591279] ? tty_vhangup+0x30/0x30 [ 893.595005] do_vfs_ioctl+0xd5f/0x1380 [ 893.598900] ? selinux_file_ioctl+0x46f/0x5e0 [ 893.603396] ? selinux_file_ioctl+0x125/0x5e0 [ 893.607898] ? ioctl_preallocate+0x210/0x210 [ 893.612310] ? selinux_file_mprotect+0x620/0x620 [ 893.617084] ? iterate_fd+0x360/0x360 [ 893.620890] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 893.626438] ? fput+0x128/0x1a0 [ 893.629731] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 893.635271] ? security_file_ioctl+0x8d/0xc0 [ 893.639690] ksys_ioctl+0xab/0xd0 [ 893.643150] __x64_sys_ioctl+0x73/0xb0 [ 893.647047] do_syscall_64+0xfd/0x620 [ 893.650859] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 893.656053] RIP: 0033:0x4598e9 [ 893.659250] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 893.678156] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 893.685878] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 893.693155] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 893.700431] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 893.707707] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 12:12:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x2000000000000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 893.714980] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 12:12:13 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 893.769693] Bluetooth: hci1: Frame reassembly failed (-84) 12:12:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x3f00000000000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 893.825639] xt_cluster: node mask cannot exceed total number of nodes [ 893.858378] rdma_op 00000000b7d8c2aa conn xmit_rdma (null) 12:12:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x4000000000000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:12:13 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 893.938061] xt_cluster: node mask cannot exceed total number of nodes [ 894.027155] xt_cluster: node mask cannot exceed total number of nodes [ 894.031202] rdma_op 00000000de135208 conn xmit_rdma (null) 12:12:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x5c8f020000000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) [ 894.162124] xt_cluster: node mask cannot exceed total number of nodes [ 895.438892] Bluetooth: hci0: command 0x1003 tx timeout [ 895.445804] Bluetooth: hci0: sending frame failed (-49) [ 895.838912] Bluetooth: hci1: command 0x1003 tx timeout [ 895.844476] Bluetooth: hci1: sending frame failed (-49) [ 896.079086] net_ratelimit: 22 callbacks suppressed [ 896.079095] protocol 88fb is buggy, dev hsr_slave_0 [ 896.089188] protocol 88fb is buggy, dev hsr_slave_1 [ 896.094278] protocol 88fb is buggy, dev hsr_slave_0 [ 896.099438] protocol 88fb is buggy, dev hsr_slave_1 [ 897.118906] protocol 88fb is buggy, dev hsr_slave_0 [ 897.119071] protocol 88fb is buggy, dev hsr_slave_0 [ 897.124024] protocol 88fb is buggy, dev hsr_slave_1 [ 897.129087] protocol 88fb is buggy, dev hsr_slave_1 [ 897.139248] protocol 88fb is buggy, dev hsr_slave_0 [ 897.144323] protocol 88fb is buggy, dev hsr_slave_1 [ 897.518870] Bluetooth: hci0: command 0x1001 tx timeout [ 897.524286] Bluetooth: hci0: sending frame failed (-49) [ 897.918889] Bluetooth: hci1: command 0x1001 tx timeout [ 897.924307] Bluetooth: hci1: sending frame failed (-49) [ 899.598885] Bluetooth: hci0: command 0x1009 tx timeout [ 899.998897] Bluetooth: hci1: command 0x1009 tx timeout [ 901.278900] net_ratelimit: 18 callbacks suppressed [ 901.278909] protocol 88fb is buggy, dev hsr_slave_0 [ 901.279025] protocol 88fb is buggy, dev hsr_slave_0 [ 901.283926] protocol 88fb is buggy, dev hsr_slave_1 [ 901.288982] protocol 88fb is buggy, dev hsr_slave_1 [ 901.304081] protocol 88fb is buggy, dev hsr_slave_0 [ 901.309156] protocol 88fb is buggy, dev hsr_slave_1 [ 901.838939] protocol 88fb is buggy, dev hsr_slave_0 [ 901.844043] protocol 88fb is buggy, dev hsr_slave_1 [ 902.319076] protocol 88fb is buggy, dev hsr_slave_0 [ 902.324283] protocol 88fb is buggy, dev hsr_slave_1 12:12:24 executing program 0 (fault-call:2 fault-nth:67): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:12:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x6000000000000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:12:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:12:24 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:12:24 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 12:12:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5409, &(0x7f0000000100)) [ 904.297408] rdma_op 00000000c92799c7 conn xmit_rdma (null) [ 904.298755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=24582 comm=syz-executor.5 [ 904.346285] xt_cluster: node mask cannot exceed total number of nodes [ 904.372540] FAULT_INJECTION: forcing a failure. [ 904.372540] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 904.384392] CPU: 0 PID: 24589 Comm: syz-executor.0 Not tainted 4.19.71 #0 12:12:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x8800000000000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 904.391330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 904.400694] Call Trace: [ 904.403309] dump_stack+0x172/0x1f0 [ 904.406960] should_fail.cold+0xa/0x1b [ 904.410890] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 904.416007] ? debug_smp_processor_id+0x1c/0x20 [ 904.420689] ? perf_trace_lock+0xeb/0x510 [ 904.424847] ? mark_held_locks+0x100/0x100 [ 904.429103] __alloc_pages_nodemask+0x1ee/0x750 [ 904.433785] ? irq_work_claim+0x98/0xc0 [ 904.437779] ? __alloc_pages_slowpath+0x2870/0x2870 [ 904.442832] cache_grow_begin+0x91/0x8c0 12:12:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xfeffff0700000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 904.446907] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 904.447140] xt_cluster: node mask cannot exceed total number of nodes [ 904.452457] kmem_cache_alloc_trace+0x685/0x760 [ 904.452475] ? kasan_check_write+0x14/0x20 [ 904.452500] kobject_uevent_env+0x387/0x101d [ 904.452524] kobject_uevent+0x20/0x26 [ 904.452545] device_add+0xb3a/0x1760 [ 904.479950] ? get_device_parent.isra.0+0x570/0x570 [ 904.484982] rfkill_register+0x1bf/0xb50 [ 904.485003] hci_register_dev+0x385/0x880 [ 904.485027] hci_uart_tty_ioctl+0x761/0xaf0 [ 904.497530] tty_ioctl+0x8b5/0x1510 [ 904.501164] ? hci_uart_init_work+0x140/0x140 [ 904.501182] ? tty_vhangup+0x30/0x30 [ 904.501195] ? mark_held_locks+0x100/0x100 [ 904.501221] ? __fget+0x340/0x540 [ 904.501244] ? __might_sleep+0x95/0x190 [ 904.501260] ? tty_vhangup+0x30/0x30 [ 904.509463] do_vfs_ioctl+0xd5f/0x1380 [ 904.528675] ? selinux_file_ioctl+0x46f/0x5e0 [ 904.533186] ? selinux_file_ioctl+0x125/0x5e0 [ 904.537698] ? ioctl_preallocate+0x210/0x210 [ 904.542121] ? selinux_file_mprotect+0x620/0x620 [ 904.546894] ? iterate_fd+0x360/0x360 [ 904.550707] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 904.556267] ? fput+0x128/0x1a0 [ 904.559562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 904.565104] ? security_file_ioctl+0x8d/0xc0 [ 904.569525] ksys_ioctl+0xab/0xd0 [ 904.572990] __x64_sys_ioctl+0x73/0xb0 [ 904.576887] do_syscall_64+0xfd/0x620 [ 904.580710] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 904.585903] RIP: 0033:0x4598e9 [ 904.589103] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 904.610795] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 904.618516] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 904.625789] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 904.633064] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 904.640341] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 12:12:24 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 904.647613] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 904.681327] Bluetooth: hci1: Frame reassembly failed (-84) [ 904.681372] xt_cluster: node mask cannot exceed total number of nodes 12:12:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xffffff7f00000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) [ 904.708032] rdma_op 000000007734bfa8 conn xmit_rdma (null) 12:12:24 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 904.853010] xt_cluster: node mask cannot exceed total number of nodes 12:12:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xffffffff00000000, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) [ 904.893143] rdma_op 00000000d01618be conn xmit_rdma (null) [ 904.960355] xt_cluster: node mask cannot exceed total number of nodes [ 906.398866] Bluetooth: hci0: command 0x1003 tx timeout [ 906.404279] Bluetooth: hci0: sending frame failed (-49) [ 906.718918] Bluetooth: hci1: command 0x1003 tx timeout [ 906.719041] net_ratelimit: 21 callbacks suppressed [ 906.719050] protocol 88fb is buggy, dev hsr_slave_0 [ 906.724469] Bluetooth: hci1: sending frame failed (-49) [ 906.729275] protocol 88fb is buggy, dev hsr_slave_1 [ 906.744781] protocol 88fb is buggy, dev hsr_slave_0 [ 906.749879] protocol 88fb is buggy, dev hsr_slave_1 [ 907.518891] protocol 88fb is buggy, dev hsr_slave_0 [ 907.518896] protocol 88fb is buggy, dev hsr_slave_0 [ 907.518950] protocol 88fb is buggy, dev hsr_slave_1 [ 907.523995] protocol 88fb is buggy, dev hsr_slave_1 [ 907.529110] protocol 88fb is buggy, dev hsr_slave_0 [ 907.544107] protocol 88fb is buggy, dev hsr_slave_1 [ 908.478868] Bluetooth: hci0: command 0x1001 tx timeout [ 908.484284] Bluetooth: hci0: sending frame failed (-49) [ 908.798902] Bluetooth: hci1: command 0x1001 tx timeout [ 908.804309] Bluetooth: hci1: sending frame failed (-49) [ 910.558881] Bluetooth: hci0: command 0x1009 tx timeout [ 910.878880] Bluetooth: hci1: command 0x1009 tx timeout [ 912.238981] net_ratelimit: 22 callbacks suppressed [ 912.238991] protocol 88fb is buggy, dev hsr_slave_0 [ 912.249071] protocol 88fb is buggy, dev hsr_slave_1 [ 912.959073] protocol 88fb is buggy, dev hsr_slave_0 [ 912.964187] protocol 88fb is buggy, dev hsr_slave_1 [ 912.969333] protocol 88fb is buggy, dev hsr_slave_0 [ 912.974380] protocol 88fb is buggy, dev hsr_slave_1 [ 913.758904] protocol 88fb is buggy, dev hsr_slave_0 [ 913.758909] protocol 88fb is buggy, dev hsr_slave_0 [ 913.758968] protocol 88fb is buggy, dev hsr_slave_1 [ 913.764001] protocol 88fb is buggy, dev hsr_slave_1 12:12:35 executing program 0 (fault-call:2 fault-nth:68): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:12:35 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:12:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x2, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 12:12:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)=0xffb7) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000000)) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r3, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:12:35 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="804000001009590000c63c1cbd217c1be7e16c0000000000000000000cc54042bedfe651ec12c73995cb4abe416496057a943c2002a463efd7fe1fd1025528bbbe6d1116c8e74700"/81, 0x51}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 12:12:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x540b, &(0x7f0000000100)) [ 915.168604] rdma_op 0000000086bcbb36 conn xmit_rdma (null) [ 915.179874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pig=24924 comm=syz-executor.5 [ 915.195396] Bluetooth: hci0: Frame reassembly failed (-84) 12:12:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x3, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 915.247629] FAULT_INJECTION: forcing a failure. [ 915.247629] name failslab, interval 1, probability 0, space 0, times 0 [ 915.302481] CPU: 1 PID: 24949 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 915.309464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 915.318941] Call Trace: [ 915.321553] dump_stack+0x172/0x1f0 [ 915.325198] should_fail.cold+0xa/0x1b [ 915.329104] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 915.334220] ? lock_downgrade+0x810/0x810 [ 915.338389] __should_failslab+0x121/0x190 [ 915.342637] should_failslab+0x9/0x14 [ 915.346444] __kmalloc+0x2e2/0x750 [ 915.349997] ? rcu_read_lock_sched_held+0x110/0x130 [ 915.355021] ? kobject_get_path+0xc4/0x1b0 [ 915.359286] kobject_get_path+0xc4/0x1b0 [ 915.363358] kobject_uevent_env+0x3ab/0x101d [ 915.367787] kobject_uevent+0x20/0x26 [ 915.371598] device_add+0xb3a/0x1760 [ 915.375327] ? get_device_parent.isra.0+0x570/0x570 [ 915.380360] rfkill_register+0x1bf/0xb50 [ 915.384432] hci_register_dev+0x385/0x880 [ 915.388599] hci_uart_tty_ioctl+0x761/0xaf0 [ 915.392932] tty_ioctl+0x8b5/0x1510 [ 915.396568] ? hci_uart_init_work+0x140/0x140 [ 915.401069] ? tty_vhangup+0x30/0x30 [ 915.404791] ? mark_held_locks+0x100/0x100 [ 915.409041] ? __fget+0x340/0x540 [ 915.412506] ? __might_sleep+0x95/0x190 [ 915.416489] ? tty_vhangup+0x30/0x30 [ 915.420342] do_vfs_ioctl+0xd5f/0x1380 [ 915.424243] ? selinux_file_ioctl+0x46f/0x5e0 [ 915.428762] ? selinux_file_ioctl+0x125/0x5e0 [ 915.433273] ? ioctl_preallocate+0x210/0x210 [ 915.437697] ? selinux_file_mprotect+0x620/0x620 [ 915.442477] ? iterate_fd+0x360/0x360 [ 915.446289] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 915.451837] ? fput+0x128/0x1a0 [ 915.455133] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 915.460679] ? security_file_ioctl+0x8d/0xc0 [ 915.465107] ksys_ioctl+0xab/0xd0 [ 915.468574] __x64_sys_ioctl+0x73/0xb0 [ 915.472473] do_syscall_64+0xfd/0x620 [ 915.476288] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 915.481591] RIP: 0033:0x4598e9 [ 915.484790] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:12:35 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:12:35 executing program 5: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) pipe(&(0x7f00000000c0)) pselect6(0xb8, &(0x7f0000000100), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 915.503700] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 915.511433] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 915.518707] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 915.525981] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 915.533254] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 915.540530] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 12:12:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x4, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 915.607938] Bluetooth: hci1: Frame reassembly failed (-84) [ 915.620735] rdma_op 00000000341e0596 conn xmit_rdma (null) 12:12:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x5, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:12:35 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 915.778622] rdma_op 000000004c3e98c4 conn xmit_rdma (null) [ 917.198856] Bluetooth: hci0: command 0x1003 tx timeout [ 917.204299] Bluetooth: hci0: sending frame failed (-49) [ 917.678987] Bluetooth: hci1: command 0x1003 tx timeout [ 917.684515] Bluetooth: hci1: sending frame failed (-49) [ 917.918895] net_ratelimit: 19 callbacks suppressed [ 917.918903] protocol 88fb is buggy, dev hsr_slave_0 [ 917.918938] protocol 88fb is buggy, dev hsr_slave_1 [ 917.923951] protocol 88fb is buggy, dev hsr_slave_1 [ 917.929015] protocol 88fb is buggy, dev hsr_slave_0 [ 917.944043] protocol 88fb is buggy, dev hsr_slave_1 [ 918.478915] protocol 88fb is buggy, dev hsr_slave_0 [ 918.484055] protocol 88fb is buggy, dev hsr_slave_1 [ 919.199169] protocol 88fb is buggy, dev hsr_slave_0 [ 919.204309] protocol 88fb is buggy, dev hsr_slave_1 [ 919.209433] protocol 88fb is buggy, dev hsr_slave_0 [ 919.278870] Bluetooth: hci0: command 0x1001 tx timeout [ 919.284285] Bluetooth: hci0: sending frame failed (-49) [ 919.758864] Bluetooth: hci1: command 0x1001 tx timeout [ 919.764284] Bluetooth: hci1: sending frame failed (-49) [ 921.358941] Bluetooth: hci0: command 0x1009 tx timeout [ 921.838892] Bluetooth: hci1: command 0x1009 tx timeout [ 923.359180] net_ratelimit: 19 callbacks suppressed [ 923.364192] protocol 88fb is buggy, dev hsr_slave_0 [ 923.369261] protocol 88fb is buggy, dev hsr_slave_1 [ 923.374384] protocol 88fb is buggy, dev hsr_slave_0 [ 923.379446] protocol 88fb is buggy, dev hsr_slave_1 [ 924.158900] protocol 88fb is buggy, dev hsr_slave_0 [ 924.158937] protocol 88fb is buggy, dev hsr_slave_1 [ 924.163995] protocol 88fb is buggy, dev hsr_slave_1 [ 924.169102] protocol 88fb is buggy, dev hsr_slave_0 [ 924.179125] protocol 88fb is buggy, dev hsr_slave_1 [ 924.718894] protocol 88fb is buggy, dev hsr_slave_0 12:12:46 executing program 0 (fault-call:2 