88fb is buggy, dev hsr_slave_0 [ 2266.198269][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2266.204146][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2266.209913][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:11:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000300)={0x3, 0x9}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x12) r2 = accept(r0, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0)={0xd74000000000, 0x8, 0x1, 0x67, 0x5fd}, 0x14) getsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000280)=0x11) dup(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2, 0x122) 19:11:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={r0}) bind$netrom(r1, &(0x7f0000000200)={{0x3, @default, 0x4}, [@null, @default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$unix(0x1, 0x801, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r3, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1ff, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000080)={0x5012, 0xffffffff, 0x7, 0x0, 0x0, [], [], [], 0x8, 0x1}) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f00000001c0)={0x0, 0x0, {0x1b, 0x5, 0x9, 0x3ff8000}}) write$binfmt_aout(r2, &(0x7f0000000000), 0xfffffdef) 19:11:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, &(0x7f0000000080)=0x2) 19:11:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2, &(0x7f0000000200)="0a36d44569f6dc1f123c123fc4dfbc93bbf8401dbdc38203fd01bf319bd0709d71cb890692ab965442900b86355c91f96239e102fb38bf00b56c404a2401e2d1") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x200, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:11:19 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0xd0500000000000, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:11:19 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) ioctl$TIOCSBRK(0xffffffffffffffff, 0x40044591) 19:11:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x5f, &(0x7f0000001340)="0adc1f123c123731b4d070") r1 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x8001, 0x8000) write$P9_RREAD(r1, &(0x7f0000000200)={0x100b, 0x75, 0x2, {0x1000, "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"}}, 0x100b) r2 = socket$unix(0x1, 0x801, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1}, 0x8) getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000001280)=0x7f, &(0x7f00000012c0)=0x4) listen(r3, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r2, &(0x7f0000000000), 0xfffffdef) r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x101, 0x2) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000001240)={0x2, 0x8}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r5, 0x4}, &(0x7f0000000180)=0x8) 19:11:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = accept4(r0, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80, 0x800) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000100)={{0x4, 0x9, 0x0, 0x4, 0x1, 0x4}, 0x80000001, 0x8, 0x81}) r2 = socket$unix(0x1, 0x801, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r3, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r2, &(0x7f0000000000), 0xfffffdef) 19:11:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x20002) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0x81}, 0x28, 0x2) 19:11:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x200000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:11:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xd7, 0x800) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:11:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x80) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0xc, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0xd, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r4}, 0x0) r5 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000001c0)={0x81, 0x1, 0x0, 0x40, 0x4, 0xff, 0x20, 0x100000000, r4}, 0x20) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000025300000000000003fe3adbc181100440e000006006a00000000eebc734bb3aa20748f6cf756b45deb99d4584bbbf6dea7921e6b58ba777a2d4accf0436a307cb749a763374b1522c2a2f8c014b15cd84f407d70bc3e"], 0xfffffdef) 19:11:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x4, 0x2200) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$unix(0x1, 0x801, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000040)={0x2, 0x1f, 0x4, 0x0, 0x0, [{r3, 0x0, 0x7}, {r3, 0x0, 0x2}, {r0}, {r0, 0x0, 0x4}]}) bind$unix(r3, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r3, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r2, &(0x7f0000000000), 0xfffffdef) 19:11:20 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x100000000000000, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2270.112447][T15681] Bluetooth: hci1: command 0x1003 tx timeout [ 2270.118560][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2270.352456][ C1] net_ratelimit: 20 callbacks suppressed [ 2270.352466][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2270.363957][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2270.369720][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2270.375496][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2270.432465][T15681] Bluetooth: hci2: command 0x1003 tx timeout [ 2270.438669][ T2697] Bluetooth: hci2: sending frame failed (-49) [ 2270.672442][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2270.678265][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2271.472391][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2271.478171][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2271.484014][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2271.489750][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2272.192412][T15681] Bluetooth: hci1: command 0x1001 tx timeout [ 2272.198537][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2272.513358][ T1398] Bluetooth: hci2: command 0x1001 tx timeout [ 2272.519487][ T2697] Bluetooth: hci2: sending frame failed (-49) [ 2274.272472][ T1398] Bluetooth: hci1: command 0x1009 tx timeout [ 2274.592501][T15681] Bluetooth: hci2: command 0x1009 tx timeout [ 2275.632447][ C1] net_ratelimit: 20 callbacks suppressed [ 2275.638134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2275.643885][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2275.649651][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2275.655395][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2275.792529][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2275.798365][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2276.592478][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2276.598314][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2276.604146][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2276.609910][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:11:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, &(0x7f0000000080)=0x2) 19:11:30 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x2000, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x16) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:11:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x100001, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:11:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) ioctl$TIOCSBRK(0xffffffffffffffff, 0x40044591) 19:11:30 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x200000000000000, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:11:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5c025d48, 0x200000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0x6}}, [0x100, 0x40, 0x3, 0x8, 0x0, 0x9, 0x4, 0x3ff, 0x4, 0xcb, 0x81, 0x6, 0x0, 0x7, 0xffffffff]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e20, 0x2, @loopback, 0x9}}}, 0x84) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:11:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:11:30 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x21) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x36) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)) 19:11:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) pread64(r0, &(0x7f0000000040)=""/69, 0x45, 0x6e3) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:11:30 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x300000000000000, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:11:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) fsync(r1) [ 2279.016990][T31327] Bluetooth: hci2: Frame reassembly failed (-84) 19:11:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x3, 0x1ff, 0xf3, 0x3, 0x19, 0x105, 0x4, 0x856, 0x1, 0x800, 0x101, 0xc78}) [ 2280.432454][ T1398] Bluetooth: hci1: command 0x1003 tx timeout [ 2280.438600][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2280.752401][ C1] net_ratelimit: 20 callbacks suppressed [ 2280.752410][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2280.763884][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2280.769657][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2280.775425][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2281.072394][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2281.072438][ T1398] Bluetooth: hci2: command 0x1003 tx timeout [ 2281.078205][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2281.086880][ T2697] Bluetooth: hci2: sending frame failed (-49) [ 2281.872390][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2281.878158][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2281.883988][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2281.889746][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2282.512478][T15681] Bluetooth: hci1: command 0x1001 tx timeout [ 2282.518576][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2283.152471][ T1398] Bluetooth: hci2: command 0x1001 tx timeout [ 2283.159475][ T2697] Bluetooth: hci2: sending frame failed (-49) [ 2284.592544][ T1398] Bluetooth: hci1: command 0x1009 tx timeout [ 2285.232632][T15681] Bluetooth: hci2: command 0x1009 tx timeout [ 2286.032424][ C1] net_ratelimit: 20 callbacks suppressed [ 2286.038086][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2286.043820][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2286.049573][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2286.055309][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2286.192450][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2286.198235][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2286.992437][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2286.998308][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2287.004142][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2287.009878][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:11:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, &(0x7f0000000080)=0x2) 