program: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) (async) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xdb) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3a) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) unshare(0x22020600) (async, rerun: 32) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') (async) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$eJzs3M9LI2cYwPEnP4xJxEwOpaWF4kt7aXsYNO25EIpCaaCiplQLhVEnbcg0kUywpJRqT72W/ge97EE8ehN29x/wsrfdy1725mVhDyuL7CyZH5roJO6OZqPr9wMy78zzPOP7khieCc4c/vjvb7WKrVeMlsTTSmIiIkcieYlLIOZv4+44Jd225fOJZw8/Xlxe+a5YKs0uKDVXXPqyoJTKTd39/c+Mn7Y/Lgf5nw+fFp4cvH/w4eHLpV+rtqraqt5oKUOtNh63jFXLVOtVu6YrNW+Zhm2qat02m1684cUrVmNjo62M+vpkdqNp2rYy6m1VM9uq1VCtZlsZvxjVutJ1XU1mJUwq9OhtVd5ZWDCKEYvXrngyiOqF4zgDwk6saCREJHMuUt4Z6rwAAMC1dKb/T7gtfaT+X3Ju/99JPu3/dz+535r4YS/n9//7qbD+/6tH3rl6+v+0iFxp/58OWf35jujG23qT5Ev1/7geps5f08Z69prNopH1/35df/+0O+0O6P8BAAAAAAAAAAAAAAAAAAAAALgJjhxHcxxHC7b+zxenGd6xUc4Rw9Pn9dfG/Tumgv1RzxPDsbi8Imn3xr1kTsT6Z7O8Wfa2fjxInBZNjt33g68zDu48Uh15uWdt+fVbm+WEGylWpCqWmDIjmuTP1jvO3Lel2Rnl6a0fk2x3fUE0eS+8vhBan5LPPu2q10WTB2vSEEvWO+/rY+ek/q8Zpb75vnSmPuPmAQAAAADwLtDVidDrd13vF/fqT66ve78fEOm6Pp8OvT5Pah8lR7t2AAAAAABuC7v9R82wLLM5YJCRi3OiD5LRyscG5SS6VtgTku2+S075Twge3koHDIJ/pKilukJp+d8/HOXMwfqHM+e4RKmaEmfcm9VlfnvwtVG/HJkf9uuV7BP64L87z6OdOeY/tbc79PVe+oKVDm0w9lofHk7ikp8+AAAAAN6moOnP2O5ubNTzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAADgNhrwGLDkVT1ObNRrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6LVwEAAP//mxn/6g==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) write$UHID_INPUT(r4, &(0x7f0000001d00)={0x8, {"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", 0x1000}}, 0x1006) (async) setns(r3, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) [ 85.376789][ T5305] Bluetooth: hci0: command tx timeout [ 85.438230][ T5329] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 85.444088][ T5329] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 85.447592][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.451233][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.455390][ T5329] RIP: 0010:h5_recv+0x146/0x910 [ 85.457362][ T5329] Code: 18 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 3c ff f3 f9 4d 8b 65 00 31 ff 4c 89 [ 85.465380][ T5329] RSP: 0018:ffffc9000d24fc20 EFLAGS: 00010202 [ 85.468052][ T5329] RAX: dffffc0000000000 RBX: 00000000000002e8 RCX: 000000000000005f [ 85.471226][ T5329] RDX: 000000000000005e RSI: 0000000000000001 RDI: 0000000000000000 [ 85.474420][ T5329] RBP: ffffc9000d24fd40 R08: ffff88803f67101f R09: 1ffff11007ece203 [ 85.478124][ T5329] R10: dffffc0000000000 R11: ffffffff88335530 R12: 0000000000000001 [ 85.482146][ T5329] R13: 00000000000002f8 R14: ffff88803f671010 R15: ffffc9000d24fde0 [ 85.486317][ T5329] FS: 00007f3aba3f16c0(0000) GS:ffff88808d730000(0000) knlGS:0000000000000000 [ 85.490258][ T5329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.493034][ T5329] CR2: 00007f3aba3f0fc8 CR3: 000000004362b000 CR4: 0000000000352ef0 [ 85.496398][ T5329] Call Trace: [ 85.497897][ T5329] [ 85.499216][ T5329] ? __pfx_h5_recv+0x10/0x10 [ 85.501278][ T5329] ? rcu_read_lock_any_held+0xb3/0x120 [ 85.503579][ T5329] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 85.506047][ T5329] ? tty_audit_push+0x7c/0x250 [ 85.508015][ T5329] hci_uart_tty_receive+0x194/0x220 [ 85.510565][ T5329] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 85.513605][ T5329] tiocsti+0x23c/0x2c0 [ 85.515630][ T5329] ? __pfx_tiocsti+0x10/0x10 [ 85.517558][ T5329] ? __fget_files+0x3a0/0x420 [ 85.519428][ T5329] ? __fget_files+0x2a/0x420 [ 85.521313][ T5329] tty_ioctl+0x626/0xde0 [ 85.523179][ T5329] ? __pfx_tty_ioctl+0x10/0x10 [ 85.525811][ T5329] __se_sys_ioctl+0xfc/0x170 [ 85.528355][ T5329] do_syscall_64+0xfa/0xfa0 [ 85.530838][ T5329] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.533141][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.535688][ T5329] ? clear_bhb_loop+0x60/0xb0 [ 85.537717][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.540249][ T5329] RIP: 0033:0x7f3ab958f6c9 [ 85.542222][ T5329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.550048][ T5329] RSP: 002b:00007f3aba3f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.553175][ T5329] RAX: ffffffffffffffda RBX: 00007f3ab97e6090 RCX: 00007f3ab958f6c9 [ 85.556298][ T5329] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004 [ 85.559715][ T5329] RBP: 00007f3ab9611f91 R08: 0000000000000000 R09: 0000000000000000 [ 85.563543][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.567038][ T5329] R13: 00007f3ab97e6128 R14: 00007f3ab97e6090 R15: 00007ffd3bffaf68 [ 85.570202][ T5329] [ 85.571466][ T5329] Modules linked in: [ 85.573547][ T5329] ---[ end trace 0000000000000000 ]--- [ 85.594320][ T5329] RIP: 0010:h5_recv+0x146/0x910 [ 85.596901][ T5329] Code: 18 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 3c ff f3 f9 4d 8b 65 00 31 ff 4c 89 [ 85.604128][ T5329] RSP: 0018:ffffc9000d24fc20 EFLAGS: 00010202 [ 85.608513][ T5329] RAX: dffffc0000000000 RBX: 00000000000002e8 RCX: 000000000000005f [ 85.612019][ T5329] RDX: 000000000000005e RSI: 0000000000000001 RDI: 0000000000000000 [ 85.617162][ T5329] RBP: ffffc9000d24fd40 R08: ffff88803f67101f R09: 1ffff11007ece203 [ 85.620401][ T5329] R10: dffffc0000000000 R11: ffffffff88335530 R12: 0000000000000001 [ 85.623531][ T5329] R13: 00000000000002f8 R14: ffff88803f671010 R15: ffffc9000d24fde0 [ 85.627310][ T5329] FS: 00007f3aba3f16c0(0000) GS:ffff88808d730000(0000) knlGS:0000000000000000 [ 85.631747][ T5329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.634768][ T5329] CR2: 0000000000000000 CR3: 000000004362b000 CR4: 0000000000352ef0 [ 85.638530][ T5329] Kernel panic - not syncing: Fatal exception [ 85.641301][ T5329] Kernel Offset: disabled [ 85.642996][ T5329] Rebooting in 86400 seconds..