fault-nth:69): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:12:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x6, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:12:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00001da000/0x18000)=nil, 0x0, 0x2f9, 0x0, 0x0, 0xfffffffffffffd3e) 12:12:46 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:12:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:12:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x540c, &(0x7f0000000100)) [ 926.071994] rdma_op 00000000645c4dc0 conn xmit_rdma (null) 12:12:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x7, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 926.115025] FAULT_INJECTION: forcing a failure. [ 926.115025] name failslab, interval 1, probability 0, space 0, times 0 [ 926.142319] CPU: 0 PID: 25270 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 926.149303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 926.158673] Call Trace: [ 926.158703] dump_stack+0x172/0x1f0 [ 926.158726] should_fail.cold+0xa/0x1b [ 926.158745] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 926.173921] ? check_preemption_disabled+0x48/0x290 [ 926.178961] __should_failslab+0x121/0x190 [ 926.183210] should_failslab+0x9/0x14 [ 926.187024] kmem_cache_alloc_node+0x56/0x710 [ 926.187044] ? hci_register_dev+0x50a/0x880 [ 926.187066] __alloc_skb+0xd5/0x5f0 [ 926.199481] ? skb_scrub_packet+0x490/0x490 [ 926.203809] ? lock_downgrade+0x810/0x810 [ 926.208063] hci_sock_dev_event+0xf3/0x580 [ 926.212318] hci_register_dev+0x568/0x880 [ 926.216486] hci_uart_tty_ioctl+0x761/0xaf0 [ 926.220913] tty_ioctl+0x8b5/0x1510 [ 926.224551] ? hci_uart_init_work+0x140/0x140 [ 926.229056] ? tty_vhangup+0x30/0x30 [ 926.232772] ? trace_hardirqs_on_caller+0x6a/0x220 [ 926.237707] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 926.242460] ? retint_kernel+0x2d/0x2d [ 926.246343] ? tty_vhangup+0x30/0x30 [ 926.250046] do_vfs_ioctl+0xd5f/0x1380 [ 926.253924] ? selinux_file_ioctl+0x125/0x5e0 [ 926.258410] ? ioctl_preallocate+0x210/0x210 [ 926.262805] ? selinux_file_mprotect+0x620/0x620 [ 926.267555] ? iterate_fd+0x360/0x360 [ 926.271482] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 926.277116] ? fput+0x128/0x1a0 [ 926.280388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 926.285915] ? security_file_ioctl+0x8d/0xc0 [ 926.290316] ksys_ioctl+0xab/0xd0 [ 926.293761] __x64_sys_ioctl+0x73/0xb0 [ 926.297641] do_syscall_64+0xfd/0x620 [ 926.301435] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 926.306611] RIP: 0033:0x4598e9 [ 926.309794] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 926.328681] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 926.336382] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 926.343646] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 926.350904] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 926.358159] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 926.365416] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 12:12:46 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:12:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x8, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 926.491846] Bluetooth: hci1: Frame reassembly failed (-84) [ 926.533278] rdma_op 0000000093db7164 conn xmit_rdma (null) 12:12:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0xa, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:12:46 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:12:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0xb, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 926.728201] rdma_op 000000007d817d0d conn xmit_rdma (null) [ 928.168953] Bluetooth: hci0: command 0x1003 tx timeout [ 928.175915] Bluetooth: hci0: sending frame failed (-49) [ 928.408913] net_ratelimit: 19 callbacks suppressed [ 928.408923] protocol 88fb is buggy, dev hsr_slave_0 [ 928.419022] protocol 88fb is buggy, dev hsr_slave_1 [ 928.424107] protocol 88fb is buggy, dev hsr_slave_0 [ 928.429215] protocol 88fb is buggy, dev hsr_slave_1 [ 928.559143] Bluetooth: hci1: command 0x1003 tx timeout [ 928.564637] Bluetooth: hci1: sending frame failed (-49) [ 928.878882] protocol 88fb is buggy, dev hsr_slave_0 [ 928.884006] protocol 88fb is buggy, dev hsr_slave_1 [ 929.598969] protocol 88fb is buggy, dev hsr_slave_0 [ 929.604052] protocol 88fb is buggy, dev hsr_slave_1 [ 929.609200] protocol 88fb is buggy, dev hsr_slave_0 [ 929.614263] protocol 88fb is buggy, dev hsr_slave_1 [ 930.238978] Bluetooth: hci0: command 0x1001 tx timeout [ 930.244381] Bluetooth: hci0: sending frame failed (-49) [ 930.639110] Bluetooth: hci1: command 0x1001 tx timeout [ 930.644519] Bluetooth: hci1: sending frame failed (-49) [ 932.318984] Bluetooth: hci0: command 0x1009 tx timeout [ 932.719146] Bluetooth: hci1: command 0x1009 tx timeout [ 933.759146] net_ratelimit: 20 callbacks suppressed [ 933.759155] protocol 88fb is buggy, dev hsr_slave_0 [ 933.769233] protocol 88fb is buggy, dev hsr_slave_1 [ 933.774352] protocol 88fb is buggy, dev hsr_slave_0 [ 933.779436] protocol 88fb is buggy, dev hsr_slave_1 [ 934.558899] protocol 88fb is buggy, dev hsr_slave_0 [ 934.563983] protocol 88fb is buggy, dev hsr_slave_1 [ 934.638924] protocol 88fb is buggy, dev hsr_slave_0 [ 934.644062] protocol 88fb is buggy, dev hsr_slave_1 [ 934.649185] protocol 88fb is buggy, dev hsr_slave_0 [ 934.654242] protocol 88fb is buggy, dev hsr_slave_1 12:12:56 executing program 0 (fault-call:2 fault-nth:70): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:12:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='fuse\x00', 0x0, &(0x7f0000000840)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:12:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0xc, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 12:12:56 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:12:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200000, 0x0) epoll_wait(r3, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1555555555555664, 0xffffffffffffffff) 12:12:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x540d, &(0x7f0000000100)) 12:12:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0xd, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:12:57 executing program 5: r0 = timerfd_create(0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x6c}, 0x0) readv(r0, &(0x7f00000001c0), 0x1000000000000013) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0xa031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) [ 936.952683] rdma_op 000000005df1aed8 conn xmit_rdma (null) [ 936.963615] Bluetooth: hci0: sending frame failed (-49) [ 936.991032] FAULT_INJECTION: forcing a failure. [ 936.991032] name failslab, interval 1, probability 0, space 0, times 0 [ 937.033539] CPU: 0 PID: 25606 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 937.040524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 937.049885] Call Trace: [ 937.052496] dump_stack+0x172/0x1f0 [ 937.056151] should_fail.cold+0xa/0x1b [ 937.060061] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 937.065178] ? check_preemption_disabled+0x48/0x290 [ 937.070226] __should_failslab+0x121/0x190 [ 937.074487] should_failslab+0x9/0x14 [ 937.078304] kmem_cache_alloc_node+0x56/0x710 [ 937.082815] ? hci_register_dev+0x50a/0x880 [ 937.087150] __alloc_skb+0xd5/0x5f0 [ 937.087172] ? skb_scrub_packet+0x490/0x490 [ 937.087207] ? lock_downgrade+0x810/0x810 [ 937.099270] hci_sock_dev_event+0xf3/0x580 [ 937.099291] hci_register_dev+0x568/0x880 [ 937.099315] hci_uart_tty_ioctl+0x761/0xaf0 [ 937.099334] tty_ioctl+0x8b5/0x1510 [ 937.099351] ? hci_uart_init_work+0x140/0x140 [ 937.120121] ? tty_vhangup+0x30/0x30 [ 937.123834] ? mark_held_locks+0x100/0x100 [ 937.128085] ? __fget+0x340/0x540 [ 937.131552] ? __might_sleep+0x95/0x190 [ 937.135531] ? tty_vhangup+0x30/0x30 [ 937.139259] do_vfs_ioctl+0xd5f/0x1380 [ 937.143149] ? selinux_file_ioctl+0x46f/0x5e0 [ 937.147646] ? selinux_file_ioctl+0x125/0x5e0 [ 937.152162] ? ioctl_preallocate+0x210/0x210 [ 937.156582] ? selinux_file_mprotect+0x620/0x620 [ 937.161363] ? iterate_fd+0x360/0x360 [ 937.165172] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 937.170714] ? fput+0x128/0x1a0 [ 937.174005] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 937.179553] ? security_file_ioctl+0x8d/0xc0 12:12:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0xf, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 12:12:57 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 937.183975] ksys_ioctl+0xab/0xd0 [ 937.187436] __x64_sys_ioctl+0x73/0xb0 [ 937.191354] do_syscall_64+0xfd/0x620 [ 937.195165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 937.195179] RIP: 0033:0x4598e9 [ 937.195192] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 937.195203] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 [ 937.222444] ORIG_RAX: 0000000000000010 [ 937.222455] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 937.222464] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 937.222472] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 937.222481] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 937.222488] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 937.233117] Bluetooth: hci1: Frame reassembly failed (-84) [ 937.258638] rdma_op 00000000a9e52788 conn xmit_rdma (null) 12:12:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x10, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:12:57 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 937.435261] rdma_op 00000000fc121d9e conn xmit_rdma (null) [ 938.798911] net_ratelimit: 20 callbacks suppressed [ 938.798921] protocol 88fb is buggy, dev hsr_slave_0 [ 938.809030] protocol 88fb is buggy, dev hsr_slave_1 [ 938.814166] protocol 88fb is buggy, dev hsr_slave_0 [ 938.819285] protocol 88fb is buggy, dev hsr_slave_1 [ 939.038933] Bluetooth: hci0: command 0x1003 tx timeout [ 939.044430] Bluetooth: hci0: sending frame failed (-49) [ 939.278893] protocol 88fb is buggy, dev hsr_slave_0 [ 939.278941] Bluetooth: hci1: command 0x1003 tx timeout [ 939.283985] protocol 88fb is buggy, dev hsr_slave_1 [ 939.294729] Bluetooth: hci1: sending frame failed (-49) [ 939.999208] protocol 88fb is buggy, dev hsr_slave_0 [ 940.004346] protocol 88fb is buggy, dev hsr_slave_1 [ 940.009483] protocol 88fb is buggy, dev hsr_slave_0 [ 940.014550] protocol 88fb is buggy, dev hsr_slave_1 [ 941.118993] Bluetooth: hci0: command 0x1001 tx timeout [ 941.124402] Bluetooth: hci0: sending frame failed (-49) [ 941.359173] Bluetooth: hci1: command 0x1001 tx timeout [ 941.364558] Bluetooth: hci1: sending frame failed (-49) [ 943.198910] Bluetooth: hci0: command 0x1009 tx timeout [ 943.438968] Bluetooth: hci1: command 0x1009 tx timeout [ 944.159159] net_ratelimit: 20 callbacks suppressed [ 944.164163] protocol 88fb is buggy, dev hsr_slave_0 [ 944.169255] protocol 88fb is buggy, dev hsr_slave_1 [ 944.174374] protocol 88fb is buggy, dev hsr_slave_0 [ 944.179442] protocol 88fb is buggy, dev hsr_slave_1 [ 944.958900] protocol 88fb is buggy, dev hsr_slave_0 [ 944.964180] protocol 88fb is buggy, dev hsr_slave_1 [ 945.038938] protocol 88fb is buggy, dev hsr_slave_0 [ 945.044181] protocol 88fb is buggy, dev hsr_slave_1 [ 945.049310] protocol 88fb is buggy, dev hsr_slave_0 [ 945.054380] protocol 88fb is buggy, dev hsr_slave_1 12:13:07 executing program 0 (fault-call:2 fault-nth:71): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:13:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x11, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:13:07 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:13:07 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmmsg$inet6(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 12:13:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x11, 0x3, 0x8) connect$x25(r2, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r3, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:13:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5413, &(0x7f0000000100)) 12:13:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x12, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 947.825585] rdma_op 00000000eeafd4bd conn xmit_rdma (null) [ 947.864041] FAULT_INJECTION: forcing a failure. [ 947.864041] name failslab, interval 1, probability 0, space 0, times 0 12:13:07 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x3c) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x2002, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0xfffffffffffffd79) socket(0x0, 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000000)={'nr0\x00', 0x31}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000340)=ANY=[@ANYBLOB="e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/113]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x362) getsockopt(r0, 0x114, 0x2713, &(0x7f0000000300)=""/13, &(0x7f0000000000)=0xd) 12:13:07 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 947.894589] CPU: 1 PID: 25947 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 947.901567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 947.910934] Call Trace: [ 947.913550] dump_stack+0x172/0x1f0 [ 947.917210] should_fail.cold+0xa/0x1b [ 947.921131] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 947.926250] ? lock_downgrade+0x810/0x810 [ 947.930421] __should_failslab+0x121/0x190 [ 947.934669] should_failslab+0x9/0x14 [ 947.938475] kmem_cache_alloc_node+0x26c/0x710 [ 947.943072] ? find_held_lock+0x35/0x130 [ 947.947154] __alloc_skb+0xd5/0x5f0 [ 947.950801] ? skb_scrub_packet+0x490/0x490 [ 947.955143] ? kasan_check_read+0x11/0x20 [ 947.959395] alloc_uevent_skb+0x83/0x1e2 [ 947.963473] kobject_uevent_env+0xaa3/0x101d [ 947.967903] kobject_uevent+0x20/0x26 [ 947.971320] rdma_op 000000004c1bbe9e conn xmit_rdma (null) [ 947.971716] device_add+0xb3a/0x1760 [ 947.981920] ? get_device_parent.isra.0+0x570/0x570 [ 947.986957] rfkill_register+0x1bf/0xb50 [ 947.991036] hci_register_dev+0x385/0x880 12:13:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x13, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 947.995208] hci_uart_tty_ioctl+0x761/0xaf0 [ 947.999544] tty_ioctl+0x8b5/0x1510 [ 948.003183] ? hci_uart_init_work+0x140/0x140 [ 948.007690] ? tty_vhangup+0x30/0x30 [ 948.011410] ? mark_held_locks+0x100/0x100 [ 948.015669] ? __fget+0x340/0x540 [ 948.019146] ? __might_sleep+0x95/0x190 [ 948.023125] ? tty_vhangup+0x30/0x30 [ 948.026864] do_vfs_ioctl+0xd5f/0x1380 [ 948.030765] ? selinux_file_ioctl+0x46f/0x5e0 [ 948.035275] ? selinux_file_ioctl+0x125/0x5e0 [ 948.039788] ? ioctl_preallocate+0x210/0x210 12:13:08 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 948.044210] ? selinux_file_mprotect+0x620/0x620 [ 948.048990] ? iterate_fd+0x360/0x360 [ 948.052813] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 948.058364] ? fput+0x128/0x1a0 [ 948.061661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 948.067204] ? security_file_ioctl+0x8d/0xc0 [ 948.071625] ksys_ioctl+0xab/0xd0 [ 948.075103] __x64_sys_ioctl+0x73/0xb0 [ 948.079011] do_syscall_64+0xfd/0x620 [ 948.082826] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 948.088021] RIP: 0033:0x4598e9 [ 948.091223] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 948.110137] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 948.117852] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 948.117862] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 948.117870] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 12:13:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x14, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 948.117880] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 [ 948.117889] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 948.134340] rdma_op 00000000be14ca03 conn xmit_rdma (null) [ 948.208674] Bluetooth: hci1: Frame reassembly failed (-84) [ 949.198971] net_ratelimit: 20 callbacks suppressed [ 949.198986] protocol 88fb is buggy, dev hsr_slave_0 [ 949.209096] protocol 88fb is buggy, dev hsr_slave_1 [ 949.214251] protocol 88fb is buggy, dev hsr_slave_0 [ 949.219348] protocol 88fb is buggy, dev hsr_slave_1 [ 949.688905] protocol 88fb is buggy, dev hsr_slave_0 [ 949.694003] protocol 88fb is buggy, dev hsr_slave_1 [ 949.918884] Bluetooth: hci0: command 0x1003 tx timeout [ 949.924312] Bluetooth: hci0: sending frame failed (-49) [ 950.238914] Bluetooth: hci1: command 0x1003 tx timeout [ 950.244487] Bluetooth: hci1: sending frame failed (-49) [ 950.399144] protocol 88fb is buggy, dev hsr_slave_0 [ 950.404301] protocol 88fb is buggy, dev hsr_slave_1 [ 950.409471] protocol 88fb is buggy, dev hsr_slave_0 [ 950.414547] protocol 88fb is buggy, dev