19:11:40 executing program 3: readv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r0 = dup(0xffffffffffffffff) ioctl$TIOCSBRK(r0, 0x40044591) 19:11:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x5) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:11:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x402002, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000001c0)={0xd, 0xfffffffd}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ubi_ctrl\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)=0x5) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000140)) r3 = getegid() stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() setresgid(r3, r4, r5) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:11:40 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x900000000000000, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:11:40 executing program 3: readv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r0 = dup(0xffffffffffffffff) ioctl$TIOCSBRK(r0, 0x40044591) 19:11:40 executing program 3: readv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r0 = dup(0xffffffffffffffff) ioctl$TIOCSBRK(r0, 0x40044591) 19:11:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:11:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) r3 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x3, 0x20000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000480)={0x0, 0x1b, "f2e06bf561ba9005f8cf10a09324a4db5d37038b231dd8fa4e300f"}, &(0x7f00000004c0)=0x23) lremovexattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@random={'btrfs.', ')\x00'}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000500)={r4, 0x1ed97701}, 0x8) listen(r2, 0x3ff) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000005c0)=0x5) syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0xfc000000000, 0x6, &(0x7f0000000380)=[{&(0x7f00000000c0)="7e9fb6cd2be8f409b3ebd0780a840828d1bada471bf9277bdabc926ee2bb", 0x1e, 0xfffffffffffffffb}, {&(0x7f0000000100)="ba7e7fce458c4cfd82dcc20c91519ac64835022d7b5f2910fd98ff05e01ce1dbd9f1fd3fb1a8d4a696babaedb7caef4b69c5d9dced8cb4f749937804bfe25d4178e9e4fc41c367d5aaaab9092757bffa3a33c3af4cbfd1b19aa1d407eee282af403df366d5d034acd54fa6348737a5a6edbe11990142af2bda68cd2d7d014a9c047810c8f29a0dffa751e59b01feeb05ac59b148e799d0b713838b9fd6638cd13e9e4bbc79b7b5f3a73076ab29f376fd1a29685eb6dc8b4825476a8769", 0xbd, 0x8}, {&(0x7f00000001c0)="f57c79a55cb0aa21564cb5c3733bd47caa27559420cbba3d6876eec197c6929939f19110487ffa1f8c0a056dc311621aafda9e6a12e39bad3bc27b5ea15e74c11686a86080cec09d34f4c328ccd852ef94eb844ef598fc79c84d90d13e513498a9a5bcf227b6", 0x66, 0x401}, {&(0x7f0000000240)="418680efa73fe5b9dc89e235bb28cf91aef53e178579144754bb1cd90b25f1b4d68a2d0560e9fa23f9bb3891d00a5a0f8377e49c06db85eee9b040917b8aa9e70ed3034de41f6ec914a59845001e9909a1e424513d794b80c1ce4b2e81d6e04544c3cfef035bc6df6702af7e28eab51352ae407afa11ec27a131423998b0f31742a0e50f94de9d970c4464542bbfb738", 0x90, 0x1}, {&(0x7f0000000300), 0x0, 0x800}, {&(0x7f0000000340)="d15ed262289238", 0x7, 0x1fe000000000}], 0x10410, &(0x7f0000000440)='\x00') connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000600), 0x4) write$binfmt_aout(r1, &(0x7f0000000000)={{0x40000000000000}}, 0x20) 19:11:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0xfffffffffffffffc, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffffffffffffff81, 0x101080) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x101, 0x20a, 0x0, 0x3ff, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0x3ef}, &(0x7f00000001c0)=0x8) getsockname$llc(r1, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x10) getsockname$tipc(r1, &(0x7f0000000080), &(0x7f0000000100)=0x10) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000002c0)=0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0xe67d471d0ec4cc66, 0x0) 19:11:40 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x2000000000000000, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:11:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008914, &(0x7f0000000040)="0adc1f123c123f319b5d7ab3f279d5a35aed12d491e4e484d21f44e90a42e9d05139a1d912017bf96c6cd2") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) [ 2290.672372][T15681] Bluetooth: hci1: command 0x1003 tx timeout [ 2290.678531][ T8520] Bluetooth: hci1: sending frame failed (-49) [ 2291.152428][ C1] net_ratelimit: 20 callbacks suppressed [ 2291.152437][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2291.163898][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2291.169687][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2291.175491][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2291.472490][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2291.478792][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2292.272384][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2292.278212][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2292.284031][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2292.289799][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2292.752385][ T1398] Bluetooth: hci1: command 0x1001 tx timeout [ 2292.758510][ T8520] Bluetooth: hci1: sending frame failed (-49) [ 2294.832467][T15681] Bluetooth: hci1: command 0x1009 tx timeout [ 2296.432405][ C1] net_ratelimit: 20 callbacks suppressed [ 2296.438089][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2296.443844][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2296.450898][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2296.456650][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2296.592509][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2296.598328][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2297.392435][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2297.398249][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2297.404099][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2297.409887][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:11:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 19:11:50 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:11:50 executing program 2: r0 = socket$isdn_base(0x22, 0x3, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$setown(r0, 0x8, r1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000180)={[{0xffffffffffff3f92, 0x7, 0x2, 0x5, 0xdbaa, 0x9, 0x3, 0x4, 0x400, 0xc73, 0x8, 0x1000, 0x8}, {0x5, 0x3, 0x7, 0x1, 0x8, 0x1ff, 0xf1, 0xd351, 0x9e, 0x6, 0x200, 0x4, 0x8000}, {0x9, 0x0, 0x3, 0xfffffffffffffff7, 0x1, 0x100, 0x4, 0x100000000, 0xfffffffffffffffe, 0xdfe8, 0x5, 0xd5, 0x2}], 0x9}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x0) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) 19:11:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000018912, &(0x7f0000000000)="0adc1f123c123f3179d070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @remote}, 0x10, {0x2, 0x4e22, @multicast1}, 'team0\x00'}) 19:11:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x848000000015, 0x805, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000300)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000340)={@multicast2, @loopback, r2}, 0xc) getsockopt(r1, 0x114, 0x2713, &(0x7f0000af0fe7)=""/13, &(0x7f0000000000)=0xf0) r3 = socket$unix(0x1, 0x801, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@abs={0x1}, 0x6e) listen(r4, 0x0) connect(r3, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r3, &(0x7f0000000000), 0xfffffdef) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x1, {0xa, 0x4e20, 0x2, @local, 0x8}, r6}}, 0x38) 19:11:50 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x3f00000000000000, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:11:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = dup2(r0, r0) accept$ax25(r1, &(0x7f0000000140)={{0x3, @rose}, [@remote, @default, @netrom, @default, @remote, @bcast, @remote, @null]}, &(0x7f0000000040)=0x48) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) 19:11:50 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:11:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x140, 0x28) getpeername(r0, &(0x7f0000000080)=@can={0x1d, 0x0}, &(0x7f0000000100)=0x80) bind$packet(r2, &(0x7f0000000140)={0x11, 0x1c, r3, 0x1, 0x8001, 0x6, @random="f05fb9b053ad"}, 0x14) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r4, 0x0) accept$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000)={{0x0, 0x0, 0x9, 0x0, 0x298, 0x100000, 0x2}}, 0x20) [ 2298.974721][T24511] Bluetooth: hci2: Frame reassembly failed (-90) 19:11:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0xffffffffffffffff, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000080)={'teql0\x00', 0x600}) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:11:50 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:11:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdbf}) [ 2300.912373][ T1398] Bluetooth: hci1: command 0x1003 tx timeout [ 2300.918517][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2300.992373][T10408] Bluetooth: hci2: command 0x1003 tx timeout [ 2300.998519][ T2697] Bluetooth: hci2: sending frame failed (-49) [ 2301.552364][ C1] net_ratelimit: 20 callbacks suppressed [ 2301.552374][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2301.563873][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2301.569650][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2301.575440][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2301.872382][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2301.878181][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2302.672394][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2302.678181][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2302.683991][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2302.689724][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2302.992416][T10408] Bluetooth: hci1: command 0x1001 tx timeout [ 2302.998520][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2303.072412][T10408] Bluetooth: hci2: command 0x1001 tx timeout [ 2303.078523][ T2697] Bluetooth: hci2: sending frame failed (-49) [ 2305.072433][T10408] Bluetooth: hci1: command 0x1009 tx timeout [ 