hsr_slave_1 [ 951.998880] Bluetooth: hci0: command 0x1001 tx timeout [ 952.004290] Bluetooth: hci0: sending frame failed (-49) [ 952.318944] Bluetooth: hci1: command 0x1001 tx timeout [ 952.324342] Bluetooth: hci1: sending frame failed (-49) [ 954.078889] Bluetooth: hci0: command 0x1009 tx timeout [ 954.398936] Bluetooth: hci1: command 0x1009 tx timeout [ 954.559150] net_ratelimit: 20 callbacks suppressed [ 954.559160] protocol 88fb is buggy, dev hsr_slave_0 [ 954.569246] protocol 88fb is buggy, dev hsr_slave_1 [ 954.574367] protocol 88fb is buggy, dev hsr_slave_0 [ 954.579455] protocol 88fb is buggy, dev hsr_slave_1 [ 955.358915] protocol 88fb is buggy, dev hsr_slave_0 [ 955.363997] protocol 88fb is buggy, dev hsr_slave_1 [ 955.438971] protocol 88fb is buggy, dev hsr_slave_0 [ 955.444156] protocol 88fb is buggy, dev hsr_slave_1 [ 955.449291] protocol 88fb is buggy, dev hsr_slave_0 [ 955.454356] protocol 88fb is buggy, dev hsr_slave_1 12:13:18 executing program 0 (fault-call:2 fault-nth:72): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:13:18 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:13:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x6c, r2, 0xd0f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x1c}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @dev}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 12:13:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x15, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:13:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, {0xda, 0xffff, 0x100, 0x5fb9, 0x5, 0xc81}, 0x800, 0xbf}, 0xe) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) r4 = dup3(0xffffffffffffffff, r3, 0x40000) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000080)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:13:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5414, &(0x7f0000000100)) [ 958.678513] Started in network mode [ 958.694917] Own node identity fe1c00000000000000000000000000aa, cluster identity 4711 [ 958.706329] Bluetooth: hci0: Frame reassembly failed (-84) [ 958.714336] New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 958.721467] rdma_op 000000003d219474 conn xmit_rdma (null) [ 958.736793] FAULT_INJECTION: forcing a failure. [ 958.736793] name failslab, interval 1, probability 0, space 0, times 0 [ 958.752662] Enabled bearer , priority 10 [ 958.758587] CPU: 1 PID: 26285 Comm: syz-executor.0 Not tainted 4.19.71 #0 [ 958.765531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 958.774887] Call Trace: [ 958.777500] dump_stack+0x172/0x1f0 [ 958.781153] should_fail.cold+0xa/0x1b [ 958.785062] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 958.790182] ? check_preemption_disabled+0x48/0x290 [ 958.795228] __should_failslab+0x121/0x190 [ 958.799492] should_failslab+0x9/0x14 [ 958.803300] kmem_cache_alloc_node+0x56/0x710 [ 958.807809] ? hci_register_dev+0x50a/0x880 [ 958.812143] __alloc_skb+0xd5/0x5f0 [ 958.815781] ? skb_scrub_packet+0x490/0x490 [ 958.820110] ? lock_downgrade+0x810/0x810 [ 958.824274] hci_sock_dev_event+0xf3/0x580 [ 958.828518] hci_register_dev+0x568/0x880 [ 958.832683] hci_uart_tty_ioctl+0x761/0xaf0 [ 958.837018] tty_ioctl+0x8b5/0x1510 [ 958.840657] ? hci_uart_init_work+0x140/0x140 [ 958.845176] ? tty_vhangup+0x30/0x30 [ 958.848899] ? mark_held_locks+0x100/0x100 [ 958.853155] ? __fget+0x340/0x540 [ 958.856626] ? __might_sleep+0x95/0x190 [ 958.860607] ? tty_vhangup+0x30/0x30 [ 958.864335] do_vfs_ioctl+0xd5f/0x1380 [ 958.868235] ? selinux_file_ioctl+0x46f/0x5e0 [ 958.872740] ? selinux_file_ioctl+0x125/0x5e0 [ 958.877247] ? ioctl_preallocate+0x210/0x210 [ 958.881666] ? selinux_file_mprotect+0x620/0x620 [ 958.886437] ? iterate_fd+0x360/0x360 [ 958.890246] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 958.895794] ? fput+0x128/0x1a0 [ 958.899090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 958.904632] ? security_file_ioctl+0x8d/0xc0 [ 958.909053] ksys_ioctl+0xab/0xd0 [ 958.912518] __x64_sys_ioctl+0x73/0xb0 [ 958.916417] do_syscall_64+0xfd/0x620 [ 958.920232] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 958.925428] RIP: 0033:0x4598e9 [ 958.928631] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 958.947538] RSP: 002b:00007f9c239acc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 958.955263] RAX: ffffffffffffffda RBX: 00007f9c239acc90 RCX: 00000000004598e9 [ 958.962540] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 958.969812] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 958.977083] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c239ad6d4 12:13:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x16, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 958.984374] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 0000000000000004 [ 959.006329] Enabling of bearer rejected, already enabled [ 959.011904] Bluetooth: hci1: Frame reassembly failed (-84) 12:13:19 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:13:19 executing program 5: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x0, 0xff000000, [], 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) 12:13:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x17, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:13:19 executing program 5: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) unlinkat(r0, &(0x7f0000000300)='./file1\x00', 0x200) [ 959.126453] rdma_op 000000000b4ad9e2 conn xmit_rdma (null) 12:13:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x18, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 959.598884] net_ratelimit: 20 callbacks suppressed [ 959.598893] protocol 88fb is buggy, dev hsr_slave_0 [ 959.609117] protocol 88fb is buggy, dev hsr_slave_1 [ 959.614222] protocol 88fb is buggy, dev hsr_slave_0 [ 959.619321] protocol 88fb is buggy, dev hsr_slave_1 [ 959.828925] 32-bit node address hash set to aa001cfe [ 960.078926] protocol 88fb is buggy, dev hsr_slave_0 [ 960.084072] protocol 88fb is buggy, dev hsr_slave_1 [ 960.728890] Bluetooth: hci0: command 0x1003 tx timeout [ 960.734296] Bluetooth: hci0: sending frame failed (-49) [ 960.799039] protocol 88fb is buggy, dev hsr_slave_0 [ 960.804141] protocol 88fb is buggy, dev hsr_slave_1 [ 960.809270] protocol 88fb is buggy, dev hsr_slave_0 [ 960.814308] protocol 88fb is buggy, dev hsr_slave_1 [ 961.038918] Bluetooth: hci1: command 0x1003 tx timeout [ 961.044433] Bluetooth: hci1: sending frame failed (-49) [ 962.798914] Bluetooth: hci0: command 0x1001 tx timeout [ 962.804315] Bluetooth: hci0: sending frame failed (-49) [ 963.118866] Bluetooth: hci1: command 0x1001 tx timeout [ 963.124266] Bluetooth: hci1: sending frame failed (-49) [ 964.878906] Bluetooth: hci0: command 0x1009 tx timeout [ 964.959113] net_ratelimit: 20 callbacks suppressed [ 964.959121] protocol 88fb is buggy, dev hsr_slave_0 [ 964.969187] protocol 88fb is buggy, dev hsr_slave_1 [ 964.974307] protocol 88fb is buggy, dev hsr_slave_0 [ 964.979398] protocol 88fb is buggy, dev hsr_slave_1 [ 965.198889] Bluetooth: hci1: command 0x1009 tx timeout [ 965.758902] protocol 88fb is buggy, dev hsr_slave_0 [ 965.763997] protocol 88fb is buggy, dev hsr_slave_1 [ 965.838876] protocol 88fb is buggy, dev hsr_slave_0 [ 965.844009] protocol 88fb is buggy, dev hsr_slave_1 [ 965.849132] protocol 88fb is buggy, dev hsr_slave_0 [ 965.854175] protocol 88fb is buggy, dev hsr_slave_1 12:13:29 executing program 0 (fault-call:2 fault-nth:73): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:13:29 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:13:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x19, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:13:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="9de76119baf11cad65d9983b86d3fb37", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="2828d4447df85068c655822416265914", 0x10) 12:13:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)=0xffb7) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000)=0xffb7) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000000)=0xffb7) sendmsg$unix(r3, &(0x7f0000000500)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000080)="445110409a695adf017795d698951fe0abb4c13888192155f930a0425b6565066413cec3a3f6df88557e6f0f0a7a2f4fe3cf35eaad84cffcac979c44b9050d0bde57e6440d65d9d0928ddf1851ca7e2d7a5e9deb4c8e08999bee26aeab9455908bb200566feb685bcb1914239981ab2577aacbcf8cd98f2df0275575fbcf2ccccb3e2722e0c1c3fe96c81297df0a10168c7064213bbdb492481a097bb1a3ba165fddd14e0649292dfdd30db4d21b7ecd832bfa3a8fd823db91da32968ebece640a981a3e21b770d4f0a1310d4abc3b8fc02b5f2da9664e19bb71d127a1d7991ec306fec3088a2f23556281fe2dc35cf5c11142f6df24a0", 0xf7}, {&(0x7f00000001c0)="09a86135c7623e2d824476b2e46c71674e7e180c5a41b4df47935343e0b37ef06268761cc96c77d2ccbe7c712efbd6e886e8766e3127778bc74e59e2771a9674c543b1f1ea1615004e895f0d3ddfa1c0527d10046dcd66a73d09edc07875bbd486560a715d66ac034ec3500b5495a53c48f30241d5b9f66a2ec1c1ced8f803daaa5a476833e39c28c155905c00e73a7920186901167d75c065da2411fd04e9fc08e19b5afc3b0360f84892c003", 0xad}, {&(0x7f0000000280)="78566422e8c351eab19525045c314de669e88a7badfc6e4e91f1f3d0e184126800ae1f7e93910264eabbeb02b9d9bd93d780c4e3843bdadfb1d6ac0abda6d8ade8930ec41a2dbb9d11f6855dfd0c538a00649df7f8b73c1e539f2f70a1f3fa63599fe12f603e9986fdcb47472545f530d4904b387266f0a39f3279716d11fad976194086165fc6476c65d21eafcf3edff8aed70618706444e5797b1cdc9a1cd367c6c5968a64f76187384340ff149c2ebaea6f08fcb21f77", 0xb8}, {&(0x7f0000000340)="47a079ec51ab1feb2a51081a6d3cd7dd72604ec5467fa358674739cdc52dd1b7a1562e7673eab5d577b817b2d1126eda6058ad7ed6bdd91e770cf5d55b047240fee28f92c91459ab19877799a04c45d69a599ead1a6724eabab27475524121818e60274a6209036936a025a7391e1eca83fd", 0x72}, {&(0x7f00000003c0)="defb7d4c4b5ed02a87ca7dae004fa2d02ab68ad5fa10ac3e00ec93619d05c0e1289937c8db790a8deb1740af8afbdf613fd3801cc47ce33758e277534b32cd2cfae85eaf936bd7b4c41f82b81b15e7273e1e4d86c8339150d04998c78a2983cb0117f0daa4da65c4", 0x68}], 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18001000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r5], 0x18, 0x40000}, 0x4000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:13:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5415, &(0x7f0000000100)) 12:13:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="9de76119baf11cad65d9983b86d3fb37", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="2828d4447df85068c655822416265914", 0x10) [ 969.605871] rdma_op 00000000ebdee3ab conn xmit_rdma (null) [ 969.644229] Bluetooth: hci1: sending frame failed (-49) 12:13:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x21, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 12:13:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="9de76119baf11cad65d9983b86d3fb37", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="2828d4447df85068c655822416265914", 0x10) 12:13:29 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:13:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="9de76119baf11cad65d9983b86d3fb37", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="2828d4447df85068c655822416265914", 0x10) 12:13:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x22, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 969.800973] rdma_op 00000000aa69aa53 conn xmit_rdma (null) [ 969.998996] net_ratelimit: 20 callbacks suppressed [ 969.999006] protocol 88fb is buggy, dev hsr_slave_0 [ 970.009195] protocol 88fb is buggy, dev hsr_slave_1 [ 970.014326] protocol 88fb is buggy, dev hsr_slave_0 [ 970.019435] protocol 88fb is buggy, dev hsr_slave_1 [ 970.478887] protocol 88fb is buggy, dev hsr_slave_0 [ 970.484122] protocol 88fb is buggy, dev hsr_slave_1 [ 971.199307] protocol 88fb is buggy, dev hsr_slave_0 [ 971.204459] protocol 88fb is buggy, dev hsr_slave_1 [ 971.209609] protocol 88fb is buggy, dev hsr_slave_0 [ 971.214674] protocol 88fb is buggy, dev hsr_slave_1 [ 971.679152] Bluetooth: hci0: command 0x1003 tx timeout [ 971.684710] Bluetooth: hci0: sending frame failed (-49) [ 971.690293] Bluetooth: hci1: command 0x1003 tx timeout [ 971.695626] Bluetooth: hci1: sending frame failed (-49) [ 973.758859] Bluetooth: hci1: command 0x1001 tx timeout [ 973.764343] Bluetooth: hci1: sending frame failed (-49) [ 973.770079] Bluetooth: hci0: command 0x1001 tx timeout [ 973.775423] Bluetooth: hci0: sending frame failed (-49) [ 975.359033] net_ratelimit: 20 callbacks suppressed [ 975.359042] protocol 88fb is buggy, dev hsr_slave_0 [ 975.369293] protocol 88fb is buggy, dev hsr_slave_1 [ 975.374426] protocol 88fb is buggy, dev hsr_slave_0 [ 975.379535] protocol 88fb is buggy, dev hsr_slave_1 [ 975.838897] Bluetooth: hci0: command 0x1009 tx timeout [ 975.844294] Bluetooth: hci1: command 0x1009 tx timeout [ 976.158875] protocol 88fb is buggy, dev hsr_slave_0 [ 976.163959] protocol 88fb is buggy, dev hsr_slave_1 [ 976.238865] protocol 88fb is buggy, dev hsr_slave_0 [ 976.243951] protocol 88fb is buggy, dev hsr_slave_1 [ 976.249121] protocol 88fb is buggy, dev hsr_slave_0 [ 976.254210] protocol 88fb is buggy, dev hsr_slave_1 12:13:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 12:13:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="2828d4447df85068c655822416265914", 0x10) 12:13:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x23, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 12:13:39 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:13:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)=0xffb7) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000000)={0x100000000, 0x3, 0x8, 0x4, 0xf5e, 0x5}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000b82000)={0x10000004}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000)=0xffb7) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000140)=0x0) r6 = getuid() getresgid(&(0x7f00000001c0), &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) r9 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r9, 0x0, 0x0, 0x0) r10 = epoll_create(0x0) r11 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r11, 0x0, 0x0, 0x0) r12 = socket$caif_seqpacket(0x25, 0x5, 0x2) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0x4030582a, &(0x7f0000000000)=0xffb7) r14 = getpgrp(0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r15, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r16, 0x0, 0x0) r17 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r17, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r18, 0x0, 0x0) getgroups(0x4, &(0x7f0000000d00)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, r18]) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r22) ioprio_set$uid(0x3, r22, 0x0) r23 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r23, 0x0, 0x0, 0x0) r24 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r24, 0x4030582a, &(0x7f0000000000)=0xffb7) r25 = accept$unix(0xffffffffffffffff, &(0x7f0000000d40)=@abs, &(0x7f0000000dc0)=0x6e) r26 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000e00)='/selinux/policy\x00', 0x0, 0x0) r27 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r27, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r28) ioprio_set$uid(0x3, r28, 0x0) r29 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r29, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r30, 0x0, 0x0) r31 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r31) r32 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r32, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r33, 0x0, 0x0) r34 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r34, 0x4030582a, &(0x7f0000000000)=0xffb7) r35 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r36) ioprio_set$uid(0x3, r36, 0x0) stat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)) r37 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r37, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r38, 0x0, 0x0) r39 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r39, 0x4030582a, &(0x7f0000000000)=0xffb7) r40 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r40) stat(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0}) r42 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r42, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r43, 0x0, 0x0) r44 = bpf$MAP_CREATE(0x0, &(0x7f0000001b40)={0x18, 0x0, 0x2, 0x3, 0x0, r24, 0x9, [], 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x3c) r45 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r45, 0x0, 0x0, 0x0) r46 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r46, 0x0, 0x0, 0x0) r47 = syz_open_dev$video4linux(&(0x7f0000001b80)='/dev/v4l-subdev#\x00', 0x92f, 0x500400) r48 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r48, 