2305.152554][T10408] Bluetooth: hci2: command 0x1009 tx timeout [ 2306.832365][ C1] net_ratelimit: 20 callbacks suppressed [ 2306.838055][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2306.843834][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2306.849645][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2306.855455][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2306.992381][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2306.998169][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2307.792432][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2307.798226][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2307.804088][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2307.809835][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:12:00 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={r1, 0x3, 0x3363}, 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = socket$unix(0x1, 0x801, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e24}, 0x5) sendto$unix(r3, &(0x7f0000000040)="17d8f418cf1781a4f12bf61ecb827c66af7bab0da85f6bf47a99b75a90fed835a3c3a6c334dc1df8493f6a5d84ff1e9e20f96aecda893f7188", 0x39, 0x800, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000280)={0x7, 0x4, 0x80000001, 0x100000001, 0x0, 0x1ff}) listen(r4, 0x0) connect(r3, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000686392acbd55683e0fc799603d3c03c3d9bd38f821c9e585872f145f3b4b5c3da4f75808d1f682474b39fe23d761ab45c5d74c62d36eb5e03cb9e82559adcc6da3541368e956cfe3fb"], 0xfffffdef) prctl$PR_GET_FPEXC(0xb, &(0x7f00000002c0)) 19:12:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:12:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000001780)={0x0, @in={{0x2, 0x4e20, @multicast1}}, [0x1, 0x6, 0xfffffffffffffff9, 0xffff, 0xfffffffffffffffc, 0x101, 0x1b580ce2, 0x3, 0x5, 0x5, 0xffff, 0xad2d, 0x9, 0x5cc, 0x3]}, &(0x7f0000001880)=0x100) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000018c0)={0x0, 0x1000, "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"}, &(0x7f0000002900)=0x1008) sendmsg$inet_sctp(r1, &(0x7f0000002a00)={&(0x7f0000000340)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000001740)=[{&(0x7f00000014c0)="480c84a1567fa3b11a7dbaa7a705f3484c84951b1720f4b2f5073aa584773e257ebce4d194c62a846408d3339d97a3bcb62e71ec019854439c7c8e78ec3b2df66d8f034b010ffb70f5eb6a795170c556b554f4b5ce8be4702d731ab32f4b8f4368337fab7d92e4f2d9dd281ec9a464ebe9f9a5e3be416a7f68248fa7db223693c27236ea", 0x84}, {&(0x7f0000001580)="e9b243992f7ee71a7286ff77b9fbcafda928cc679b84d8869258deef4da3da715d896155bcede59803be31de53dc8193c6438a8cc844bd6b738dbb4c9fda9f32fbca1683db53621c905d20846973d322f7937540dad68a", 0x57}, {&(0x7f0000001600)="cc447233d0b8270f3e1e707ffc6e624475c0821874474730b76f6f11367bff1776a36d69827628f0d6dfdc5073efdfeba106c21b2c390225983d6e34ca1d2271e94097fea07755989b743f7d6b09fc1c7e6a5718db4b78f5d8d548ef4e6cf2a424bae431a33b7e72c79afec19d55fff25eb6be18c9b4a43f33b432a8ba00b530d82bf7ecbdfe6ee3d03849b3cd7c18307c69ef9672b1d1c9f2dfe4e5a0815c88919147", 0xa3}, {&(0x7f00000016c0)="6d20521b19ab303c3a783bdd43af14ea4dcaba543fd22085f4ae3f39a9c0d5bb02fce636fba28406303165ffbccc5add094b54ca1ce1a40f49d46f15e60f15feb5df5deefc6949b4b34814c81375751dd062fb", 0x53}], 0x4, &(0x7f0000002940)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @authinfo={0x18, 0x84, 0x6, {0x100000000}}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3f}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x5, 0x200, 0x3, 0x9, 0x1, 0xa996, 0x1, r2}}, @sndinfo={0x20, 0x84, 0x2, {0x400, 0x1, 0x7, 0x0, r3}}], 0xb0, 0x20008800}, 0x40) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)) 19:12:00 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x6112000000000000, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:12:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:12:00 executing program 5: r0 = socket(0x400000010, 0x802, 0x0) write(r0, &(0x7f00000000c0)="220000001600070700be875d09001c01020000060000000000000800050003c09144", 0x22) 19:12:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000000c2cd496f000000b32094f0b6c6e9926b31633e65f7a600000000000010"], 0xfffffdef) 19:12:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:12:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x80000001, 0x40) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000300)={0x1, [0x0, 0x0, 0x5, 0x31, 0xffffffffffff0001, 0x20000000000, 0x179, 0x100000000000, 0x8, 0x608, 0x9, 0x2, 0x9, 0x1000, 0x59ff, 0x8, 0x9, 0xf469, 0xffffffffffffff01, 0xffffffffffff0001, 0x7d0, 0x9, 0xc1, 0x6, 0x8001, 0xff, 0x6, 0x40, 0x80000000, 0x1, 0x1, 0xffffffffffffa180, 0x8, 0x2, 0xfffffffffffff000, 0x9, 0x7f, 0xa2, 0x2, 0x3f, 0x1, 0x2, 0x6, 0x2ac5, 0x7, 0xdc, 0x7, 0x3], 0x4}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000200)=""/186) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x800000000000000f) pipe(&(0x7f0000000100)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x88100, 0x0) modify_ldt$read_default(0x2, &(0x7f00000003c0)=""/183, 0xb7) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0xb) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000140)=""/10, &(0x7f0000000180)=0xa) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x40000, 0x2}) 19:12:00 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000000180)=ANY=[], 0x0}, 0x20) stat(0x0, 0x0) lchown(0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f00000004c0)='proc}GPLeth0^wlan0#:\x00', 0x0) msgget$private(0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$netlink(0x10, 0x3, 0xe) r3 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f00000000c0)={0x5, 0x81, 0x0, 0x800, 0x20}) wait4(0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x400001000) tkill(r1, 0x20) 19:12:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x8080, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x40000, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x1, r2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:12:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:12:01 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0)=0x9, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") dup(r1) r2 = socket$unix(0x1, 0x801, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r3, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="00001135003ba3509b000000050000000000"], 0xfffffdef) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) 19:12:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'veth0_to_bond\x00', {0x2, 0x4e20, @rand_addr=0x4}}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) [ 2309.383091][T20872] QAT: Invalid ioctl 19:12:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000010000000000"], 0xfffffdef) 19:12:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:12:01 executing program 5: getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000540)=""/124, &(0x7f00000005c0)=0x7c) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x660c, 0x2) setpriority(0x0, 0x0, 0x4000000000000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x4051, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0]) 19:12:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000002880)=[{&(0x7f0000000440)=""/131, 0x83}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/46, 0x2e}, {&(0x7f0000001600)=""/19, 0x13}, {&(0x7f0000001640)=""/15, 0xf}, {&(0x7f0000001680)=""/244, 0xf4}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/247, 0xf7}], 0xa) ioctl(r0, 0x2200000000001d, &(0x7f0000000400)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$FICLONE(r2, 0x40049409, r0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)=0x0) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000000c0)=r4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, r5, 0x601, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40010}, 0x4) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000140)=0x4) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:12:01 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x8000000000000000, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:12:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)=0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:12:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:12:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$SIOCAX25NOUID(r3, 0x89e3, &(0x7f0000000080)=0x1) [ 2311.472342][T15681] Bluetooth: hci1: command 0x1003 tx timeout [ 2311.478540][ T1286] Bluetooth: hci1: sending frame failed (-49) [ 2311.952638][ C1] net_ratelimit: 20 callbacks suppressed [ 2311.952644][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2311.964098][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2311.969868][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2311.975657][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2312.272367][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2312.278168][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2313.072403][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2313.078197][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2313.084074][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2313.089823][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2313.552481][ T7774] Bluetooth: hci1: command 0x1001 tx timeout [ 2313.558603][ T1286] Bluetooth: hci1: sending frame failed (-49) [ 2315.632414][T15681] Bluetooth: hci1: command 0x1009 tx timeout [ 2317.232375][ C1] net_ratelimit: 20 callbacks suppressed [ 2317.238064][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2317.243807][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2317.249569][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2317.255313][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2317.392461][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2317.398283][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2318.192379][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2318.198217][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2318.204052][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2318.209786][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:12:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x7f) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCSBRK(r0, 0x5427) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) fcntl$lock(r0, 0x3d0e143c1988d189, &(0x7f0000000040)={0x2, 0x4, 0x73, 0xfff, r1}) 19:12:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:12:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10000}) 19:12:11 executing program 5: execve(0x0, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0xfdf2) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) 19:12:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x4, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000809000000c455829a362a7cc3d28054c61800"/43], 0xfffffdef) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000040)='posix_acl_accesslo\x00', 0xffffffffffffffff}, 0x30) ptrace$setregs(0xf, r3, 0x3, &(0x7f00000000c0)) 19:12:11 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0xfeffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:12:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180), 0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:12:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x5, 0x800) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f00000000c0)=0x2, 0x4) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f00000001c0)=@ethernet={0x306, @random="99a84fcebfad"}, 0x3) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/4096) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:12:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0xffffff02, 0x800) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="517ebd761d34638642cf3974d4e9bdcd14fe85a18ed3fde3a8c03ebb3a69bd753ea7e79ffeb72f9abf2a970c6a66776c757e8ca8c4b9d9e8e0a58481c9996a458e837c4ebd4a4c4c38ed49d1e1c19db4c676e6f5100fe541f0e80eca818fa952e4a5432b3a100063025d6bc8b7d61bb7ac45a45ef6d1ae8a1857bdf753d80b9f885d1d79f0e6fb09e0cbb74e75662c209376cea3c4b7", @ANYRES16=r3, @ANYBLOB="020027bd7000ffdbdf25070000003c00030008000300000000000800080000000000080007004e230000080007004e200000080007004e24000008000500ac1e000108000400770000000800060000000080080005001e7900000800060002000000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) r4 = dup3(r0, r2, 0x80000) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000280)={0x0, 0x9, 0x3012, 0x1}) 19:12:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x100000030a) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000840)='nr0\x01\x00`\x00\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:\x97e\xa7\x1f\xbfD\x1e\x903V#\x10\x90_\xf7\xd3=M\x80cCn=\xf2\xe1u\x83=\'\xa4\xa1V\xe47y}\xd9\xf1\xa7p\xea\x86W\xd1') 19:12:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180), 0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:12:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x9, 0x0) accept4(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x80, 0x800) bind$packet(r1, &(0x7f0000000200)={0x11, 0x11, r2, 0x1, 0x7f, 0x6, @random="d7b3e93a65c9"}, 0x14) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x800000000000000e) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xb) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) dup2(r0, r0) 19:12:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x9) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'memory'}, {0x2f, 'rdma'}, {0x2b, 'rdma'}]}, 0x1a) 19:12:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x5, &(0x7f0000002680)="0adc1f123c123f319b1f16da8ea636f24f2fc7a3e8230c80f1b952810f11ce3b7f5dbb65392800000000") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast1, 0x0}, &(0x7f0000000080)=0xc) sendmmsg(r0, &(0x7f0000002480)=[{{&(0x7f00000000c0)=@hci={0x1f, r3}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="705df541169327e74da4d00a6abf7360c57cac46e2b625d1d7ccf1a460ff7494c89913582067354f65992923faf60a", 0x2f}], 0x1, &(0x7f00000001c0)=[{0x100, 0xff, 0x200, "bc79ee050fbe30b8db65fdd14a75055290af17537f532a2fbadc13d6e1cb7a4789b38cb002cc8b90464e426b7509a0013c87256fbfee34dcfb6768fd37b0bbd4d6faaddfedcc64828f3c297e883e40698a7931e9c12dd61480d1d5257f9ea6ba34e733b8dfc562f1fb0ad0a160f206986e7bc4672e2352c8f1cfcf57ab650ceaf1b687143d35e3041e4a005b58b2e0b64d7e7a08c1e604d63b4afa486de72381be3a2265ce9503a04cf8e56bc90e337f5ea2853366edf5860a9ef85f50a2b9aa9ede0be3aad6180e7597b0ef4d2e5e7206ad8ed11cd75728fb98ae3aeb8259b62ed8e317b392efc85446b80067dbfd"}], 0x100}, 0x1}, {{&(0x7f00000002c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)="8614fb4c3baadcc61b0bf0b59e55f921bd351e51d60f47bf1388ac62415b3db8eff84ad2827636311a1d6e9a2be288c19bbf8337c7ef8f5cf94425868d25c3793b0f28b116f77396ab645cb98301a5877f7a828234dc11e83a2f26ef0c73ab", 0x5f}, {&(0x7f00000003c0)="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", 0xfa}, {&(0x7f00000004c0)="49773cf47088439a41a1159524c157e8b05962a92a41c92f2493e1d35d307986693c345cb01c894753e2bca23cf77f3f65de908ca282c54ca0b0e9ed9394d1f95fa8afd70b1e14e3ab338a48ffd1911e306aca8302c8ae50f25462012865d4b1bf56457c287aca30ea9d11b63086eed65077d61cda3534ccec44b354e5b9544ba43cfdc4c272dde8fb6b973671112b45b4d50e99e38c2e095f8c9b4209eddf318f1ae3c9b3affb8b2d35f2b81f83cbf850a18fa93dfea200e043bc3fe0ff6a2be515ad", 0xc3}, {&(0x7f00000005c0)="0ac81748b0a31c75dd150cef7717dd20de0a5cb1d13f5ecd9b6886fe51874fc34b9112456818fb3fd9d3d1596974d6024b954c6b198b8244a686d5fb6f7e56a967a5374cc6a2a07c650b807e968dcb80cf02adca4e78d680fe0fd8a9a4352ca078fb4941017cff40b93a2128c06c249fabe6409707433062baf97a750742a29af65bf8040da37095395978d92b320be72ffd1edb597a55737c97f02b", 0x9c}, {&(0x7f0000000680)="dec21377e99ebd99e354ca5c6879b104a3421da63e979dc0674bcb2a54f4ea2238a109b9726f4aee2e5d2924819a3cebd9b98fe30841ea3f51022c86bda6ed8705a86feb8fdfdc961c067a432410a5b51f37a7a1d996d74503cdaa61f1b75db0e6991dc264591ee9c698bc38f4510c9ca5b5714002b96676af49fcd62757fb84017a946a54c176b1a839348d158f9bb345ede038d27e801ae55cfc04d81135b0e9ed0847ee53b9a50b711195f3e328de48a8a1e043b84c32872ae27ce9cde44ffe8558d8547ae228bdac463287", 0xcd}, {&(0x7f0000000780)="2bc3f50f1a8541eff714e65cbb5cd96c85a29363a0117c2f56b1a06dad8f06cd81b63730e506330f5b5883d0b4ce9bba4e81719e34707e3bac5c2df153d4a7fa970de7a659bdfced1369be0791c529ce8eea95ff62e1d49440a6b0aabbe0976de78441baa36003debf28bcd1d458a65bffbd65c36d5141bcd07032975141a9b635559ac44e9008416bcec5d188a13920804f2145b390c65d34da1d22380e9193e4b2856176b83fd73e113df835b8147f7a8eb1ddd8392b78a1f5fed2e4c13b87b20ad9200696ca6491dac84f71", 0xcd}], 0x6, &(0x7f0000000900)=[{0x60, 0x11f, 0x6, "3352e9cd4b042e33b90f37572743efd6c5e810bfe990e6d5c2109d37d1f301ab042d09e20aaa93d9b0c3253344840e661219bdd53a77328081c8cae53fc53032dbb71aeffe7d2c94c1d5dc879cdd2b"}, {0x88, 0x101, 0x8e, "67d9016641991c8a512f3cedac46fe3abc34d79588014873925729a8d6bc3ca74e8ae7c7fee9c97a742a2d07a611364e3a2125b1fe833163437d45c746d1991819a195fc06638d8bfddb401de8a6b43968605e140a0e887949cd83620b2aeb96352b2e4b3aa5dc629df560dc50512da9ff047117"}, {0x88, 0x13f, 0xe46, "a3ee390972ba1ec2787d7ace7bbc78d248402f21f66900e22de76a0b1ded5f179562825673f5ac03d0a0d091409d55f13235cd6fac32a52217f951cb6f4b784f8c7c7a5a50c2a3f75c850c0d745f29ef85ac7fc27437cb204482eaf8b348d420c2ac00faf6a8b8f74d66ddc4cfbe51fae01c"}, {0x88, 0x29, 0x3800, "7b7f05092e58d606313d43bb2fda57e4c3cf4b9198a2e32983b7cfd503aa80eebbeee4552d0b68a171aee9c5b4508daa4644a16a6f6c0ed8cb3f84d668e8efa8ceb5b8cb04e79b74624cfb552df29be9556498c1b20ffd9c10b09b2353116759b332bc05a69560ef27415ff93e54553cbd"}, {0xf8, 0x129, 0x6, "91d459aac051ae8f184e75a80f59d59f6797f1390a1738cda3ab9ecce00b607e49edad65ccfd22887e96cae544fa082498b630dda68e983715b1a39b26857360047aedb478ace78417e753d122ebe5fa550b8ec4a5038dce060b2c3729fbce70fd7a0adf5820647638b659e27acd9685d55db2472428176b717d1b10213255fb34458a626240a12e3205950c660b85f0e0d78a0eb46a55caf23e17bf97181305cccd1228d7c47b50bfa185edd317907f9829dec573ca54f76eeae1a219a42f6a8e7e36cd7077777c22895b0d55f8d346ac45708b85f99b68ff2bd6206bebf4abca95cb9c"}, {0x108, 0x119, 0xfff, "995d0f463eef3c34047838ec8a97fdfe9ba08cdf3d04bbdd3e83a8f025a5fe53e732ccf57f5cbed4dff35bcbbb6f552b6eb780388635117ac659a187dfe9c8b115b8b24e0b7ad60caa01c7644d485025f4bbcee15e28e133749ab3a7047876d6a10a047f5fcb9addb0b905544ca2e392542fbc414c5717a77b080f7de656ec734cebccf5c6582a69a5a65aadc3e35dfb7ef0e17aa0a63bbd7aedc7f010bd2403f6ccc68528b85473d6fca2b2c8b189237f41ac47d58704f6d2454d8fd9638e749812d9417152c74927cf8115bcb9f45b136990dc2699938c00f869e0895a11f29648534df41f6b579344e2ec395f8cc9737993b7eb0a8a"}], 0x3f8}, 0x4}, {{&(0x7f0000000d00)=@pppoe={0x18, 0x0, {0x0, @remote, 'veth1_to_team\x00'}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000d80)="5992fb44ddfe012dd4916110e0da5e3881c3b2ec2e362681a5254daa9280bc642ad5bcd02174c4341489d9c78fcf2e076aab586052698eebced32dd6563d989085ec05261f0c013e37dbb24061b78b8fa8496349110a9f529dea673a9251ff45295b687663ae40b0792af5ff2fad63a57782f9eb20f54c6490e54b27a6dc5df2b66bbd399831c1c47ab2e83c7040f1bdec82943420bf212e3e73d32c9163179530850770b97afed49fd88abe4f73d5b39784798ad071ecd815d3fcdd7184b8d531fe72121cb99a92b63d81de296490894f7a31701cd8014fb1fffd7e137902bcb00c26dcd2b6b035c0998a99daee5245", 0xf0}, {&(0x7f0000000e80)="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", 0x1000}], 0x2, &(0x7f0000001ec0)=[{0xc0, 0x108, 0x6, "2dd4393a3659b390be1839399f77a5b2bc2dfec71dcf887579c8401d680c41b6f634a8314985d0a344136ff88a44bf7943a0ffbc14882cf64bcac54200663022cc21a93c789aaaa91aed267ea1727fdfbabb780d060f768a6831eabbeffc53430e4ff062950ec69957ef714d031ec2648b88b66a9e9751008e2759e556f0c2b49414acaa0bdc5ecf1c630b4a6e8304c263d5608ba5ead9bf4f1a058fbba9d248ce16c294cf68ca9babd25f7e3fe2694a"}, {0x98, 0x114, 0x7ff, "f05b45abc85e6e6390c668b1af410c003f645922dce26827767172583f6ee8364007a5cdd2f8ad7b316c0ea899711e4c00ebf3ad3e1f450cd16182bd765ac0dc39ef2eea186a56a3fbc38443ece863062627c87b373a17f48cf47a0e10d3bae64d4675b88ff8c656de99a79288d7e71bba88269a82081cf5fe530e7a5a6116106149e3"}, {0x68, 0x11d, 0x200, "edae49150e6d10da469dd6c323cfa978dacfea8b1e614022bbff0ac6a9a9dc985db29cc097ae311b4e39f111361f16625746a14a09d93414c1b62e07846665e7a16287cf118ae64efa8e53318370ed2c74"}, {0x78, 0x101, 0x80, "4dea6a2521485c39835fe8e40151a72d0f84af6db6407098057db639297406b78a67df3b9853dd3a05bb226d550104428e26f2fdb53c17f6e3aaa9902522a388eada5b4ace2f4bf7c5e7c407620feeaabec19be8d1de188fbaaa7067b751db9b36124f3200edf62e"}, {0x38, 0x84, 0x40, "9ab16d3a98e94752ff75dab48a4bb1ae947a95d3f40320b01398fe7f4f8b91225639dd"}, {0x88, 0x115, 0x1, "67950478bc1a39eb95c5303013eefcd5c7c0bc64fa42e2a74b11a05067823c08e21752749d474c5f073f8a877f4071eaf9016af352b7cb576264d40995564a8f0fed9b061b8daad8f02849e325534e2ca8e80793a99b333422c69438fc4c71966ccee78ec7c64ab948cb52bea7d17fd426151d9b"}, {0x50, 0x0, 0x2, "84fff5fd70d502d4238d3321d7c0c60746b1c1c492891592ce1a67cd783160d45ff1313c6b3941da59b80b35360ffc63d805dfeb05780293c6dba959d7cbd989"}, {0x28, 0x0, 0x1780000000000, "7c2e3cb9e5953f8d4599be8c7f4ba3c2be77bb"}], 0x370}, 