0x4030582a, &(0x7f0000000000)=0xffb7) r49 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r49, 0x4030582a, &(0x7f0000000000)=0xffb7) r50 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r50, 0x0, 0x0, 0x0) r51 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r51, 0x4030582a, &(0x7f0000000000)=0xffb7) r52 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r52, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000001bc0)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000001cc0)=0x3fc) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000001d00)={0x0, 0x0, 0x0}, &(0x7f0000001d40)=0xc) r55 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001d80)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r56 = syz_open_dev$midi(&(0x7f0000001dc0)='/dev/midi#\x00', 0x4000000000, 0x200) r57 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r57, 0x0, 0x0, 0x0) getpeername(r29, &(0x7f0000001e00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001e80)=0x80) r59 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r59, 0x4030582a, &(0x7f0000000000)=0xffb7) r60 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r60, 0x0, 0x0, 0x0) r61 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r61, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000002000)=[{&(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f00000000c0)="b960fa4b56323f4e835f9e54b9a44fd2bf55758816628f3da9e852df14f4af228cc414f8191d9029cb9f26e9657b719eafe2c93ece8f", 0x36}], 0x1, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x20}, {&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000400)="3cdc6e522c0120e68430278f2916efb9325cb6237cc12cff9d95d31b41e651b8d3fe638892e79c8a1e005d46de1a30945eae70d145e0a18102d4dc0c06bc040ca36a3c40f81adc408f7fb66cb3b474915a1f39f52a0b33b0", 0x58}, {&(0x7f0000000480)="00cf8120244e7f0ac8fa6b771f548f0f58a55152ad678d761560f8e06b5b15d4e05a5eb3d28980ed3f0a5a92c2", 0x2d}], 0x2, 0x0, 0x0, 0x8000}, {&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000600)="ffd6b010670be4843b959ba9ce82b4e5ae825cdbdca3e41b1958782525f935b7b490a4a045cc09fed551828c3dc18afe04c6648c4d95ac9f3858d8b4a532fb8404b2f11ae0b11b9dced05662084e23524447c27ff93ba920d0724c8d5801b24fb50275545d6dc6be3eaf1e091946424d5813204dfafbef36ecfef17c5ddead7dec", 0x81}, {&(0x7f0000000580)="eff6f63f81c3508cd8539650496e01f3", 0x10}, {&(0x7f00000006c0)="61008f6acac586bb9928e5613357d716bd7b30851dd5429791026084c272a0cc82cca7429bba359ced5864b85a45c9c812c459b0878657056de80a0e65526a09c67a22c884eb3859db65e7c2f019e721f03ba6e6962c95c7910ed317181275605c8427b20c1419316ea31ab27409197aa836b67d5cc0179b5b3e6b8ffe63851f7f3495f4b0cdb7792d4ada68172a7163e72daab70913dd6c38e20ec162da1d50a62f62fe287b7594b50d490b6e286f8c8d328cb36c6488519108b21b5ed728b0bd29adc2da94b06f", 0xc8}, {&(0x7f00000007c0)="a088cd3914d973c5fac9cd978f43277532e68864536aa2681ddc63ccd112f243ae32675421814e9af30fd57e3ceeec488a3c39458f454dfa4cbda13e161356bda38793930292c783c3e170109c50bc2e15122e2e728049d1c0acb40cc1cce93f3df2159ea1ec6850d76a2be34b8ca68bc06f7ec18bf51161ef84a3c83d5626bc0972eee452a551982325caca538970c49633c15ec7c2723e7bc2a33351cb9eb13e53580b903d9c13a66979c7cea6fffd3aec693424ad59800aab5d8f99bc808deb99c75ef1979f882503097309cbdbb168df2d8b6a435289c08bea6e3b200b6c8faea1e477e36800a0fcc7", 0xeb}, {&(0x7f00000008c0)="722080711b8dbd54e5d5f5e49551095068", 0x11}, {&(0x7f0000000900)="69bbadeb52c557905c49961d6673c67c2cb1552e31ebea20c3024f44d3cc1577b3926228bc24f45b9deecad5d957d0fcc814f45ad9274e9842d00340a1dd626bed55e35d16a45d540bc5905a5b193d9cc23cb3d20414101ce2235f52523282737ff4ecb03068dbd9f2f65a19df0a8c37ed04d58eeb5acc3549d86138bb6b9cb06575", 0x82}, {&(0x7f00000009c0)="61eec8d83a1887c528af2984b6455235bc63e8ac85637b6fd2f8ee0bd81c43f3f75b50043bc4542c2274b0f3258d5ce4dfaf609f16b5260bb8587fb63146e8070907910262fd82c68ef33d04d0246cb9670d103c624e6fb39ea181c64e7ca5ea381fed20b1ff49f32284a1240240fb0a1b0db416f98f952b25948a8a9535f30a6231b5fc31ac48bbf8b72608893ae28047752548d676e1f8cf8bf1ee909983d9e9f5fdfd303a3152942eef950438928aba4d70d131a3d81f", 0xb8}, {&(0x7f0000000a80)="6b55a126e68d93b32093620cf3bd3b39949e120c0bd97ef1057aa9a845fba20ad6d7162798ffdeddb4726787c785190bd7d35f8f194e443fa6c4094c5d8e3df48c0f852328de6aa1b385c74d8045a8d5f6f4bb4e07041f9006ee4d6f4568af42bc86490dd6f89dd4f949d61fa985e4261c7d586615b3a40f5dc507ae936a14894e9512f6acbb4ada44eaa25bb1cc27d7404127574af68eaa5a40b9233ecf00e12156767505dc8dd7da8fecbf334ad263df8e11eee465fbc320727d9dfb3176ddadb540dd0fb085867ce49f8e936511febfae438e74150d8f4595ed2cd5a7927f84f920d96ba54a7f9851a2529260aeb87c58d3eb0c9974df", 0xf8}, {&(0x7f0000000b80)="459ee143d0d40ce7a1922bb71491c34316f99f55e08528a987fbdc7229042ae3cbc5b63fa5f5418965d26369db3a9c970f1c0c78cebc2c054712821fa1e003b63a53ddfccc9d3afc1bb40daae12d7099", 0x50}, {&(0x7f0000000c00)="8a060980695f4a7777ac71b7c6692ae3b1962ad952d2f264592b559649a8898205727f70594d22e61580f8599b", 0x2d}], 0xa, &(0x7f0000000e40)=[@rights={{0x30, 0x1, 0x1, [r9, 0xffffffffffffffff, r3, r10, 0xffffffffffffffff, r11, r3, r0]}}, @rights={{0x18, 0x1, 0x1, [r23, r13]}}, @cred={{0x1c, 0x1, 0x2, {r14, r6, r16}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r19}}}, @cred={{0x1c, 0x1, 0x2, {r5, r22, r8}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r23, r2, r3, r24, r25, r26, r3]}}, @cred={{0x1c, 0x1, 0x2, {r5, r28, r30}}}, @cred={{0x1c, 0x1, 0x2, {r31, r6, r33}}}], 0x118, 0x4004010}, {&(0x7f0000000f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001000)="70d35668346e86e1afc18bfa13c7ae0ca8384c4e", 0x14}, {&(0x7f0000001040)="4060b6ee7d3db379506949189b878ab9d28e6ace3c2757e419766c50f6a1e83664e960745bd3613e840ebe49b02c5ebda06ecd1fa1e46d550943f04d254e5dcbf9603336982a14585e62b9bb68ad34dfc9c15616907f2106dc00235b96a5187ab4f9720066600a5812c195695713544872700f30e72a2f7a38b866d8a24319bd66093867cb223bcc0cc3ba73218e298f34093972c1516395", 0x98}, {&(0x7f0000001100)="696afbeee3e6bf82226d147986b6b6cae4fbf15539c31e7be63b0455db5849ccda0057e46895c9d8dfebfcb48d455698a3e4bf687fb927677e9f1b5e17c3332d2182b4b889136367f05c98d6810ab364091d4731711981bde650f629ad300903310f12f18537e53600649f20913fa2d1f21cf6633c3564a632bfc5a4ce3e6ecab6cf02c5afa6ba9ac6a5883cebc965d5673311395dd1ebfb935e2a01a2a56800ea30781056fd4f84f1a7f4f17ac7b0e32875e46d65a1219f54fd", 0xba}, {&(0x7f00000011c0)="bd2b939202ff767f4f76656a534fea0fc9156f07d43f3a55c253cbd08b8dc1ebcddc69c722690ae11df388609233298e65361f77f27e92a30d5cdd3f9dc7c2534fae913f1c21508ea1ca99f804115c274844f97e5e8525a380982a07f9bb1b74b6e316a77d966c0b59a8ca52484b6aa28fdce587e5e1d1be868256b79738d4ef4cc89f2fe821c6b9d26a02be7e9d2a8bed2b16ddc30563b431426d0102d7efe8baa90f886dc0018923518cdd7e7cc10b36c53af2d77fb6ae11971c9616d8c24d1c789116a78ceaeef7e9953cef5699b00b7cd1740d", 0xd5}, {&(0x7f00000012c0)="0984f32a6c9157a267d3e86f5a29ba4dca2cdcbd1f0eee151379bf691f9efef206bfda", 0x23}, {&(0x7f0000001300)="a2fe23fffd32c7fe7daec6580f1c92b108323f07442e198db9490dba45a191ab340486356565a8bd759e3f23c727a3eccb46fa8b261af38027ab50ea122945ff8933d2568344c650498b0441927569b12021b50969f9ed5101194ff7e02978251738286ca08f247700da9df2999168", 0x6f}], 0x6}, {&(0x7f0000001400)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000001480)="04e1b3063cc0bd12b1fac20cddc410e232c0d5a89580d8b1e84973b465da167c5ea59f848e0a79c2fac5a79f38c8e1d457195502a03a49bce74c78ea760893ca6508a4b41b76d5100ca3165f6835584e6d5de3399e5428c594d88770754fc342126255ccdc05b78b9ad4ce88132cb448bc1e1e17aacf7b102436d83cbf3f1e2400e1a0f4f11a292b3ab3126c8bcfe2368046a109be1330df3c5f03a880ea2ace97fd695b9d9977e21a468a3bb72651a58f71affb75579204d724fad4dbba1d377a51e3b67ff92933b5ebaca39590044b87dd", 0xd2}, {&(0x7f0000001580)="6cf963d0508fb56134796235e14e977374ce5ecdc32d69c3241e29efe00aa01370d7c5b3fcd203ca6ae6a5052bd97a6da6065da3ac94a5fd86e99c26548f454659e20ea052c55c05e1d66c0a7b04cf26f306fd5569e29ebb5e9631f01488b62b0ba1e6ce546d72f180134b76e7f53a8a851b1b7a6ececfa10e4168bab2d044e304979bcadf0d191de7d282d95b89f91761598c79c61af4727727b2", 0x9b}], 0x10000000000000a0, &(0x7f0000001800)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r34, @ANYBLOB="180000000000000001000000975fb47148836e61d801000000", @ANYRES32=r60, @ANYRES32=r61, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=r38, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r39, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r40, @ANYRES32=r41, @ANYRES32=r43, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r44, @ANYRES32=r45, @ANYRES32=r46, @ANYRES32=r47, @ANYRES32=r13, @ANYRES32=r48, @ANYRES32=r49, @ANYRES32=r12, @ANYRES32=r50, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r51, @ANYRES32=r52, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r21, @ANYRES32=r53, @ANYRES32=r54, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r55, @ANYRES32=r15, @ANYRES32=r56, @ANYRES32=r57, @ANYRES32=r58, @ANYRES32, @ANYRES32=r59, @ANYRES32=r12], 0x128}], 0x5, 0x0) epoll_wait(r3, &(0x7f00000005c0)=[{}], 0x1, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x2c) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) 12:13:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5416, &(0x7f0000000100)) 12:13:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="2828d4447df85068c655822416265914", 0x10) [ 979.839506] rdma_op 00000000cf70731b conn xmit_rdma (null) [ 979.876156] Bluetooth: hci0: Frame reassembly failed (-84) 12:13:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x24, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) [ 979.899854] Bluetooth: hci1: Frame reassembly failed (-84) 12:13:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="2828d4447df85068c655822416265914", 0x10) 12:13:39 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:13:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x25, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:13:40 executing program 5: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="9de76119baf11cad65d9983b86d3fb37", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="2828d4447df85068c655822416265914", 0x10) [ 980.057097] rdma_op 000000005e12bf24 conn xmit_rdma (null) [ 980.124599] audit: type=1400 audit(1568031220.087:98): avc: denied { ioctl } for pid=26748 comm="syz-executor.4" path="socket:[57273]" dev="sockfs" ino=57273 ioctlcmd=0x582a scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 980.398889] net_ratelimit: 20 callbacks suppressed [ 980.398899] protocol 88fb is buggy, dev hsr_slave_0 [ 980.408987] protocol 88fb is buggy, dev hsr_slave_1 [ 980.414187] protocol 88fb is buggy, dev hsr_slave_0 [ 980.419279] protocol 88fb is buggy, dev hsr_slave_1 [ 980.878938] protocol 88fb is buggy, dev hsr_slave_0 [ 980.884058] protocol 88fb is buggy, dev hsr_slave_1 [ 981.599407] protocol 88fb is buggy, dev hsr_slave_0 [ 981.604641] protocol 88fb is buggy, dev hsr_slave_1 [ 981.609797] protocol 88fb is buggy, dev hsr_slave_0 [ 981.614864] protocol 88fb is buggy, dev hsr_slave_1 [ 981.918926] Bluetooth: hci1: command 0x1003 tx timeout [ 981.924453] Bluetooth: hci1: sending frame failed (-49) [ 981.930014] Bluetooth: hci0: command 0x1003 tx timeout [ 981.941065] Bluetooth: hci0: sending frame failed (-49) [ 983.998946] Bluetooth: hci0: command 0x1001 tx timeout [ 984.004378] Bluetooth: hci0: sending frame failed (-49) [ 984.010218] Bluetooth: hci1: command 0x1001 tx timeout [ 984.015569] Bluetooth: hci1: sending frame failed (-49) [ 985.759212] net_ratelimit: 20 callbacks suppressed [ 985.759221] protocol 88fb is buggy, dev hsr_slave_0 [ 985.769294] protocol 88fb is buggy, dev hsr_slave_1 [ 985.774376] protocol 88fb is buggy, dev hsr_slave_0 [ 985.779477] protocol 88fb is buggy, dev hsr_slave_1 [ 986.078915] Bluetooth: hci1: command 0x1009 tx timeout [ 986.084315] Bluetooth: hci0: command 0x1009 tx timeout [ 986.558901] protocol 88fb is buggy, dev hsr_slave_0 [ 986.564116] protocol 88fb is buggy, dev hsr_slave_1 [ 986.638874] protocol 88fb is buggy, dev hsr_slave_0 [ 986.643951] protocol 88fb is buggy, dev hsr_slave_1 [ 986.649095] protocol 88fb is buggy, dev hsr_slave_0 [ 986.654164] protocol 88fb is buggy, dev hsr_slave_1 12:13:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x2, 0x0) 12:13:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x27, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:13:50 executing program 5: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="9de76119baf11cad65d9983b86d3fb37", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="2828d4447df85068c655822416265914", 0x10) 12:13:50 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:13:50 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000000)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:13:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5418, &(0x7f0000000100)) 12:13:50 executing program 5: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="9de76119baf11cad65d9983b86d3fb37", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="2828d4447df85068c655822416265914", 0x10) [ 990.071633] rdma_op 0000000007659267 conn xmit_rdma (null) 12:13:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x28, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 12:13:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="9de76119baf11cad65d9983b86d3fb37", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="2828d4447df85068c655822416265914", 0x10) 12:13:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x4b47, 0x0) 12:13:50 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:13:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="9de76119baf11cad65d9983b86d3fb37", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="2828d4447df85068c655822416265914", 0x10) 12:13:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x29, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:13:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x4b49, 0x0) [ 990.314139] rdma_op 00000000f177c2ac conn xmit_rdma (null) 12:13:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="9de76119baf11cad65d9983b86d3fb37", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="2828d4447df85068c655822416265914", 0x10) 12:13:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x2a, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 990.798942] net_ratelimit: 20 callbacks suppressed [ 990.798952] protocol 88fb is buggy, dev hsr_slave_0 [ 990.809105] protocol 88fb is buggy, dev hsr_slave_1 [ 990.814234] protocol 88fb is buggy, dev hsr_slave_0 [ 990.819325] protocol 88fb is buggy, dev hsr_slave_1 12:13:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5409, 0x0) [ 991.278894] protocol 88fb is buggy, dev hsr_slave_0 [ 991.284041] protocol 88fb is buggy, dev hsr_slave_1 [ 991.999074] protocol 88fb is buggy, dev hsr_slave_0 [ 992.004228] protocol 88fb is buggy, dev hsr_slave_1 [ 992.009391] protocol 88fb is buggy, dev hsr_slave_0 [ 992.014455] protocol 88fb is buggy, dev hsr_slave_1 [ 992.158887] Bluetooth: hci0: command 0x1003 tx timeout [ 992.164288] Bluetooth: hci0: sending frame failed (-49) [ 994.238905] Bluetooth: hci0: command 0x1001 tx timeout [ 994.244343] Bluetooth: hci0: sending frame failed (-49) [ 996.159110] net_ratelimit: 20 callbacks suppressed [ 996.159118] protocol 88fb is buggy, dev hsr_slave_0 [ 996.169194] protocol 88fb is buggy, dev hsr_slave_1 [ 996.174333] protocol 88fb is buggy, dev hsr_slave_0 [ 996.179467] protocol 88fb is buggy, dev hsr_slave_1 [ 996.318882] Bluetooth: hci0: command 0x1009 tx timeout [ 996.958910] protocol 88fb is buggy, dev hsr_slave_0 [ 996.964049] protocol 88fb is buggy, dev hsr_slave_1 [ 997.038916] protocol 88fb is buggy, dev hsr_slave_0 [ 997.044049] protocol 88fb is buggy, dev hsr_slave_1 [ 997.049170] protocol 88fb is buggy, dev hsr_slave_0 [ 997.054211] protocol 88fb is buggy, dev hsr_slave_1 12:14:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="2828d4447df85068c655822416265914", 0x10) 12:14:00 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:14:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x541b, &(0x7f0000000100)) 12:14:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x2b, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:14:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540b, 0x0) 12:14:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xffb7) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r2, 0x0, 0x0, 0x0) getpgrp(0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000000)=0xffb7) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000140)) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3f) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r6, 0x0, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r7, 0x0, 0x0, 