0x1}, {{&(0x7f0000002240)=@generic={0x0, "e733f4f834e7ef9c1f62a6edb09be280a6a718c1aade22412c8a02aa9d687664dfdb06865515ae56c3ef902671dde75949731dfc5102fcef89379b345ad7343f8bae613a3c2356298d0a03960da23ea0e71d1057278da5822805755bd3c056b5734f63f76d5af058d1f6dc2c3424b27e5139e5cd3e9f1957311ca217ac0e"}, 0x80, &(0x7f0000002440)=[{&(0x7f00000022c0)="ccf5e9713bb972ac29066c7448d6196751ad1732d8b1de324f78ee9e846b214e609a624d44121f0cae57a1f4d806c84a6eab9962271958271db568625bcb62e4444c1ea64b5445d01a957d4e7c54784a4d422a003362b185f2afc0ab", 0x5c}, {&(0x7f0000002340)="e90e05fed759984c4ddfa2ad5c351a34b9a498202e936b809e7aaeeda0a5c60105e14381b0a0170073c124e293eb146f1dce547fb61ee817278db2b8fef16e5066d95c93af015abb45ac1b0520c83f7a1119d587159b4df20078386c33ad6559eb1820ecb36a292121e2875a4c0ff415fa12e8d19debfd820e2346213a3d2037a9a17a7ec68245b35dd100d61d74459ee49c6bd4f0f5d08d101618cae9e2af6527e2a20660d5bb2c5f85bff71f1b1004da98d5d801c3af56baf8890eacffd05559d93ca7189ccc0496fea6da53728e007798efa94fe94b2eacb68648ca3ebb2b1c999a54826abac3f45a51d82ef794c8af55dbb8ed8ed91b", 0xf8}], 0x2, &(0x7f0000003080)=[{0x30, 0x3b, 0x8, "cf03f95942fa3abac2bf7de903036eac5c6c6fda13c3851dfc227a6b665d"}, {0xb0, 0x111, 0x938, "60f71380edeae1f25a2ccc5919a2e7784723ad40842e207bdd03370b8fc9cbf8a6f6fa76ba6349bca8b9e0dc199df77c34f6ae15145b340c7e80c3dc2ef12520aa701383ebbefa3f9c735150cb3342e90e2ffad86dbd4ea36fbebf29a1e1e538f953809dc0f20c475dfa3a773afd4f4c2539b21a2bb4e461b382f300233255cc6279e59ff5e90d5661b95cf337abc9713e17bb2b028fceb2ecc8"}, {0x70, 0x117, 0x2, "6abffc90c6c2f1f7e4f3e00220df275ae1db38c71c78a1f95b39b4abb4875cdba068cc98cb4ff094a53f4cf4a6008645138748261ebaa34df7e05441f2fc02527148e07fa5db111f174b504880cc681ac77c089b8be646902605c885cc10d0"}, {0x10, 0x116, 0x88b}, {0x1010, 0x113, 0xff, "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"}, {0xa8, 0x109, 0x623, "27bba2ab7ffb40327b54ebf6e70ad1139bde21dff3572e32fa6a808c2b374cdc0f6f299823fdf49c0a3a739429862e227b49e7c334a63ed5f11b325f1165000a3731b68f4aaa4caaeb76798ae148ab2919f3d4e275a48bc995ded8bc3a56021eb4e163b4d49537e2fe1b07e7808f2252fe1e48239d59b642b62a3c380cc79c5be263043b816bb28939e7366dfcd8935efb"}], 0x1218}, 0x1f}], 0x4, 0x20008004) ioctl(r0, 0xffffffff, &(0x7f0000002580)="8a3764c60bd13f003916fc68539519a308f256572a00391cc576806f2ba408868ac0aa16db4af602114cfe347085207c1c68da0f9c79d21044536fe0b98db4888c36a635515fbc67a25a86f61f8fdbf14a65c7dfcb8102a735e0507173") bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="00695491bfc2a734bda2000000000000001c000f00e8000000010000000000"], 0xfffffdef) 19:12:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180), 0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:12:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x7f, 0x9}, 0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xb) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x28, &(0x7f00000001c0)}, 0x10) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) [ 2320.551914][T30390] Bluetooth: hci1: Frame reassembly failed (-84) 19:12:12 executing program 5: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7}, 0x7) 19:12:12 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0xffefffffff7f0000, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:12:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{0x0}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:12:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r0, 0x89e7, &(0x7f0000000180)="eda501ab70aa080031f46805c09cd64a6caea6458457c5f3ef5f9f5d2ac6536f12c42acad7c1c4230af6b25a194f6d56d969c80a9715db1d8f229b54b5273c273105e7b4140fcd37a6501eb99f82127466b130b104001f6ab9367f772354555b2efb95fcdb05ccd3ee8e147e89cf5dd3352e363219a2f921005548009aea58dbf5d69d3d3c96572d1e57455301d82e0179d47c22ddf1d56854be27331eac865c5233291223696a4a73c3f6833f1f5732032be7a9537b3dc487387bd039f0842ea473c8d4f49207f8dcb1fec6250715be00a134fda53995df4ac139e5433d7721e0bf0a8e1e5372f99547") ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x24) connect$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, {0x101, 0x0, 0x400, 0x7fffffff, 0x8, 0x9}, 0xffffffffffffffff}, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) 19:12:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}}, 0x88) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:12:12 executing program 5: r0 = semget$private(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(r0, 0x0, 0x10) 19:12:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{0x0}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:12:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x7ff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) r3 = syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x3f, 0x1) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000080)={"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"}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000540)={0x0, 0x6, 0x3, [0x80000001, 0x3, 0x3]}, &(0x7f0000000580)=0xe) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000005c0)={r5, @in={{0x2, 0x4e24, @rand_addr=0x80000001}}, 0x9, 0x6}, &(0x7f0000000680)=0x90) [ 2322.353252][ C1] net_ratelimit: 20 callbacks suppressed [ 2322.353258][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2322.364750][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2322.370543][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2322.376367][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2322.592333][ T7774] Bluetooth: hci1: command 0x1003 tx timeout [ 2322.598498][ T1286] Bluetooth: hci1: sending frame failed (-49) [ 2322.672328][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2322.678097][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2323.472342][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2323.478161][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2323.484008][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2323.489752][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2324.672402][ T7774] Bluetooth: hci1: command 0x1001 tx timeout [ 2324.678517][ T1286] Bluetooth: hci1: sending frame failed (-49) [ 2326.752366][ T7774] Bluetooth: hci1: command 0x1009 tx timeout [ 2327.632362][ C1] net_ratelimit: 20 callbacks suppressed [ 2327.638050][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2327.643850][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2327.649667][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2327.655439][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2327.792388][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2327.798218][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2328.592380][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2328.598245][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2328.604093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2328.609837][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:12:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 19:12:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x1) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x100000010000000, {0x300000000000000}}, 0xfffffefd) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x4}}, 0x30) 19:12:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x1, {0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80000000000}, r1}}, 0x38) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:12:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) socket$unix(0x1, 0x7, 0x0) listen(r2, 0x0) prctl$PR_MCE_KILL_GET(0x22) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:12:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{0x0}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:12:22 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0xffffff7f00000000, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:12:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x100, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:12:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(0xffffffffffffffff) ioctl$TIOCSBRK(r1, 0x40044591) 19:12:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) r3 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000140)) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) r4 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x2000) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5c67, 0x8000000000, 0x0, 0x1, 0x7ff, 0x9, 0x6, 0x1, 0x3, 0x101, 0x7fff, 0x6, 0x4}, {0x80000001, 0x200, 0x0, 0x10000, 0x6, 0x7, 0x7620, 0x0, 0x5, 0x0, 0x2, 0x9, 0x7}, {0x0, 0x3, 0x8, 0x7, 0x1, 0x577c, 0x3, 0x5, 0x400000, 0x3, 0x0, 0x9, 0x6}], 0x1}) 19:12:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0xf2, 0x282) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x144, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xce23}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2ae}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x714db36}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f7c}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x83}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:12:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:12:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x7f) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) [ 2332.752354][ C1] net_ratelimit: 20 callbacks suppressed [ 2332.752364][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2332.763904][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2332.769731][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2332.775538][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2332.992332][T10408] Bluetooth: hci1: command 0x1003 tx timeout [ 2332.998493][ T1286] Bluetooth: hci1: sending frame failed (-49) [ 2333.072351][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2333.078147][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2333.872296][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2333.878076][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2333.883923][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2333.889654][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2335.072460][T10408] Bluetooth: hci1: command 0x1001 tx timeout [ 2335.078590][ T1286] Bluetooth: hci1: sending frame failed (-49) [ 2337.152412][ T7774] Bluetooth: hci1: command 0x1009 tx timeout [ 2338.032368][ C1] net_ratelimit: 20 callbacks suppressed [ 