0x0) inotify_init1(0x80000) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x200000, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x4030582a, &(0x7f0000000000)=0xffb7) sendmsg$unix(r1, &(0x7f00000006c0)={&(0x7f0000000700)=@file={0xe7d5d1176d6046c3, './file0\x00'}, 0xfffffffffffffe78, &(0x7f0000000780)=[{&(0x7f00000001c0)="f53a813febb10febb9711145708356848b6a13e7e5bc0835ea5d5c2c2422a0a1844fe9db1d2cd4540630d9e9ae5076f875bb4d8c7b5af7e80a7c5ab47f26c4fbe5cce93813ff528f7d99589bd5736a1eb6734c8c9848fbb3f113a7eb3a36423fe4f7cf4dc25bcfd82df6ecc699da3418f9f41eed98a2219242df46046cd19800780e335c9a32869fdcf74a0a71f266411adc3c81ea380e35d34d46fa814a2c71e29b3cde6538d67d7d3501f89d4749688716c8eed0213ec71dca895d1bbf914c51b90b6a679f1425eb8f00affe3994af8c9be0dc5224902bf6bf6184d56c3c6b1e9ce6", 0xe3}], 0x1, &(0x7f0000000600), 0x0, 0x4000}, 0x20000020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x10e) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000b82000)={0x10000004}) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000600)=0x80) sendmmsg$unix(r8, &(0x7f00000bd000), 0x0, 0x0) epoll_wait(r12, &(0x7f00000005c0)=[{}], 0x1, 0x0) [ 1000.289909] rdma_op 000000002455db32 conn xmit_rdma (null) 12:14:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="2828d4447df85068c655822416265914", 0x10) 12:14:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0xae497b00f39f55cc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x1, 0x7}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:14:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x2c, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:14:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540c, 0x0) [ 1000.354369] Bluetooth: hci0: Frame reassembly failed (-84) 12:14:00 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:14:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x2d, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:14:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540d, 0x0) 12:14:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="2828d4447df85068c655822416265914", 0x10) [ 1000.530722] rdma_op 00000000f2158074 conn xmit_rdma (null) [ 1001.198927] net_ratelimit: 20 callbacks suppressed [ 1001.198936] protocol 88fb is buggy, dev hsr_slave_0 [ 1001.209076] protocol 88fb is buggy, dev hsr_slave_1 [ 1001.214222] protocol 88fb is buggy, dev hsr_slave_0 [ 1001.219335] protocol 88fb is buggy, dev hsr_slave_1 [ 1001.678902] protocol 88fb is buggy, dev hsr_slave_0 [ 1001.684023] protocol 88fb is buggy, dev hsr_slave_1 [ 1002.399129] protocol 88fb is buggy, dev hsr_slave_0 [ 1002.399410] Bluetooth: hci0: command 0x1003 tx timeout [ 1002.404270] protocol 88fb is buggy, dev hsr_slave_1 [ 1002.414723] protocol 88fb is buggy, dev hsr_slave_0 [ 1002.419845] protocol 88fb is buggy, dev hsr_slave_1 [ 1002.425091] Bluetooth: hci0: sending frame failed (-49) [ 1004.479426] Bluetooth: hci0: command 0x1001 tx timeout [ 1004.484854] Bluetooth: hci0: sending frame failed (-49) [ 1006.559111] net_ratelimit: 20 callbacks suppressed [ 1006.559120] protocol 88fb is buggy, dev hsr_slave_0 [ 1006.569207] protocol 88fb is buggy, dev hsr_slave_1 [ 1006.574342] protocol 88fb is buggy, dev hsr_slave_0 [ 1006.579430] protocol 88fb is buggy, dev hsr_slave_1 [ 1006.584588] Bluetooth: hci0: command 0x1009 tx timeout [ 1007.358914] protocol 88fb is buggy, dev hsr_slave_0 [ 1007.364010] protocol 88fb is buggy, dev hsr_slave_1 [ 1007.438956] protocol 88fb is buggy, dev hsr_slave_0 [ 1007.444130] protocol 88fb is buggy, dev hsr_slave_1 [ 1007.449265] protocol 88fb is buggy, dev hsr_slave_0 [ 1007.454331] protocol 88fb is buggy, dev hsr_slave_1 12:14:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x541d, &(0x7f0000000100)) 12:14:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x2e, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:14:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="9de76119baf11cad65d9983b86d3fb37", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="2828d4447df85068c655822416265914", 0x10) 12:14:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540e, 0x0) 12:14:10 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:14:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) getsockname$unix(r1, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@md5={0x1, "465380cc506ff5b8e5fc33c913c9e4e4"}, 0x11, 0x3) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x4080, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@multicast2}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) setsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000600)="c16c5f2e3ef1bfbde30e61af22d1ddbbb229da160e80e1123e556f853e76bbacf4dce51bf6420c03cab18892a626fb2af8d915fa08d42b6b8db5c1be4ed48f3b889ff15004c509eb5fd011311d23299600df5d34b3d23a1b7803f7fb67ccbba9553a822e8b5487092fc02b175f26e5d7cff79aa79f874bef482c676bb8a56630a86c49a40d786775efc6af0584cd5ab03554a52e8fca1cd6d93eefc1c9a1871dbfd6d57399a3025a10bf7a7e6231b6866e2ee283b405f5ee492b77cf57b802fe4a4a3b284961cf26a0df86244d17eeb7734858fac31ce2b30176eb8d2112619c8306fff120cf5dac7c56dba08aba814638b9a03398e16809c045491a9ca8972851a795555df19b600637945d2742a4a80de4c19eaf6cc6b7f760de453213d2769bd2e98b229c00eef2b85a841bb82609b033fdbdc9618b5b6df1023d6c01cc1b55d5b4191b642368fd2ed3db2904879349a8c255cdf5485e1ad8fa0dbe1f80893e5046fdccfe2220c990eaf7ac732dee0974325997379207e5cf6dc3d85b0b1df85220eac96be84254a7d7bc1f4317c9fb2e09bdc51bd628552f7ca2a09b956440d610b788a8ede2694160e79196596172954c856bae06eb583c05f0896514b7f2d20b60e38160e327c6773daea9ce1e29ba1f42ab24b9270a9f9d8a44890dc09ca9220d81aa6daba3bcd469f7638c47318e8c357d495a9dbbb94531c5beaf2d8d8b396d8308d621eebd78132e668d7b1e27bdedcd6c9ee69042e2f4a28264ffb9e5bcc9942ec4efbec3a0077931e1e44607dffb3e5fb2385584a4614e504affe01ae7e37846c3da9ec3efbd72359e95c207540d4a1920f0ea289c460d5d434800a9d700468cb32b6d7c871dde9cda33b21866547dae1060763915296d671f22caee90299ca43a5db96e6113ead38603f70e4d29bff5d775f816652590af7e9f69ec7e0e82ce0735f967609ac5ca3295449e0bc38ac3c465e6603cc7b34c3fae9bf4c4d8daf2b835ab845365166f3ce4ae8d7aaae82f70a90f8e312fe315da768a735f2cbb1299a8eeb9a421589f3a421442d8b1d89d8147ea937d9e0a7f814c1d070225d97fa36b5d3538a7627b441e5c6f0fee7379f61f4d668ccfcb3064d8c6594f074f9c923ec51666300b913ad74812df7fe676e1c566a951c119dace64eb46f900cb9c0c2f8e30252e1ccf9682b8814e7fc5e04f841fe8de8c65095ef03c585cb1fee57a27277f86c489b205502cc248866c0d44aa8c4cc2b930b11275059ca489f07e9c0219d1bd30e19471d055c7ac5a8b27ffa74ebbabce15b6efdcd9ab27688de35dd4a4ccf28e2a1843c8482b414b03cb2d210df4751eb9465371e68a9bd7c2ace38ef6d158e83ae13a4823ce4e5c0f6df99d0518482cc0228c3536ce774316d072c550e64b5172fadfd5a494302448913befd86a5c45bdee037a1924fa605ac580ea884a7a0e3463e0f3e26a8d6dd4df6afca86226c20d773237f068d0f36fd45c1de5c4a43b799a4f8e92e59bfa2b08c39ddd62a1abba1951d7816b1f602a532285813a124825a52200f2777c76492539c7e8d361eaeccbfd230ef2efd1879b013d4197fc0df3f3857c18fa45291d9ccc0a690a732847eeb2be35e88cdcb430fd026d2c533beb1196597de598e3e8a3b6f287be330b802c9351eb3cab24a04e029e6b3e791d03b34cb1e32db97181aed348fd4113ffeb6d6044721f2b88d8b6f79b9e951153ba9379068a4ddf1985d20d59c70bfac6505a030537b4f7ea0049cab20c662b32004625834383f73738ed466adbb60cdc01f19a48c223a2b3f34fc635563804220ff084481824e884231f2b674bc4112e5b74127ce7a642675f8c151581fcc73d31495be0c46b13b822e07d6cac17f387515311da02f112560dc5b1b1568284fa4af45c6619591cf7feab9b0c18ffd91dc8a6f24007f49d55f5ed9097fd217bc46531e959931ee0624a7ebb4ea4ce67c73e58cb4bd5670295c6b0db9221d03a7fb981c5fad01468725396f663acbeee6c16ba75819f77e5637ff4d24522acec4fdb17af4cd339bc7005f0d2218649cade2761a4890940deb757fcd5fac783069cb1f1bd8d07baa698961d6183e7614e4105cd097fa32ed6cf9822d5272b853cdb5ac22a59cde30e831200f1196eb73541e9ef22fe2f6beb851a96c2eb36ce4436f445b9e373046fa67e2171d329cc57be6963616ad2b4fcaa3107ad2138a3ad4c0f96bc354b360351d4592a1a2ec928875fbe7e91af3caf298894a5ce52f76966823029b66e32165ae748b58a1cb3c742e84e6f758a13ba77bd7e952356920d0e80a89ad4aa9462713560ea38f923e3883b9868dac163115036a79ca113480ae1628de65d3171612e9e894eb9f5c37cf5980a594766f07592c6751b779ebf07141238ba68f91ced2f89b9bcbb198496d91bd83bbe3fc20a440c072e13b98256bdd2acddbc844f69fc5424063f053bac4d8b64aff37693975bc99320ceb03a9c3a539b2787643b11be734f145de55e90bd07ee1415957908afd1149e5c57e7d438f535a1052ce8dd6d34eddec02c4acd30a4558a2c029f8c475c76bd0f683a1f1252e269ebb8b1ce817d3f61752c3269fea6139cf3ea4221049b9f0c36815afc28ce8442c115a773e817cfff81845fd36a571c78ebd911e60aa9ae7e0cc221d5d7326c96879a7398de96e8e5e1e868c069829225827becfcc2fe4b756b35c16015d297782d46d51b3330b31349b906cf5b347367e94f43c86ff4503ba43c79bdc7eaf47172a182e8733e6181337677dccfbb0478c15d9671e31c1a50b9dc9448fc0b0531cfdc202455c2c856d2e2214a95159df7b32486e52fad30b628103fba65cf515f8008de05eaf1bff6cc8d9fa7b2f5c91cc7fe4a9f90b345943709d2ae6cd5b63ae74f51ea0e9fa43624a621c6fc9a99beab450a9f346a0ae8a64332e77f2162e291e6a9382365bef9a470b77c25e05c620c198e8166a452678cfa690dc4c0d16d6ad7f8c534048cb87aedb69be518f083712d012d8e7ed9ba354fc996c8b011ffebef48b7652c1b82a7d81adf3e3a93d7693c961ecae643091d8495b4d0003fc870b87e3ed01b2866a3355d49bfd350292869f5ffa4c8d6826640226c528b5d29d61c669eb0b8a9da575804bba516596afc865bfaa5f2d485d8c684865d7855d82356bf08a74306534adcbf1d849473e0f332ed705afd5f69691aec02ac22fcfb292586b583b9fbe9abeb8c3553702898c5717d71cb5f0c37948b94b3b9ebaf3116e3ec7929496f00adbba0abc94411747aaa5a95f615ceb7efa7fddf98a8785642fbaf06f4597049ede1ef8072e3d15558247d0401b7858ca9df0df2cfc007e3c7482b4df4b6b8af4ceb8b2615b2d4e702e3e0a79748a2e90f62c2ef901bb9f6af590a6e617c5d9ae7801df93b1d3a3d028b7c9014dbe92aebe2f82d3121a47f8f1b0b179b0947b83650ee945be49d32b2b3d982da6f275fe7fd3185174416123ed0dddd1673c75707c6148dc46e034803e70270485e36b59d792ddbee12ade1046f1e3a908dd7b56d4086ee09ef9dd75310528206f2b872880b3dd5ef1b0da026c94d21a10e11a8226fea4737208ae54a6cedf5a9d3f4a02524a8531f47e19b394859f1b02de140ad0c68646fbd64718fad55cf95439a28dd42049db7cf76e0509aceaf58be6ba09a10f192f435a02c7ac9e0dfb3240f99592d9c5550c342525e372a68f5c1ae52194886c0e898ddcfe211e7bc003a4aefb91e99f7fccbedbc3654cdee473b7fc7903029be8a2ad9643cbaf93ed86b6503dd1a679c1a9dffcc24abc39ff5d2d58e9ba35e1d0d8d83b1991e9c71bcee70d4b39f5db3542c510709ab790d866628a24d9e99179d08c8873f3ffd6b5bf02efda7d05ddc3dd56eef384b9f689d63e0dd8db7586b1682e9161e9a8ee920d497f53a03f457ee48b80d90d14f239d2f585ca7e554fda94044360a1bc8f1e9779178e944dc3cd2944a6001b10b9dad53ad4cf829e04e6a78b1dd219542ffe384b2b9063293c5dcc49587c74fb5fc139c96e4059d6088312aaf6a123e0b29adb828d4bb86139eb4f130c951017e6398af0eba84e662efc5795b08c3dba9f6c802f842ddaefc3fab97caf3b2ce8b1006703bf8ab5aca633c0d40676690e9c40315f36e6e8d0fc16702801c60ecc0ed9749b552e5cd9bd980ebf358f0a2afc4567a5f7e6da9962edd15714bfac46c9128749ebdbf3ec67265291454eaea52105629503705108e293257ff77e049ae5ee8b88a157dc5ca98f97813717ab4dbb443868eccc085e48a8cbb01793129b22af3678dcd4528984f3c8b7b6ac069542993c58e405ad96b6c42bf538306e7f9de65b0cf983efed2a0abd6dd4d48042253fce3084ac52505cf60175ab64d40cfd28cbb3a20f98c209cb5799ce8981ad1bcefcc0e1ff043724fa43fcbd633605fad38be614a43a5cd4abf3ed77b363ef628368d4f33df2d3a8237a61595501dcd5a24aa42a64f46126bfd0f085aa0079e2054a099183baff78132b2ed9102354042836eb68d7f602004f7072ffbe640cb7412a7e30f808222eb9cc33d51901b0aa58504cd78c7f4697ec7bae4545ce1806dcc736457dc5836c23e53e54aa8b8d89a4cd5f0e0682ecf18530cbc3c31da8887ca4dbc6830e462e435f944371c3e54d18618142a6f1ea3f118106d9a98ce9a6e18633c406da3dbec7c8d9385153977db90bb68dcdef3f009750a4692c2035354cf94ad77699bdb0f761ac61699e76cbfb7dcc196011d911b514a2d7850db2af0a623b17424eee40fe56d872cbae73d6feb4828b60544401b8fe875d6f1fb524824c9364a8f20e2a0df099fd82c41dca47be4d9475dc07ba4fae984372b921cb1ded66348d8e30bee309297d0a95604b1bdeb849eb59b3729ace21d00cf0e5fedfaac43711392fed4f628d080fc64a46423206268f5e371e865f8cb012d3912d3a77d47aa27c334141592ae9623e8f286dd076b0fb2a7bc72d07fbb4cdb917ddbaf3f445e6e77f0361bd4281c28f2c820d17fa0a135cbbde2d0285135dacc02ab4ce69782d3054d8006895b675f0460c3e3b621fb7f3316411690e17d6f684ace04e0f26dec6d1c2360748227dc71623b0d5aaa2a3c3334d588898b41ca759bb04645a9811ce6a71dd752c35fa103061d5833f1f69dbc3e209b61d848960e10d1347a88838f70b183dae26b7bbdeadab8f9f462754961c08e76bc57e7dd4f95d887842e9e6c638fdbbb549fd277fb64a96d19f75dd5f980c168cc7b2feb7b12f37dcb0a74e227eadb6878b850602fbb97ac5bf68617e1ddbe13cda406bef38ddbf1735441953065a98f7a8e1c1efa93367dea2497f1392f31241eec4f9ec1094626761fa7bea929ef25be10be811cd3014966cdc4bf8e7ce83d4ad00e5cf467dac7b48e202358b65aa60e79e250e47288af195f5e763c83153bebddb849df712c36470efd54b5f65494fcdb8936470396a4f4c15a9cbb85702f1db1b30165f92c88c9c2da0e9e1769ceccc1a87f1e4622c85b6f18a0bfd8bf2e44ed5c2e3c721e8094745e9978a9bbae2ee6ee820ee9a08c9c566777807a268d21752e7f103faa4ca66bcb11247136a83cd2f0cf490e4cb5491a30bcfd7fe126e9ccf0ada1eb0bcd1e8d1b4cba09652ef0f8361628eafd3ca6810fb923437ac4de4eaa4cb278e060e2a586a7f981bcc8b3a6d1489b9709bfcbbab20210d55f9213b1b9ae3bac720de032fc7afd285fc4bcef96a5a273c632ab15d443f6d3d5d142bee0cc", 0x1000) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x20000) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:14:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="9de76119baf11cad65d9983b86d3fb37", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="2828d4447df85068c655822416265914", 0x10) 12:14:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x2f, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 1010.554283] rdma_op 00000000e8d1840c conn xmit_rdma (null) 12:14:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540f, 0x0) [ 1010.617617] Bluetooth: hci0: Frame reassembly failed (-84) 12:14:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x30, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:14:10 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:14:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="9de76119baf11cad65d9983b86d3fb37", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="2828d4447df85068c655822416265914", 0x10) [ 1010.809794] rdma_op 000000007adcc93d conn xmit_rdma (null) [ 1011.598937] net_ratelimit: 20 callbacks suppressed [ 1011.598946] protocol 88fb is buggy, dev hsr_slave_0 [ 1011.609153] protocol 88fb is buggy, dev hsr_slave_1 [ 1011.614279] protocol 88fb is buggy, dev hsr_slave_0 [ 1011.619405] protocol 88fb is buggy, dev hsr_slave_1 [ 1012.078906] protocol 88fb is buggy, dev hsr_slave_0 [ 1012.084061] protocol 88fb is buggy, dev hsr_slave_1 [ 1012.638937] Bluetooth: hci0: command 0x1003 tx timeout [ 1012.644428] Bluetooth: hci0: sending frame failed (-49) [ 1012.799105] protocol 88fb is buggy, dev hsr_slave_0 [ 1012.804261] protocol 88fb is buggy, dev hsr_slave_1 [ 1012.809425] protocol 88fb is buggy, dev hsr_slave_0 [ 1012.814490] protocol 88fb is buggy, dev hsr_slave_1 [ 1014.718931] Bluetooth: hci0: command 0x1001 tx timeout [ 1014.724350] Bluetooth: hci0: sending frame failed (-49) [ 1016.798868] Bluetooth: hci0: command 0x1009 tx timeout [ 1016.959080] net_ratelimit: 20 callbacks suppressed [ 1016.959089] protocol 88fb is buggy, dev hsr_slave_0 [ 1016.969166] protocol 88fb is buggy, dev hsr_slave_1 [ 1016.974287] protocol 88fb is buggy, dev hsr_slave_0 [ 1016.979371] protocol 88fb is buggy, dev hsr_slave_1 [ 1017.758923] protocol 88fb is buggy, dev hsr_slave_0 [ 1017.764160] protocol 88fb is buggy, dev hsr_slave_1 [ 1017.838930] protocol 88fb is buggy, dev hsr_slave_0 [ 1017.844099] protocol 88fb is buggy, dev hsr_slave_1 [ 1017.849227] protocol 88fb is buggy, dev hsr_slave_0 [ 1017.854294] protocol 88fb is buggy, dev hsr_slave_1 12:14:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x541f, &(0x7f0000000100)) 12:14:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5410, 0x0) 12:14:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x31, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:14:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="9de76119baf11cad65d9983b86d3fb37", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 12:14:20 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:14:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)=0xffb7) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x40) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) [ 1020.784530] rdma_op 00000000e3a31ae5 conn xmit_rdma (null) 12:14:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x32, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:14:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="9de76119baf11cad65d9983b86d3fb37", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 12:14:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5412, 0x0) [ 1020.836523] Bluetooth: hci0: Frame reassembly failed (-84) 12:14:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="9de76119baf11cad65d9983b86d3fb37", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 12:14:20 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:14:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5413, 0x0) [ 1020.996116] rdma_op 00000000b44bf613 conn xmit_rdma (null) [ 1021.998948] net_ratelimit: 20 callbacks suppressed [ 1021.998958] protocol 88fb is buggy, dev hsr_slave_0 [ 1022.009093] protocol 88fb is buggy, dev hsr_slave_1 [ 1022.014223] protocol 88fb is buggy, dev hsr_slave_0 [ 1022.019324] protocol 88fb is buggy, dev hsr_slave_1 [ 1022.478919] protocol 88fb is buggy, dev hsr_slave_0 [ 1022.484051] protocol 88fb is buggy, dev hsr_slave_1 [ 1022.878942] Bluetooth: hci0: command 0x1003 tx timeout [ 1022.884416] Bluetooth: hci0: sending frame failed (-49) [ 1023.199096] protocol 88fb is buggy, dev hsr_slave_0 [ 1023.204253] protocol 88fb is buggy, dev hsr_slave_1 [ 1023.209424] protocol 88fb is buggy, dev hsr_slave_0 [ 1023.214513] protocol 88fb is buggy, dev hsr_slave_1 [ 1024.958891] Bluetooth: hci0: command 0x1001 tx timeout [ 1024.964308] Bluetooth: hci0: sending frame failed (-49) [ 1027.048857] Bluetooth: hci0: command 0x1009 tx timeout [ 1027.359095] net_ratelimit: 20 callbacks suppressed [ 1027.359103] protocol 88fb is buggy, dev hsr_slave_0 [ 1027.369183] protocol 88fb is buggy, dev hsr_slave_1 [ 1027.374266] protocol 88fb is buggy, dev hsr_slave_0 [ 1027.379358] protocol 88fb is buggy, dev hsr_slave_1 [ 1028.158915] protocol 88fb is buggy, dev hsr_slave_0 [ 1028.164020] protocol 88fb is buggy, dev hsr_slave_1 [ 1028.238909] protocol 88fb is buggy, dev hsr_slave_0 [ 1028.244053] protocol 88fb is buggy, dev hsr_slave_1 [ 1028.249228] protocol 88fb is buggy, dev hsr_slave_0 [ 1028.254336] protocol 88fb is buggy, dev hsr_slave_1 12:14:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5421, &(0x7f0000000100)) 12:14:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:14:30 executing program 5: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x0, 0xe7ff, [], 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) 12:14:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5414, 0x0) 12:14:30 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:14:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x20000005}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) [ 1031.028473] audit: type=1400 audit(1568031270.977:99): avc: denied { block_suspend } for pid=27944 comm="syz-executor.4" capability=36 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 1031.055008] rdma_op 00000000b3acf885 conn xmit_rdma (null) 12:14:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x2, 'pie\x00'}, {0x4}}]}, 0x30}}, 0x0) 12:14:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5415, 0x0) 12:14:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'\nilter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 1031.107137] Bluetooth: hci0: Frame reassembly failed (-84) 12:14:31 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:14:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5416, 0x0) 12:14:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=ANY=[@ANYBLOB="2000000011003b0e00"/20, @ANYRES32=r3, @ANYBLOB="df0056f9f8a308"], 0x20}}, 0x0) [ 1031.292411] xt_cluster: node mask cannot exceed total number of nodes [ 1031.295615] rdma_op 000000002d871609 conn xmit_rdma (null) [ 1031.434701] bond1 (unregistering): Released all slaves [ 1031.532705] bond1 (unregistering): Released all slaves [ 1032.398931] net_ratelimit: 20 callbacks suppressed [ 1032.398940] protocol 88fb is buggy, dev hsr_slave_0 [ 1032.409050] protocol 88fb is buggy, dev hsr_slave_1 [ 1032.414172] protocol 88fb is buggy, dev hsr_slave_0 [ 1032.419266] protocol 88fb is buggy, dev hsr_slave_1 [ 1032.878969] protocol 88fb is buggy, dev hsr_slave_0 [ 1032.884122] protocol 88fb is buggy, dev hsr_slave_1 [ 1033.118946] Bluetooth: hci0: command 0x1003 tx timeout [ 1033.124420] Bluetooth: hci0: sending frame failed (-49) [ 1033.599347] protocol 88fb is buggy, dev hsr_slave_0 [ 1033.604588] protocol 88fb is buggy, dev hsr_slave_1 [ 1033.609751] protocol 88fb is buggy, dev hsr_slave_0 [ 1033.614813] protocol 88fb is buggy, dev hsr_slave_1 [ 1035.198897] Bluetooth: hci0: command 0x1001 tx timeout [ 1035.204432] Bluetooth: hci0: sending frame failed (-49) [ 1037.278937] Bluetooth: hci0: command 0x1009 tx timeout [ 1037.759094] net_ratelimit: 20 callbacks suppressed [ 1037.759102] protocol 88fb is buggy, dev hsr_slave_0 [ 1037.769185] protocol 88fb is buggy, dev hsr_slave_1 [ 1037.774314] protocol 88fb is buggy, dev hsr_slave_0 [ 1037.779402] protocol 88fb is buggy, dev hsr_slave_1 [ 1038.558875] protocol 88fb is buggy, dev hsr_slave_0 [ 1038.564053] protocol 88fb is buggy, dev hsr_slave_1 [ 1038.638916] protocol 88fb is buggy, dev hsr_slave_0 [ 1038.644017] protocol 88fb is buggy, dev hsr_slave_1 [ 1038.649149] protocol 88fb is buggy, dev hsr_slave_0 [ 1038.654196] protocol 88fb is buggy, dev hsr_slave_1 12:14:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 12:14:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'%ilter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:14:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5418, 0x0) 12:14:41 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:14:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat6\x00') dup2(r1, r2) 12:14:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) r3 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r3, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000)=0xffb7) r5 = dup2(0xffffffffffffffff, r4) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f00000000c0)=0x1ff, 0x2) r6 = dup3(r2, r3, 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f0000000000)={{0x9, 0x4}, 'port1\x00', 0x13, 0x8, 0x400, 0x2, 0xfd4f, 0x9, 0x1e720793, 0x0, 0x6}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) [ 1041.269279] rdma_op 00000000f84bec55 conn xmit_rdma (null) 12:14:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x17, 0x0, &(0x7f0000000040)) 12:14:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x541b, 0x0) [ 1041.324951] Bluetooth: hci0: Frame reassembly failed (-84) [ 1041.337197] xt_cluster: node mask cannot exceed total number of nodes 12:14:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'fi\nter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:14:41 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:14:41 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xce}}], 0x210, 0x34000, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x500, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) [ 1041.451609] rdma_op 000000008b125f39 conn xmit_rdma (null) 12:14:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x541d, 0x0) [ 1041.505151] xt_cluster: node mask cannot exceed total number of nodes [ 1041.691193] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1041.733505] overlayfs: filesystem on './file0' not supported as upperdir [ 1042.798901] net_ratelimit: 20 callbacks suppressed [ 1042.798911] protocol 88fb is buggy, dev hsr_slave_0 [ 1042.809045] protocol 88fb is buggy, dev hsr_slave_1 [ 1042.814132] protocol 88fb is buggy, dev hsr_slave_0 [ 1042.819244] protocol 88fb is buggy, dev hsr_slave_1 [ 1043.278963] protocol 88fb is buggy, dev hsr_slave_0 [ 1043.284090] protocol 88fb is buggy, dev hsr_slave_1 [ 1043.358924] Bluetooth: hci0: command 0x1003 tx timeout [ 1043.364454] Bluetooth: hci0: sending frame failed (-49) [ 1043.999121] protocol 88fb is buggy, dev hsr_slave_0 [ 1044.004280] protocol 88fb is buggy, dev hsr_slave_1 [ 1044.009448] protocol 88fb is buggy, dev hsr_slave_0 [ 1044.014516] protocol 88fb is buggy, dev hsr_slave_1 [ 1045.438944] Bluetooth: hci0: command 0x1001 tx timeout [ 1045.444380] Bluetooth: hci0: sending frame failed (-49) [ 1047.518872] Bluetooth: hci0: command 0x1009 tx timeout [ 1048.159121] net_ratelimit: 20 callbacks suppressed [ 1048.159130] protocol 88fb is buggy, dev hsr_slave_0 [ 1048.169230] protocol 88fb is buggy, dev hsr_slave_1 [ 1048.174356] protocol 88fb is buggy, dev hsr_slave_0 [ 1048.179445] protocol 88fb is buggy, dev hsr_slave_1 [ 1048.958908] protocol 88fb is buggy, dev hsr_slave_0 [ 1048.964175] protocol 88fb is buggy, dev hsr_slave_1 [ 1049.038875] protocol 88fb is buggy, dev hsr_slave_0 [ 1049.043987] protocol 88fb is buggy, dev hsr_slave_1 [ 1049.049115] protocol 88fb is buggy, dev hsr_slave_0 [ 1049.054169] protocol 88fb is buggy, dev hsr_slave_1 12:14:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5424, &(0x7f0000000100)) 12:14:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'fi%ter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:14:51 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:14:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x541f, 0x0) 12:14:51 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x3c) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x480400, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x2002, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0xfffffffffffffd79) msgsnd(0x0, 0x0, 0x0, 0x0) socket(0x0, 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000000)={'nr0\x00', 0x31}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000340)=ANY=[@ANYBLOB="e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/113]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x362) getsockopt(r0, 0x114, 0x2713, &(0x7f0000000300)=""/13, &(0x7f0000000000)=0xd) 12:14:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)=0xffb7) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)=0xffb7) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r1}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000)=0xffb7) r5 = accept$unix(r4, &(0x7f0000000340)=@abs, &(0x7f0000000100)=0x6e) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r6 = epoll_create1(0x0) readlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=""/119, 0x77) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000000)=0xffb7) bind$unix(r7, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) epoll_wait(r6, &(0x7f00000005c0)=[{}], 0x1, 0x0) r8 = openat$usbmon(0xffffffffffffff9c, &(0x7f00000004c0)='\x00/\xf2\xe2\xf3\x00', 0x602200, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f00000000c0)={0x4}) [ 1051.517098] rdma_op 00000000023e2ed9 conn xmit_rdma (null) [ 1051.563654] xt_cluster: node mask cannot exceed total number of nodes 12:14:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'fi.ter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:14:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5420, 0x0) 12:14:51 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:14:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5421, 0x0) [ 1051.750986] rdma_op 000000007e8413ee conn xmit_rdma (null) [ 1051.805158] xt_cluster: node mask cannot exceed total number of nodes 12:14:51 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:14:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1e865cfff, 0x811, r1, 0x0) [ 1051.928017] rdma_op 00000000e74ea2f6 conn xmit_rdma (null) [ 1053.198929] net_ratelimit: 20 callbacks suppressed [ 1053.198937] protocol 88fb is buggy, dev hsr_slave_0 [ 1053.209087] protocol 88fb is buggy, dev hsr_slave_1 [ 1053.214234] protocol 88fb is buggy, dev hsr_slave_0 [ 1053.219347] protocol 88fb is buggy, dev hsr_slave_1 [ 1053.598882] Bluetooth: hci0: command 0x1003 tx timeout [ 1053.604374] Bluetooth: hci0: sending frame failed (-49) [ 1053.678926] protocol 88fb is buggy, dev hsr_slave_0 [ 1053.684122] protocol 88fb is buggy, dev hsr_slave_1 [ 1054.399043] protocol 88fb is buggy, dev hsr_slave_0 [ 1054.404162] protocol 88fb is buggy, dev hsr_slave_1 [ 1054.409347] protocol 88fb is buggy, dev hsr_slave_0 [ 1054.414403] protocol 88fb is buggy, dev hsr_slave_1 [ 1055.678911] Bluetooth: hci0: command 0x1001 tx timeout [ 1055.684322] Bluetooth: hci0: sending frame failed (-49) [ 1057.758951] Bluetooth: hci0: command 0x1009 tx timeout [ 1058.559095] net_ratelimit: 20 callbacks suppressed [ 1058.559104] protocol 88fb is buggy, dev hsr_slave_0 [ 1058.569287] protocol 88fb is buggy, dev hsr_slave_1 [ 1058.574486] protocol 88fb is buggy, dev hsr_slave_0 [ 1058.579593] protocol 88fb is buggy, dev hsr_slave_1 [ 1059.358924] protocol 88fb is buggy, dev hsr_slave_0 [ 1059.364066] protocol 88fb is buggy, dev hsr_slave_1 [ 1059.438946] protocol 88fb is buggy, dev hsr_slave_0 [ 1059.444088] protocol 88fb is buggy, dev hsr_slave_1 [ 1059.449257] protocol 88fb is buggy, dev hsr_slave_0 [ 1059.454310] protocol 88fb is buggy, dev hsr_slave_1 12:15:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5425, &(0x7f0000000100)) 12:15:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5422, 0x0) 12:15:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'fiLter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:15:01 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000e8e000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 12:15:01 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:15:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) [ 1061.727861] rdma_op 00000000ba5ff5dd conn xmit_rdma (null) [ 1061.758160] xt_cluster: node mask cannot exceed total number of nodes 12:15:01 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x80000000003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}, {}, {}, {}]}, 0x54, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 12:15:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5423, 0x0) [ 1061.794714] Bluetooth: hci0: Frame reassembly failed (-84) [ 1061.807133] Bluetooth: hci0: Frame reassembly failed (-84) 12:15:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'fiuter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 12:15:01 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:15:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5424, 0x0) [ 1061.922256] overlayfs: lowerdir is in-use as upperdir/workdir [ 1061.989741] overlayfs: workdir and upperdir must reside under the same mount [ 1062.007899] xt_cluster: node mask cannot exceed total number of nodes [ 1062.016103] rdma_op 000000008c5e6388 conn xmit_rdma (null) 12:15:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'fil\ner\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) [ 1062.150915] xt_cluster: node mask cannot exceed total number of nodes [ 1062.162535] xt_cluster: node mask cannot exceed total number of nodes [ 1063.598922] net_ratelimit: 20 callbacks suppressed [ 1063.598932] protocol 88fb is buggy, dev hsr_slave_0 [ 1063.609066] protocol 88fb is buggy, dev hsr_slave_1 [ 1063.614216] protocol 88fb is buggy, dev hsr_slave_0 [ 1063.619311] protocol 88fb is buggy, dev hsr_slave_1 [ 1063.838928] Bluetooth: hci0: command 0x1003 tx timeout [ 1063.844402] Bluetooth: hci0: sending frame failed (-49) [ 1064.078903] protocol 88fb is buggy, dev hsr_slave_0 [ 1064.083999] protocol 88fb is buggy, dev hsr_slave_1 [ 1064.799099] protocol 88fb is buggy, dev hsr_slave_0 [ 1064.804383] protocol 88fb is buggy, dev hsr_slave_1 [ 1064.809550] protocol 88fb is buggy, dev hsr_slave_0 [ 1064.814614] protocol 88fb is buggy, dev hsr_slave_1 [ 1065.918987] Bluetooth: hci0: command 0x1001 tx timeout [ 1065.924399] Bluetooth: hci0: sending frame failed (-49) [ 1067.998906] Bluetooth: hci0: command 0x1009 tx timeout [ 1068.959119] net_ratelimit: 20 callbacks suppressed [ 1068.959127] protocol 88fb is buggy, dev hsr_slave_0 [ 1068.969219] protocol 88fb is buggy, dev hsr_slave_1 [ 1068.974344] protocol 88fb is buggy, dev hsr_slave_0 [ 1068.979433] protocol 88fb is buggy, dev hsr_slave_1 [ 1069.758865] protocol 88fb is buggy, dev hsr_slave_0 [ 1069.764128] protocol 88fb is buggy, dev hsr_slave_1 [ 1069.838876] protocol 88fb is buggy, dev hsr_slave_0 [ 1069.843963] protocol 88fb is buggy, dev hsr_slave_1 [ 1069.849104] protocol 88fb is buggy, dev hsr_slave_0 [ 1069.854162] protocol 88fb is buggy, dev hsr_slave_1 12:15:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5427, &(0x7f0000000100)) 12:15:11 executing program 5: socket$inet(0x2, 0xa, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x27) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x30}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:15:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5425, 0x0) 12:15:11 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:15:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'fil%er\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:15:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x54200, 0x0) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)=0xffb7) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000b82000)={0xd000000c}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r5, &(0x7f00000005c0)=[{}], 0x5a, 0xfffffffffffffe20) [ 1071.959763] rdma_op 00000000d60f2fc1 conn xmit_rdma (null) 12:15:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5427, 0x0) [ 1072.020236] xt_cluster: node mask cannot exceed total number of nodes [ 1072.032101] Bluetooth: hci0: Frame reassembly failed (-84) [ 1072.039411] Bluetooth: hci0: Frame reassembly failed (-84) 12:15:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filt\nr\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 12:15:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0xffffffffffffffe7, 0x0, 0x0, [], 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) 12:15:12 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:15:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5428, 0x0) 12:15:12 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) mount$9p_virtio(&(0x7f0000000200)='\x00\xfbr\xb0\xef\xb7\x9f\xa27\xcd\xa6\xc2\xccNu\xf9\x1es\xa9)V\b\x00\x00\x00\x00ii\x90.