2338.038070][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2338.043898][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2338.049736][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2338.055519][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2338.192345][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2338.198131][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2338.992349][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2338.998193][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2339.004046][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2339.009800][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:12:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x109000, 0x0) [ 2343.072393][T23652] Bluetooth: hci1: command 0x1003 tx timeout [ 2343.078552][ T1286] Bluetooth: hci1: sending frame failed (-49) 19:12:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x14, 0x1e, 0x400000000000109}, 0x1da}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 19:12:34 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0xffffffff00000000, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:12:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) r2 = fcntl$dupfd(r0, 0x406, r0) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000100)=0x3ab8, 0x4) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:12:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000230000000000000000f100"/32], 0xfffffdef) socketpair(0x2b5d4ba6bb1d65c, 0x807, 0x2, &(0x7f0000000480)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000004c0)={0x0, 0x7}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000540)={r4, 0x4}, 0x8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) bind(r2, &(0x7f0000000180)=@xdp={0x2c, 0x7, r5, 0x37}, 0x80) 19:12:34 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(0xffffffffffffffff) ioctl$TIOCSBRK(r1, 0x40044591) [ 2343.152333][ C1] net_ratelimit: 20 callbacks suppressed [ 2343.152341][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2343.163833][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2343.169701][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2343.175560][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:12:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000020000000000000000"], 0xfffffdef) 19:12:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x13b, 0x9, 0x820, 0xffffffffffffffe5, 0x0, 0x80, 0xa00, 0xb, 0x0, 0xcee, 0x5, 0x0, 0x7ff, 0x4, 0x3, 0x2, 0x1d6, 0x20, 0x20, 0x80, 0xfffffffffffffffd, 0x3f, 0x9, 0x9, 0xd54, 0x9, 0x7, 0x1f, 0x2, 0x8001, 0x7, 0x1, 0x101, 0x100000000, 0x3, 0x7, 0x0, 0x1, 0x3, @perf_config_ext={0xe90, 0x4}, 0x200, 0xc3d1, 0xcb, 0x0, 0x0, 0x3e1c, 0x7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:12:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000040)={'veth1\x00', @ifru_map}) 19:12:35 executing program 5: r0 = socket(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000034c0)={@local, @mcast2, @empty, 0x0, 0x40, 0x0, 0x100, 0x40, 0x206}) 19:12:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) socketpair(0x0, 0xe, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000080), 0x10) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000cd2fbeb1fa2ca45a000000002000000000008000baca1bae6cbe9b200000"], 0xfffffdef) 19:12:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="de00000000000000000000000000000000000000000000000000000000c90000c8f16851dd526efaa836ebe0deddc0a46ea58fa3d94660fd0d8e2f13afda694cf38f603954a6de74a2f19bf643447046398aa741ad0de8e614de3a9c089b19d5234787e445ab2b6a6dc936c12b28d13d049df9320a6f280ecb844cb350b002c833bd7d2321a8552a00000000000000"], 0xfffffdef) [ 2343.472373][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2343.478729][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2344.272307][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2344.278077][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2344.284049][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2344.289935][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2345.152529][T23652] Bluetooth: hci1: command 0x1001 tx timeout [ 2345.158644][ T1286] Bluetooth: hci1: sending frame failed (-49) [ 2347.232422][ T7774] Bluetooth: hci1: command 0x1009 tx timeout [ 2348.432371][ C1] net_ratelimit: 20 callbacks suppressed [ 2348.438083][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2348.443883][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2348.449641][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2348.455401][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2348.592370][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2348.598195][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2349.392405][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2349.398252][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2349.404089][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2349.409848][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:12:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000140)=""/167) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01082a000000010000000c00"/38], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffffffffffff) 19:12:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008032, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x10000000002) 19:12:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xffffffffffffffff, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:12:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000e50000000095c5507bb9d0c125d113e241cb579e5a248ff1dd92d6bf0e9b042840676f04000000"], 0xfffffdef) 19:12:42 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0xffffffffff600000, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:12:42 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(0xffffffffffffffff) ioctl$TIOCSBRK(r1, 0x40044591) 19:12:43 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="83f939dff33aa1c5a6c48f72e9435d14a82f2b1520aadccaebddc4f1813c203f54c901305b2ffbe71bd5fc446edbfaaad787650f7a3e2392527178b909e49dde666e2b81304404118d9356f9f36a8e520d8d9cf0727d2be13a8d2075eff7c1a5e9271dee9a2a6746b6c4cb34e92a925e4676be579786ae99233a1357c58d07e0e72978c8fc8a6d04c58b0d028810973ece67e59c374a60914badf6589d3cff0f3cbd287933f72e363e32644f18aaedcf261a2aee7bd2ec0cb873a83dae8e6b1d161501c81ae5cd84f848beb01b2698417a6acba033b10eb829f3faf597843ff9b8c2bc4bc6a30b552ec8d66ff12bb2", 0xef, 0xe4}], 0x2000, 0x0) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r0, &(0x7f0000000000), 0xfffffdef) getpid() 19:12:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x2000000000f) ioctl$TCSETXF(r0, 0x5434, &(0x7f0000000040)={0x100, 0x8001, [0x9, 0x302, 0xfffffffffffffffe, 0xff, 0x1], 0x4}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:12:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6}) [ 2351.635677][T30390] Bluetooth: hci1: Frame reassembly failed (-84) 19:12:43 executing program 5: 19:12:43 executing program 5: 19:12:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x101, 0x4000) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:12:43 executing program 5: 19:12:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x2, 0x0) unlinkat(r2, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x44000, 0x0) 19:12:43 executing program 5: 19:12:43 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0xfffffffffffffffe, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:12:43 executing program 5: 19:12:43 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) dup(r0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x40044591) 19:12:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x40000000000007, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000001140)='/dev/snd/pcmC#D#c\x00', 0x7ff, 0xa4000) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1}, 0x8) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000001080)={{0x2, 0x4e24, @empty}, {0x306, @local}, 0x8, {0x2, 0x4e23, @rand_addr=0x1}, 'gre0\x00'}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000001180)={0x0, 0x3f, 0x30, 0x32, 0x5}, &(0x7f00000011c0)=0x18) finit_module(r1, &(0x7f0000001240)='gre0\x00', 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000001200)={r4, 0x401, 0xffffffff, 0x8, 0xe9b, 0x3}, 0x14) listen(r3, 0x0) getsockopt$netlink(r1, 0x10e, 0xc, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001100)={'ip6_vti0\x00', 0x1000}) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="e0ffffffffffffff00"/19], 0x20) [ 2353.552322][ C1] net_ratelimit: 20 callbacks suppressed [ 2353.552331][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2353.563896][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2353.569666][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2353.575447][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2353.712262][ T7774] Bluetooth: hci1: command 0x1003 tx timeout [ 2353.718445][ T1286] Bluetooth: hci1: sending frame failed (-49) [ 2353.872341][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2353.878192][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2354.672325][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2354.678210][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2354.684029][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2354.689812][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2355.792377][ T7774] Bluetooth: hci1: command 0x1001 tx timeout [ 2355.798489][ T1286] Bluetooth: hci1: sending frame failed (-49) [ 2357.872377][ T7774] Bluetooth: hci1: command 0x1009 tx timeout [ 2358.832300][ C1] net_ratelimit: 20 callbacks suppressed [ 2358.837984][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2358.843772][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2358.849573][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2358.855352][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2358.992371][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2358.998192][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2359.792332][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2359.798166][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2359.804009][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2359.809767][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:12:53 executing program 5: 19:12:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x8000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0xff, @mcast1, 0x8}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x1, @empty}, @in6={0xa, 0x4e24, 0x7, @local, 0xdbb0}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e21, @broadcast}], 0xb4) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000009000d5a67000000000000008000"/32], 