\x97{\xc15k-\xbbMSzlE\xf3\x1f_\xb8\xef\x0f\x05SS\x93\x9a\xceb\x1c\x86\xca`\xa9\xc1D3\xc7\xcdL\xaa\xab\x90\xdcpB*\x87\x03\x00\x00\x00Z\x99\x93_o\xfb$\xb2j\x03\x03g\xa0#\xb9\xf3\xe9\xc4\x1a\xf5V\xd1JP\x8ahs~1\x1d{\f\xaa\x8f\xd6W\xfa\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc', 0x0, &(0x7f00000000c0)='9p\x00', 0x12803a, 0x0) [ 1072.183189] xt_cluster: node mask cannot exceed total number of nodes [ 1072.211649] rdma_op 00000000f4db6a41 conn xmit_rdma (null) [ 1073.998916] net_ratelimit: 20 callbacks suppressed [ 1073.998926] protocol 88fb is buggy, dev hsr_slave_0 [ 1074.009015] protocol 88fb is buggy, dev hsr_slave_1 [ 1074.014104] protocol 88fb is buggy, dev hsr_slave_0 [ 1074.019198] protocol 88fb is buggy, dev hsr_slave_1 [ 1074.078893] Bluetooth: hci0: command 0x1003 tx timeout [ 1074.084303] Bluetooth: hci0: sending frame failed (-49) [ 1074.478944] protocol 88fb is buggy, dev hsr_slave_0 [ 1074.484080] protocol 88fb is buggy, dev hsr_slave_1 [ 1075.199132] protocol 88fb is buggy, dev hsr_slave_0 [ 1075.204399] protocol 88fb is buggy, dev hsr_slave_1 [ 1075.209579] protocol 88fb is buggy, dev hsr_slave_0 [ 1075.214667] protocol 88fb is buggy, dev hsr_slave_1 [ 1076.158868] Bluetooth: hci0: command 0x1001 tx timeout [ 1076.165690] Bluetooth: hci0: sending frame failed (-49) [ 1078.238927] Bluetooth: hci0: command 0x1009 tx timeout [ 1079.359090] net_ratelimit: 20 callbacks suppressed [ 1079.359099] protocol 88fb is buggy, dev hsr_slave_0 [ 1079.369261] protocol 88fb is buggy, dev hsr_slave_1 [ 1079.374382] protocol 88fb is buggy, dev hsr_slave_0 [ 1079.379472] protocol 88fb is buggy, dev hsr_slave_1 [ 1080.158918] protocol 88fb is buggy, dev hsr_slave_0 [ 1080.164023] protocol 88fb is buggy, dev hsr_slave_1 [ 1080.238941] protocol 88fb is buggy, dev hsr_slave_0 [ 1080.244145] protocol 88fb is buggy, dev hsr_slave_1 [ 1080.249288] protocol 88fb is buggy, dev hsr_slave_0 [ 1080.254377] protocol 88fb is buggy, dev hsr_slave_1 12:15:22 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:15:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filt%r\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:15:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5428, &(0x7f0000000100)) 12:15:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000040)) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000c80)={0x8, "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", 0xf05}, 0x1006) sendfile(r2, r2, &(0x7f0000000240), 0x2008000fffffffe) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000100)=0x80000) 12:15:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5429, 0x0) 12:15:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) delete_module(&(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x1c00) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) r3 = socket$inet(0x2b, 0x4, 0x0) accept4$inet(r3, 0x0, 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000000)=0xffb7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x7fff, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0x2b}, 0x5}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e23, 0x3, @mcast1, 0x2c2}], 0x98) syncfs(r5) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000100)={{0x1, 0x1000}, {0x2, 0x800}, 0xffffffffffffffff, 0x1, 0x732f}) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000)=0xffb7) ioctl$VIDIOC_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f0000000380)={0xcd, 0x0, [], {0x0, @bt={0x400, 0x2, 0x0, 0x2, 0x7, 0x7, 0x9, 0x0, 0x5f, 0x4, 0x1, 0x1, 0x5, 0x7f, 0x1, 0xd}}}) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000000)) 12:15:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x80000000003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}, {}, {0x8, 0x1}]}, 0x4c, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 12:15:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5437, 0x0) [ 1082.235243] rdma_op 0000000098894020 conn xmit_rdma (null) [ 1082.246240] xt_cluster: node mask cannot exceed total number of nodes [ 1082.263794] Bluetooth: hci0: Frame reassembly failed (-84) 12:15:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filte\n\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:15:22 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:15:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5441, 0x0) [ 1082.427247] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1082.473080] xt_cluster: node mask cannot exceed total number of nodes [ 1082.496419] rdma_op 00000000cdf770d3 conn xmit_rdma (null) [ 1082.507687] overlayfs: filesystem on './file0' not supported as upperdir 12:15:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filte%\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:15:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5450, 0x0) 12:15:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 1082.687672] xt_cluster: node mask cannot exceed total number of nodes [ 1084.328870] Bluetooth: hci0: command 0x1003 tx timeout [ 1084.334486] Bluetooth: hci0: sending frame failed (-49) [ 1084.408906] net_ratelimit: 20 callbacks suppressed [ 1084.408915] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.419064] protocol 88fb is buggy, dev hsr_slave_1 [ 1084.424313] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.429613] protocol 88fb is buggy, dev hsr_slave_1 [ 1084.878937] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.884056] protocol 88fb is buggy, dev hsr_slave_1 [ 1085.599168] protocol 88fb is buggy, dev hsr_slave_0 [ 1085.604468] protocol 88fb is buggy, dev hsr_slave_1 [ 1085.609618] protocol 88fb is buggy, dev hsr_slave_0 [ 1085.614830] protocol 88fb is buggy, dev hsr_slave_1 [ 1086.398975] Bluetooth: hci0: command 0x1001 tx timeout [ 1086.404483] Bluetooth: hci0: sending frame failed (-49) [ 1088.478917] Bluetooth: hci0: command 0x1009 tx timeout [ 1089.759368] net_ratelimit: 20 callbacks suppressed [ 1089.759379] protocol 88fb is buggy, dev hsr_slave_0 [ 1089.769651] protocol 88fb is buggy, dev hsr_slave_1 [ 1089.774795] protocol 88fb is buggy, dev hsr_slave_0 [ 1089.780002] protocol 88fb is buggy, dev hsr_slave_1 [ 1090.558900] protocol 88fb is buggy, dev hsr_slave_0 [ 1090.564016] protocol 88fb is buggy, dev hsr_slave_1 [ 1090.639012] protocol 88fb is buggy, dev hsr_slave_0 [ 1090.644311] protocol 88fb is buggy, dev hsr_slave_1 [ 1090.649457] protocol 88fb is buggy, dev hsr_slave_0 [ 1090.654540] protocol 88fb is buggy, dev hsr_slave_1 12:15:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000100)) 12:15:32 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:15:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x02\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:15:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5451, 0x0) 12:15:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000139, 0x10400003) 12:15:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mq_open(&(0x7f00000002c0)='\x00', 0x0, 0xc21638497f43213a, &(0x7f0000000300)={0x5, 0x4, 0x4, 0x3f8, 0x4, 0x0, 0x0, 0x9}) clock_settime(0x4, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)=0xffb7) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000480)=0x480, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ptrace$setregs(0xf, r3, 0x10000, &(0x7f00000000c0)="0413089464d751cd9c8acefbed6153b05b2a89666f31337f00e94dafcf9b1071e09b7e378c2bba72f8a020018aa2ea9344bd248933500c55330633958a4a91cc2f214b78a7e0205a997b96d7893826b5a187d330ad65742682d92f800d19d7e2833f76babcbdb42cd06f6fc21dd4581f69897a5b7b6a9808b782a4621799831e4b38962d46f3a8df9c98136bcb9825c906b01a5a0d6bca21b5ffe7d0ab6b") r4 = epoll_create1(0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) r6 = socket$inet(0x2b, 0x4, 0x0) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mixer\x00', 0x0, 0x0) accept4$inet(r6, 0x0, 0x0, 0x80800) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000440)={0x40, 0x3}, 0x10) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000000)=0xffb7) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x54) openat$cgroup_ro(r5, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000380)) epoll_wait(r4, &(0x7f00000005c0)=[{}], 0x1, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) socket$tipc(0x1e, 0x2, 0x0) 12:15:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5452, 0x0) [ 1092.482044] rdma_op 0000000004ee23cd conn xmit_rdma (null) [ 1092.506690] Bluetooth: hci0: Frame reassembly failed (-84) 12:15:32 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x800050000}]}) r0 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) [ 1092.559795] xt_cluster: node mask cannot exceed total number of nodes 12:15:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x03\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:15:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x545d, 0x0) 12:15:32 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:15:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x04\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 1092.715863] xt_cluster: node mask cannot exceed total number of nodes [ 1092.747927] rdma_op 00000000bfaf8896 conn xmit_rdma (null) [ 1092.863169] xt_cluster: node mask cannot exceed total number of nodes [ 1093.294449] Bluetooth: hci1: Frame reassembly failed (-84) [ 1094.558957] Bluetooth: hci0: command 0x1003 tx timeout [ 1094.564569] Bluetooth: hci0: sending frame failed (-49) [ 1094.798941] net_ratelimit: 20 callbacks suppressed [ 1094.798952] protocol 88fb is buggy, dev hsr_slave_0 [ 1094.809069] protocol 88fb is buggy, dev hsr_slave_1 [ 1094.814202] protocol 88fb is buggy, dev hsr_slave_0 [ 1094.819501] protocol 88fb is buggy, dev hsr_slave_1 [ 1095.278903] protocol 88fb is buggy, dev hsr_slave_0 [ 1095.284060] protocol 88fb is buggy, dev hsr_slave_1 [ 1095.358916] Bluetooth: hci1: command 0x1003 tx timeout [ 1095.370034] Bluetooth: hci1: sending frame failed (-49) [ 1095.999035] protocol 88fb is buggy, dev hsr_slave_0 [ 1096.004215] protocol 88fb is buggy, dev hsr_slave_1 [ 1096.009378] protocol 88fb is buggy, dev hsr_slave_0 [ 1096.014479] protocol 88fb is buggy, dev hsr_slave_1 [ 1096.639022] Bluetooth: hci0: command 0x1001 tx timeout [ 1096.644433] Bluetooth: hci0: sending frame failed (-49) [ 1097.438971] Bluetooth: hci1: command 0x1001 tx timeout [ 1097.444404] Bluetooth: hci1: sending frame failed (-49) [ 1098.718993] Bluetooth: hci0: command 0x1009 tx timeout [ 1099.518931] Bluetooth: hci1: command 0x1009 tx timeout [ 1100.159076] net_ratelimit: 20 callbacks suppressed [ 1100.159084] protocol 88fb is buggy, dev hsr_slave_0 [ 1100.169187] protocol 88fb is buggy, dev hsr_slave_1 [ 1100.174309] protocol 88fb is buggy, dev hsr_slave_0 [ 1100.179396] protocol 88fb is buggy, dev hsr_slave_1 [ 1100.958878] protocol 88fb is buggy, dev hsr_slave_0 [ 1100.964022] protocol 88fb is buggy, dev hsr_slave_1 [ 1101.038865] protocol 88fb is buggy, dev hsr_slave_0 [ 1101.043952] protocol 88fb is buggy, dev hsr_slave_1 [ 1101.049095] protocol 88fb is buggy, dev hsr_slave_0 [ 1101.054163] protocol 88fb is buggy, dev hsr_slave_1 12:15:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5441, &(0x7f0000000100)) 12:15:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x5460, 0x0) 12:15:43 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8995, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) 12:15:43 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:15:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x05\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:15:43 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x18080) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x5, 0x80000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)=0xffb7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)={0x10}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) [ 1103.984229] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1103.999372] rdma_op 0000000049d0068b conn xmit_rdma (null) 12:15:44 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x7, 0x0, 0x6000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) gettid() socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010f02000270f7f8", 0x16}], 0x0, 0x0) umount2(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x400, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000000c0)=0x1a) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x1, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000140)) 12:15:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40045431, 0x0) [ 1104.046823] Bluetooth: hci0: sending frame failed (-49) [ 1104.052735] xt_cluster: node mask cannot exceed total number of nodes [ 1104.110582] FAT-fs (loop5): Directory bread(block 3841) failed [ 1104.123572] FAT-fs (loop5): Directory bread(block 3842) failed [ 1104.140972] FAT-fs (loop5): Directory bread(block 3843) failed 12:15:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x06\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:15:44 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 1104.155324] FAT-fs (loop5): Directory bread(block 3844) failed [ 1104.174785] FAT-fs (loop5): Directory bread(block 3845) failed [ 1104.188147] FAT-fs (loop5): Directory bread(block 3846) failed [ 1104.202463] FAT-fs (loop5): Directory bread(block 3847) failed 12:15:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40045436, 0x0) [ 1104.215571] FAT-fs (loop5): Directory bread(block 3848) failed [ 1104.236233] FAT-fs (loop5): Directory bread(block 3849) failed [ 1104.251645] FAT-fs (loop5): Directory bread(block 3850) failed [ 1104.264281] rdma_op 00000000c315f360 conn xmit_rdma (null) [ 1104.276146] xt_cluster: node mask cannot exceed total number of nodes 12:15:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\a\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 1104.468441] xt_cluster: node mask cannot exceed total number of nodes [ 1105.198899] net_ratelimit: 20 callbacks suppressed [ 1105.198908] protocol 88fb is buggy, dev hsr_slave_0 [ 1105.209020] protocol 88fb is buggy, dev hsr_slave_1 [ 1105.214144] protocol 88fb is buggy, dev hsr_slave_0 [ 1105.219269] protocol 88fb is buggy, dev hsr_slave_1 [ 1105.678915] protocol 88fb is buggy, dev hsr_slave_0 [ 1105.684047] protocol 88fb is buggy, dev hsr_slave_1 [ 1106.078863] Bluetooth: hci0: command 0x1003 tx timeout [ 1106.084368] Bluetooth: hci0: sending frame failed (-49) [ 1106.399085] protocol 88fb is buggy, dev hsr_slave_0 [ 1106.404185] protocol 88fb is buggy, dev hsr_slave_1 [ 1106.409333] protocol 88fb is buggy, dev hsr_slave_0 [ 1106.414385] protocol 88fb is buggy, dev hsr_slave_1 [ 1108.158843] Bluetooth: hci0: command 0x1001 tx timeout [ 1108.164359] Bluetooth: hci0: sending frame failed (-49) [ 1110.238954] Bluetooth: hci0: command 0x1009 tx timeout [ 1110.559115] net_ratelimit: 20 callbacks suppressed [ 1110.559130] protocol 88fb is buggy, dev hsr_slave_0 [ 1110.569225] protocol 88fb is buggy, dev hsr_slave_1 [ 1110.574358] protocol 88fb is buggy, dev hsr_slave_0 [ 1110.579445] protocol 88fb is buggy, dev hsr_slave_1 [ 1111.358909] protocol 88fb is buggy, dev hsr_slave_0 [ 1111.364132] protocol 88fb is buggy, dev hsr_slave_1 [ 1111.438960] protocol 88fb is buggy, dev hsr_slave_0 [ 1111.444142] protocol 88fb is buggy, dev hsr_slave_1 [ 1111.449282] protocol 88fb is buggy, dev hsr_slave_0 [ 1111.454350] protocol 88fb is buggy, dev hsr_slave_1 12:15:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5450, &(0x7f0000000100)) 12:15:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000100)) 12:15:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455cb, 0x0) 12:15:54 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:15:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\n\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:15:54 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) clock_gettime(0x0, &(0x7f0000000080)) nanosleep(&(0x7f0000000000), &(0x7f0000000040)) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) [ 1114.254583] xt_cluster: node mask cannot exceed total number of nodes [ 1114.263604] rdma_op 000000002b67082a conn xmit_rdma (null) 12:15:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40049409, 0x0) [ 1114.299519] Bluetooth: hci0: Frame reassembly failed (-84) 12:15:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x11\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 12:15:54 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:15:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40086602, 0x0) [ 1114.475134] xt_cluster: node mask cannot exceed total number of nodes [ 1114.490266] rdma_op 00000000aaf16dd3 conn xmit_rdma (null) 12:15:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter`\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:15:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x40087602, 0x0) [ 1114.667571] xt_cluster: node mask cannot exceed total number of nodes [ 1115.598916] net_ratelimit: 20 callbacks suppressed [ 1115.598925] protocol 88fb is buggy, dev hsr_slave_0 [ 1115.609038] protocol 88fb is buggy, dev hsr_slave_1 [ 1115.614364] protocol 88fb is buggy, dev hsr_slave_0 [ 1115.619495] protocol 88fb is buggy, dev hsr_slave_1 [ 1116.078897] protocol 88fb is buggy, dev hsr_slave_0 [ 1116.084008] protocol 88fb is buggy, dev hsr_slave_1 [ 1116.318899] Bluetooth: hci1: command 0x1003 tx timeout [ 1116.324448] Bluetooth: hci1: sending frame failed (-49) [ 1116.330181] Bluetooth: hci0: command 0x1003 tx timeout [ 1116.341197] Bluetooth: hci0: sending frame failed (-49) [ 1116.799144] protocol 88fb is buggy, dev hsr_slave_0 [ 1116.804281] protocol 88fb is buggy, dev hsr_slave_1 [ 1116.809447] protocol 88fb is buggy, dev hsr_slave_0 [ 1116.814512] protocol 88fb is buggy, dev hsr_slave_1 [ 1118.398985] Bluetooth: hci0: command 0x1001 tx timeout [ 1118.404432] Bluetooth: hci0: sending frame failed (-49) [ 1118.410240] Bluetooth: hci1: command 0x1001 tx timeout [ 1118.415590] Bluetooth: hci1: sending frame failed (-49) [ 1120.478969] Bluetooth: hci1: command 0x1009 tx timeout [ 1120.484361] Bluetooth: hci0: command 0x1009 tx timeout [ 1120.959083] net_ratelimit: 20 callbacks suppressed [ 1120.959092] protocol 88fb is buggy, dev hsr_slave_0 [ 1120.969270] protocol 88fb is buggy, dev hsr_slave_1 [ 1120.974400] protocol 88fb is buggy, dev hsr_slave_0 [ 1120.979499] protocol 88fb is buggy, dev hsr_slave_1 [ 1121.758925] protocol 88fb is buggy, dev hsr_slave_0 [ 1121.764037] protocol 88fb is buggy, dev hsr_slave_1 [ 1121.838933] protocol 88fb is buggy, dev hsr_slave_0 [ 1121.844096] protocol 88fb is buggy, dev hsr_slave_1 [ 1121.849228] protocol 88fb is buggy, dev hsr_slave_0 [ 1121.854401] protocol 88fb is buggy, dev hsr_slave_1 12:16:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5451, &(0x7f0000000100)) 12:16:04 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:16:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x88\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:16:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x4020940d, 0x0) 12:16:04 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)=0xffb7) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000000)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x10000, 0x0) ioctl$TCSETX(r4, 0x5433, &(0x7f0000000080)={0x89a, 0x1fd, [0x40, 0x4950, 0x3a095cd8, 0x1, 0xffffffffffffff48], 0x4}) 12:16:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000100)) [ 1124.466555] rdma_op 00000000e82276f4 conn xmit_rdma (null) [ 1124.501126] xt_cluster: node mask cannot exceed total number of nodes 12:16:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045430, 0x0) [ 1124.522009] Bluetooth: hci0: Frame reassembly failed (-84) [ 1124.533803] Bluetooth: hci1: Frame reassembly failed (-84) [ 1124.540221] Bluetooth: hci1: Frame reassembly failed (-84) 12:16:04 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:16:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00\x03\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 12:16:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045432, 0x0) [ 1124.660770] rdma_op 00000000c6fc5224 conn xmit_rdma (null) [ 1124.696804] xt_cluster: node mask cannot exceed total number of nodes 12:16:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00\x05\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:16:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045438, 0x0) [ 1124.816109] xt_cluster: node mask cannot exceed total number of nodes [ 1125.998904] net_ratelimit: 20 callbacks suppressed [ 1125.998914] protocol 88fb is buggy, dev hsr_slave_0 [ 1126.009045] protocol 88fb is buggy, dev hsr_slave_1 [ 1126.014303] protocol 88fb is buggy, dev hsr_slave_0 [ 1126.019427] protocol 88fb is buggy, dev hsr_slave_1 [ 1126.478908] protocol 88fb is buggy, dev hsr_slave_0 [ 1126.484080] protocol 88fb is buggy, dev hsr_slave_1 [ 1126.559074] Bluetooth: hci1: command 0x1003 tx timeout [ 1126.564574] Bluetooth: hci0: command 0x1003 tx timeout [ 1126.564618] Bluetooth: hci1: sending frame failed (-49) [ 1126.578912] Bluetooth: hci0: sending frame failed (-49) [ 1127.199252] protocol 88fb is buggy, dev hsr_slave_0 [ 1127.204373] protocol 88fb is buggy, dev hsr_slave_1 [ 1127.209579] protocol 88fb is buggy, dev hsr_slave_0 [ 1127.214683] protocol 88fb is buggy, dev hsr_slave_1 [ 1128.638933] Bluetooth: hci0: command 0x1001 tx timeout [ 1128.644346] Bluetooth: hci0: sending frame failed (-49) [ 1128.650173] Bluetooth: hci1: command 0x1001 tx timeout [ 1128.655615] Bluetooth: hci1: sending frame failed (-49) [ 1130.718965] Bluetooth: hci1: command 0x1009 tx timeout [ 1130.724377] Bluetooth: hci0: command 0x1009 tx timeout [ 1131.359262] net_ratelimit: 20 callbacks suppressed [ 1131.359271] protocol 88fb is buggy, dev hsr_slave_0 [ 1131.369369] protocol 88fb is buggy, dev hsr_slave_1 [ 1131.374459] protocol 88fb is buggy, dev hsr_slave_0 [ 1131.379560] protocol 88fb is buggy, dev hsr_slave_1 [ 1132.158866] protocol 88fb is buggy, dev hsr_slave_0 [ 1132.163960] protocol 88fb is buggy, dev hsr_slave_1 [ 1132.238909] protocol 88fb is buggy, dev hsr_slave_0 [ 1132.243993] protocol 88fb is buggy, dev hsr_slave_1 [ 1132.249127] protocol 88fb is buggy, dev hsr_slave_0 [ 1132.254201] protocol 88fb is buggy, dev hsr_slave_1 12:16:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045439, 0x0) 12:16:14 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:16:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00\x06\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 12:16:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xc) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0xfff, 0x9, 0x8, 0x401, 0x3, 0x20, 0x1ff, 0x0, 0xaeb, 0x80, 0xd1, 0x81}) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)=0xffb7) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000080)) 12:16:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5452, &(0x7f0000000100)) 12:16:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000100)) 12:16:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80045440, 0x0) [ 1134.714072] rdma_op 000000003ce8c690 conn xmit_rdma (null) [ 1134.736228] xt_cluster: node mask cannot exceed total number of nodes 12:16:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00\a\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 1134.784271] Bluetooth: hci0: Frame reassembly failed (-84) [ 1134.800359] Bluetooth: hci1: Frame reassembly failed (-84) [ 1134.806150] Bluetooth: hci1: Frame reassembly failed (-84) 12:16:14 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:16:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455c9, 0x0) [ 1134.902671] xt_cluster: node mask cannot exceed total number of nodes 12:16:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00\n\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 1134.949067] rdma_op 000000002ff757c5 conn xmit_rdma (null) 12:16:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455ca, 0x0) 12:16:15 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 1135.051089] xt_cluster: node mask cannot exceed total number of nodes 12:16:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x800455cc, 0x0) 12:16:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00\x11\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 1135.187673] rdma_op 0000000032c64516 conn xmit_rdma (null) [ 1135.194627] xt_cluster: node mask cannot exceed total number of nodes 12:16:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x2e) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)=0xffb7) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000000)={0x5, 0x9}) [ 1136.398913] net_ratelimit: 20 callbacks suppressed [ 1136.398921] protocol 88fb is buggy, dev hsr_slave_0 [ 1136.409012] protocol 88fb is buggy, dev hsr_slave_1 [ 1136.414107] protocol 88fb is buggy, dev hsr_slave_0 [ 1136.419225] protocol 88fb is buggy, dev hsr_slave_1 [ 1136.798901] Bluetooth: hci0: command 0x1003 tx timeout [ 1136.804442] Bluetooth: hci0: sending frame failed (-49) [ 1136.878937] protocol 88fb is buggy, dev hsr_slave_0 [ 1136.884105] protocol 88fb is buggy, dev hsr_slave_1 [ 1136.889237] Bluetooth: hci1: command 0x1003 tx timeout [ 1136.894770] Bluetooth: hci1: sending frame failed (-49) [ 1137.599059] protocol 88fb is buggy, dev hsr_slave_0 [ 1137.604215] protocol 88fb is buggy, dev hsr_slave_1 [ 1137.609402] protocol 88fb is buggy, dev hsr_slave_0 [ 1137.614469] protocol 88fb is buggy, dev hsr_slave_1 [ 1138.878925] Bluetooth: hci0: command 0x1001 tx timeout [ 1138.884338] Bluetooth: hci0: sending frame failed (-49) [ 1138.959016] Bluetooth: hci1: command 0x1001 tx timeout [ 1138.964438] Bluetooth: hci1: sending frame failed (-49) [ 1140.958872] Bluetooth: hci0: command 0x1009 tx timeout [ 1141.039051] Bluetooth: hci1: command 0x1009 tx timeout [ 1141.759137] net_ratelimit: 20 callbacks suppressed [ 1141.759144] protocol 88fb is buggy, dev hsr_slave_0 [ 1141.769323] protocol 88fb is buggy, dev hsr_slave_1 [ 1141.774409] protocol 88fb is buggy, dev hsr_slave_0 [ 1141.779515] protocol 88fb is buggy, dev hsr_slave_1 [ 1142.558911] protocol 88fb is buggy, dev hsr_slave_0 [ 1142.564097] protocol 88fb is buggy, dev hsr_slave_1 [ 1142.638907] protocol 88fb is buggy, dev hsr_slave_0 [ 1142.644029] protocol 88fb is buggy, dev hsr_slave_1 [ 1142.649183] protocol 88fb is buggy, dev hsr_slave_0 [ 1142.654231] protocol 88fb is buggy, dev hsr_slave_1 12:16:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x545d, &(0x7f0000000100)) 12:16:24 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x33e) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 12:16:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80086601, 0x0) 12:16:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00 \x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 12:16:24 executing program 4: syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000080)={0x0, 0x100000001, 0x80000000, [], &(0x7f0000000040)=0x20}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r3, &(0x7f00000005c0)=[{}], 0x1, 0x0) 12:16:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000100)) [ 1144.950756] rdma_op 00000000f40ab1af conn xmit_rdma (null) [ 1144.968858] xt_cluster: node mask cannot exceed total number of nodes 12:16:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x80087601, 0x0) 12:16:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000100)) [ 1145.003488] ------------[ cut here ]------------ 12:16:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00?\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000080000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c757374657200000000000000000000000000000000000000000000000000100000000000000000000000ed000000000000000000e52c353365e39e4e00000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) [ 1145.042266] refcount_t: increment on 0; use-after-free. [ 1145.087710] WARNING: CPU: 1 PID: 30838 at lib/refcount.c:153 refcount_inc_checked+0x61/0x70 [ 1145.096255] Kernel panic - not syncing: panic_on_warn set ... [ 1145.096255] [ 1145.103644] CPU: 1 PID: 30838 Comm: syz-executor.3 Not tainted 4.19.71 #0 [ 1145.110581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1145.119944] Call Trace: [ 1145.122589] dump_stack+0x172/0x1f0 [ 1145.126295] panic+0x263/0x507 [ 1145.129502] ? __warn_printk+0xf3/0xf3 [ 1145.133407] ? refcount_inc_checked+0x61/0x70 [ 1145.137911] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1145.143460] ? __warn.cold+0x5/0x4a [ 1145.147104] ? refcount_inc_checked+0x61/0x70 [ 1145.151624] __warn.cold+0x20/0x4a [ 1145.155176] ? refcount_inc_checked+0x61/0x70 [ 1145.159683] report_bug+0x263/0x2b0 [ 1145.163409] do_error_trap+0x204/0x360 [ 1145.167323] ? math_error+0x340/0x340 [ 1145.171138] ? wake_up_klogd+0x99/0xd0 [ 1145.175029] ? vprintk_emit+0x264/0x690 [ 1145.179021] ? vprintk_emit+0x1ab/0x690 [ 1145.183004] ? error_entry+0x7c/0xe0 [ 1145.186741] ? trace_hardirqs_off_caller+0x65/0x220 [ 1145.191782] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1145.196642] do_invalid_op+0x1b/0x20 [ 1145.200367] invalid_op+0x14/0x20 [ 1145.203832] RIP: 0010:refcount_inc_checked+0x61/0x70 [ 1145.208946] Code: 1d 43 39 13 06 31 ff 89 de e8 9b b7 46 fe 84 db 75 dd e8 52 b6 46 fe 48 c7 c7 e0 29 82 87 c6 05 23 39 13 06 01 e8 7d 42 1a fe <0f> 0b eb c1 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 [ 1145.227853] RSP: 0018:ffff88808c65f888 EFLAGS: 00010282 [ 1145.233229] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1145.240514] RDX: 000000000000ec08 RSI: ffffffff8155df16 RDI: ffffed10118cbf03 [ 1145.247795] RBP: ffff88808c65f898 R08: ffff88808a67a540 R09: ffffed1015d25079 [ 1145.255095] R10: ffffed1015d25078 R11: ffff8880ae9283c7 R12: ffff88821adeb978 [ 1145.262374] R13: ffff888089317ba0 R14: ffff888089317b98 R15: ffff88821adeb8f8 [ 1145.269699] ? vprintk_func+0x86/0x189 [ 1145.273604] ? refcount_inc_checked+0x61/0x70 [ 1145.278114] kobject_get+0x66/0xc0 [ 1145.281682] kobject_add_internal+0x14f/0x380 [ 1145.286188] ? kfree_const+0x5e/0x70 [ 1145.289913] kobject_add+0x150/0x1c0 [ 1145.293637] ? kset_create_and_add+0x1a0/0x1a0 [ 1145.298232] ? rcu_read_lock_sched_held+0x110/0x130 [ 1145.303265] ? kmem_cache_alloc_trace+0x348/0x760 [ 1145.308166] get_device_parent.isra.0+0x415/0x570 [ 1145.313024] device_add+0x2f4/0x1760 [ 1145.316751] ? device_initialize+0x440/0x440 [ 1145.321176] ? get_device_parent.isra.0+0x570/0x570 [ 1145.326215] ? start_creating+0x163/0x1e0 [ 1145.330381] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1145.335955] hci_register_dev+0x304/0x880 [ 1145.340144] hci_uart_tty_ioctl+0x761/0xaf0 [ 1145.344496] tty_ioctl+0x8b5/0x1510 [ 1145.348134] ? hci_uart_init_work+0x140/0x140 [ 1145.352641] ? tty_vhangup+0x30/0x30 [ 1145.356362] ? mark_held_locks+0x100/0x100 [ 1145.360627] ? __fget+0x340/0x540 [ 1145.364134] ? __might_sleep+0x95/0x190 [ 1145.368119] ? tty_vhangup+0x30/0x30 [ 1145.371855] do_vfs_ioctl+0xd5f/0x1380 [ 1145.375762] ? selinux_file_ioctl+0x46f/0x5e0 [ 1145.380267] ? selinux_file_ioctl+0x125/0x5e0 [ 1145.384774] ? ioctl_preallocate+0x210/0x210 [ 1145.389189] ? selinux_file_mprotect+0x620/0x620 [ 1145.393982] ? iterate_fd+0x360/0x360 [ 1145.397928] ? nsecs_to_jiffies+0x30/0x30 [ 1145.402124] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1145.407678] ? security_file_ioctl+0x8d/0xc0 [ 1145.412105] ksys_ioctl+0xab/0xd0 [ 1145.415576] __x64_sys_ioctl+0x73/0xb0 [ 1145.419476] do_syscall_64+0xfd/0x620 [ 1145.423296] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1145.428510] RIP: 0033:0x4598e9 [ 1145.431712] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1145.450630] RSP: 002b:00007f8e3e01ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1145.458384] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9 [ 1145.465658] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 1145.472943] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1145.480224] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e3e01f6d4 [ 1145.487512] R13: 00000000004c25bf R14: 00000000004d5b68 R15: 00000000ffffffff [ 1145.496725] Kernel Offset: disabled [ 1145.500480] Rebooting in 86400 seconds..