0xfffffdef) 19:12:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 19:12:53 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:12:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) write$FUSE_LK(r0, &(0x7f0000000140)={0x28, 0xfffffffffffffff5, 0x1, {{0x800, 0x8001, 0x0, r1}}}, 0x28) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket(0x11, 0x5, 0x9) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000480)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000005c0)=0xe8) recvmmsg(r0, &(0x7f0000003400)=[{{&(0x7f00000006c0)=@pppol2tpin6, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000740)=""/115, 0x73}, {&(0x7f00000007c0)=""/143, 0x8f}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/33, 0x21}, {&(0x7f00000018c0)=""/228, 0xe4}], 0x5, &(0x7f0000001a40)=""/99, 0x63}, 0x10000}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001ac0)=""/173, 0xad}, {&(0x7f0000001b80)=""/233, 0xe9}, {&(0x7f0000001c80)=""/54, 0x36}, {&(0x7f0000001cc0)=""/101, 0x65}, {&(0x7f0000001d40)=""/115, 0x73}, {&(0x7f0000001dc0)=""/72, 0x48}, {&(0x7f0000001e40)=""/192, 0xc0}, {&(0x7f0000001f00)=""/21, 0x15}, {&(0x7f0000001f40)=""/177, 0xb1}, {&(0x7f0000002000)=""/189, 0xbd}], 0xa, &(0x7f0000002180)=""/137, 0x89}, 0x30d2}, {{&(0x7f0000002240)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000033c0)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/204, 0xcc}], 0x2}, 0x7}], 0x3, 0x100, &(0x7f00000034c0)) accept4$packet(0xffffffffffffffff, &(0x7f0000003500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003540)=0x14, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003580)={0x11, 0x0, 0x0}, &(0x7f00000035c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003600)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000003700)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000003740)={0x11, 0x0, 0x0}, &(0x7f0000003780)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000037c0)={@initdev, 0x0}, &(0x7f0000003800)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000038c0)={0x0, @remote, @initdev}, &(0x7f0000003900)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003940)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000003a40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003a80)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000003b80)=0xe8) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000040c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10100}, 0xc, &(0x7f0000004080)={&(0x7f0000003bc0)={0x4b8, r3, 0x11, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x1dc, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xa4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r9}, {0xc0, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r10}, {0x1f0, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x5, 0x2a0, 0x8b18, 0x9}, {0x0, 0x0, 0x9, 0x12e}, {0xb4, 0x16, 0x7f, 0x2}, {0x101, 0x6, 0x20, 0x5}, {0x1f, 0x250e, 0xfd9, 0xa7f2}, {0x400, 0x1, 0x7fffffff, 0xfffffffffffffff8}, {0x7, 0x1ff, 0x7, 0x7fff}, {0xc8a, 0x4, 0x10001, 0x2}, {0x0, 0x6, 0x11f, 0x8b9}]}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) fcntl$setsig(r0, 0xa, 0x40) r14 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r14, 0x84, 0x77, &(0x7f0000000280)={r15, 0x1, 0x2, [0x1, 0x2]}, &(0x7f00000002c0)=0xc) r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r16, 0x5423, &(0x7f00000000c0)=0x800000000000000f) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x100, 0x0) ioctl$TIOCPKT(r16, 0x5420, &(0x7f0000000300)=0xfffffffffffffffd) fstatfs(r16, &(0x7f0000000340)=""/229) ioctl$TCSETSF(r16, 0x5404, &(0x7f0000000080)) 19:12:53 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) dup(r0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x40044591) 19:12:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/150, 0x96}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000007, 0x0) 19:12:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000400)={0x7, 0x1, 0x3, 0x0, &(0x7f00000003c0)=[{}]}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200000, 0x0) r4 = msgget(0x3, 0x80) msgrcv(r4, &(0x7f0000000480)={0x0, ""/178}, 0xba, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000180)={0x3, @local}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000300)={r5, 0x1, 0x6, @broadcast}, 0x10) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x8) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000100)) [ 2362.246355][T31327] Bluetooth: hci1: Frame reassembly failed (-84) 19:12:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x800, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r6 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xb15, 0x8000) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)={0x3ff, 0x1, 0x4, 0x800f0000, {r4, r5/1000+30000}, {0x5, 0x0, 0x200, 0x5, 0xfffffffffffffffe, 0x3, "2a31c0f4"}, 0x8, 0x7, @fd=r6, 0x4}) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:12:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, 0x0) 19:12:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000140)=0x7ae469b) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:12:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0xfffffffffffffffa, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) socket$unix(0x1, 0x31e6656768755121, 0x0) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="17d885e58883d0b35b1e1d2f4950afd3ae02eb5253de0638727aba907cee23758eefdc87a48c7059334ed371f8120efdd8a75606a487641b72f1ee1326912b0efc93cecd", 0x44, 0xfffffffffffffff8) keyctl$setperm(0x5, r3, 0x10000000) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:12:54 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x3) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:12:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) [ 2363.952297][ C1] net_ratelimit: 20 callbacks suppressed [ 2363.952304][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2363.964027][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2363.969908][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2363.975768][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2364.272324][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2364.278116][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2364.284019][T23652] Bluetooth: hci1: command 0x1003 tx timeout [ 2364.290137][ T1286] Bluetooth: hci1: sending frame failed (-49) [ 2365.072253][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2365.078036][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2365.083883][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2365.089634][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2366.352372][ T7774] Bluetooth: hci1: command 0x1001 tx timeout [ 2366.358490][ T1286] Bluetooth: hci1: sending frame failed (-49) [ 2368.432448][T23652] Bluetooth: hci1: command 0x1009 tx timeout [ 2369.232277][ C1] net_ratelimit: 20 callbacks suppressed [ 2369.237945][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2369.243709][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2369.249480][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2369.255209][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2369.392381][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2369.398173][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2370.192367][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2370.198257][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2370.204132][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2370.209898][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:13:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) ioctl$KDSETMODE(r0, 0x4b3a, 0x4) 19:13:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1800008912, &(0x7f00000000c0)="1098ce66000000007be070") ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @rand_addr=0xfffffffffffff182}, {0x2, 0x0, @empty}}) 19:13:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2, &(0x7f0000000100)='\x00'/11) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:13:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) fchdir(r1) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000010100000000000000000000001e00000000000000000000000061085d30c69097705d92c210ed1d4a585b119ebc231210995a6b7763c44260c03032b941292db4229821e407875eff8c5a549829e815db386447b2c9a45a310d4a65bafc0e730e2c9f088990a1a585bd25be0a412a2215de7fbc62b17fa2ca14e1c6281b4dd19d0aa20235f4f95131e17c25507ef16fcdbd3f3357b47de5eb835d6211dcd46345942846fa2539"], 0xfffffdef) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x6000, 0x0) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000080)=0x3f, 0x2) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 19:13:04 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:13:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) dup(r0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x40044591) 19:13:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 19:13:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 0x80}, "296185eb0d822166e9ec2987cd70ccb8b2ed8c30b56461145f70f84bd2fcad5975c3fbfffffff6b5573d57f307ee35f0056ac861b942f6ae5a3187b72e2f89436bc2a11e86f374fc5dc9ea526b78db8615f6daf553a822a207d7c0d33748044dcdfe81f9846d36a95fa181c664d58bd8a5c448"}, 0x93) 19:13:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) write(r0, &(0x7f0000000100)="6c0c3634ffb7ca3ffda457ddb371f2a59ee8bc251f9de57c0a7d1c29fa329613d1cf840860a802d230098721bfcb796845a77b56670fe19ea15271d30a25d631b4ac1997096f21e929dc33742239d9cceea8021ee93912f99cb68b571e727320ccd1779d032730b416", 0x69) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:13:04 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x9) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:13:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={r1}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x6, 0x1, 0x80000001, 0x9, 0x7ff}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={r4, 0x9f}, &(0x7f0000000140)=0x8) 19:13:04 executing program 5: request_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000280)='keyring\x00', 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000040)="b3", 0x1, r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") request_key(&(0x7f0000000340)='user\x00\xd2HO\x96\xdd\xa6VA/\xd2\xfaQ\xdd4\xa5\xab\t\v\xd0\x8c\x90\xb1\xfc\a\xeb\b(\xbcG\x0fv\xe6f\x00\xed-\xe1\xc9\r8\xc2Z\xb5\xd6,\xb2\xb67\x8f\xc6\x9a\xf3F\xf9\'\xbc\xb4\xc1\"\xd3;\xc8\xa1xT\xfa1{`\x93\x9f\xde\x04\x1a\xc7\x8b\x86\xa0\rK&k\x04-\xea_%t\xf8\xf0\xa9\xb0\xfb\x81\x12\x02\xb9L\x86\xf7\xd8FF\xd0\x19\xf8\r\\(S\xb7\x9c\xc0\xea\xe7\xe4\xfa\xac\xd8\xd6o\b\xbf1$ \xb8\xfa%\x8e\xc9\xb8\x18\xe6\x12r,Y\x02\xc3\xadU\xeb\xa4\xe8\x06\xc9\xee4\xf9\x94\x1du\x8d\x97\xed\x97xc\xca\x8c\xbf>\x98\xfe9+|\x85\x8fnw(\xb3;\xc9\xdc\x82\xb9\xf4|?g\xfcz6\x1a\xe1\x0eB\xc8D|\xe7\xd3\x94\x97\xba\xa64\xb5\x0f8\x03K', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0) [ 2374.352349][ C1] net_ratelimit: 20 callbacks suppressed [ 2374.352358][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2374.363884][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2374.369662][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2374.375480][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2374.512266][ T3878] Bluetooth: hci1: command 0x1003 tx timeout [ 2374.518450][ T1286] Bluetooth: hci1: sending frame failed (-49) [ 2374.672287][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2374.678065][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2375.472262][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2375.478089][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2375.483938][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2375.489731][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2376.592272][ T3878] Bluetooth: hci1: command 0x1001 tx timeout [ 2376.598395][ T1286] Bluetooth: hci1: sending frame failed (-49) [ 2378.672302][T23652] Bluetooth: hci1: command 0x1009 tx timeout [ 2379.632269][ C1] net_ratelimit: 20 callbacks suppressed [ 2379.632276][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2379.643736][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2379.649504][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2379.655268][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2379.792334][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2379.798111][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2380.592294][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2380.598139][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2380.604012][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2380.609809][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:13:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:13:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x40, &(0x7f0000000280)="0adcd0700000402c8bf03c952696abec8d000000000000") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) r2 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x105080, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x248, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x104, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4af}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3617617a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x63}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2835}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6d5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5107}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0xec, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffc00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5d2}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:13:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 19:13:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x101, 0x5, {0x2c9b, 0x8, 0x4}}) write$binfmt_aout(r1, &(0x7f0000000040), 0x20) 19:13:14 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0xfe) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:13:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x2000000000f) ioctl$TCSETXF(r0, 0x5434, &(0x7f0000000040)={0x100, 0x8001, [0x9, 0x302, 0xfffffffffffffffe, 0xff, 0x1], 0x4}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) [ 2382.698069][T31327] Bluetooth: hci1: Frame reassembly failed (-84) [ 2382.698093][T30390] Bluetooth: hci2: Frame reassembly failed (-84) 19:13:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000000001000"/32], 0xfffffdef) 19:13:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCCBRK(r1, 0x5428) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:13:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x100, 0xc00) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000080)={0x7, {{0xa, 0x4e23, 0xbb18, @mcast1, 0xffffffff80000000}}}, 0x88) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:13:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_out(r1, 0x5462, &(0x7f0000000100)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:13:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x7fe, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xfffffdef) 19:13:14 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x300) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2384.752299][ C1] net_ratelimit: 20 callbacks suppressed [ 2384.752309][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2384.763857][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2384.769655][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2384.775448][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2384.781303][T27474] Bluetooth: hci3: command 0x1003 tx timeout [ 2384.787461][T11878] Bluetooth: hci3: sending frame failed (-49) [ 2384.794040][T27474] Bluetooth: hci2: command 0x1003 tx timeout [ 2384.800048][T27474] Bluetooth: hci1: command 0x1003 tx timeout [ 2384.800178][T11878] Bluetooth: hci2: sending frame failed (-49) [ 2384.812812][T11878] Bluetooth: hci1: sending frame failed (-49) [ 2385.072283][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2385.078126][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2385.872260][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2385.878056][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2385.883845][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2385.889593][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2386.832357][T23652] Bluetooth: hci1: command 0x1001 tx timeout [ 2386.832830][T27474] Bluetooth: hci3: command 0x1001 tx timeout [ 2386.838436][T11878] Bluetooth: hci1: sending frame failed (-49) [ 2386.849958][T28310] Bluetooth: hci3: sending frame failed (-49) [ 2386.850695][T23652] Bluetooth: hci2: command 0x1001 tx timeout [ 2386.862678][T28310] Bluetooth: hci2: sending frame failed (-49) [ 2388.912348][T23652] Bluetooth: hci1: command 0x1009 tx timeout [ 2388.912565][T27474] Bluetooth: hci2: command 0x1009 tx timeout [ 2388.924574][T27474] Bluetooth: hci3: command 0x1009 tx timeout [ 2390.032245][ C1] net_ratelimit: 20 callbacks suppressed [ 2390.032251][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2390.043728][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2390.049527][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2390.055361][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2390.192320][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2390.198125][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2390.992339][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2390.998263][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2391.004153][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2391.009953][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:13:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket(0x8, 0x5, 0x1ff) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x40, {{0xa, 0x4e24, 0x5, @ipv4={[], [], @local}, 0x5}}, {{0xa, 0x4e23, 0x7fffffff, @empty, 0x4}}}, 0x108) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:13:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x408) listen(r0, 0x2) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:13:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x1f, 0x7, 0x22a) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:13:24 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x900) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:13:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x50001, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000140)={{0x0, 0x7}, 'port0\x00', 0x12, 0x80000, 0xbc, 0x401, 0x2, 0x6, 0x1, 0x0, 0x2, 0x3}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:13:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64EXEC\x00', &(0x7f0000000140)='/dev/ptmx\x00', 0xa, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) [ 2393.043537][T24511] Bluetooth: hci1: Frame reassembly failed (-84) [ 2393.043829][T31327] Bluetooth: hci3: Frame reassembly failed (-84) 19:13:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1b) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x2080, 0x0) getsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x1f8}, 0x8) fsetxattr$security_smack_entry(r1, &(0x7f0000000180)='security.SMACK64MMAP\x00', &(0x7f0000000340)='em1f-procem0\x00', 0xd, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x800, @empty, 0xffffffffffff0001}, {0xa, 0x4e21, 0x873f, @ipv4={[], [], @empty}, 0x1}, r4, 0x7}}, 0x48) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000440)={'broute\x00'}, &(0x7f0000000040)=0x78) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:13:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0xa102, 0x0) recvfrom$rxrpc(r2, &(0x7f0000000080)=""/184, 0xb8, 0x40, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0xa9, @loopback, 0x4}}, 0x24) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r3, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000180)=0x6) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:13:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x101002, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000003c0)=""/4096) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:13:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000080)=0xfffffffffffff782, 0x4) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000100)={r2, r3, 0x8, 0x33, &(0x7f00000000c0)="ade091095227b9cae5a35dff27fdeb45cba053beb0b37c26baa87705fdbd2a524202bcd81225ad577bb0885491c3b89dbfa715", 0x8901, 0x5, 0x6, 0x7f, 0xff, 0x1, 0xd763, 'syz0\x00'}) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/32], 0xfffffdef) write$ppp(r3, &(0x7f0000000280)="9c16383c9486b7a66c8c3a4635b78672da00f51bca45965f9709810bafc804d1afa778851be222eecc4012858d991788ea1294e1bd1b1934cf089de11a1138bca2b4bc09918a1519b5c2556a0c435c45b500866e1c5bedf3e090b51e478b831397f62ed2c6ba90209dd0075636624a6fa4d9e06ed2a64e05bb021c7239e0bb86762b6188fcbbc46c0c774c0ddbc95b17e0422f8261a7ec056eb476a155d83d1ffbcbd5d3b5893a3fa0293570192035c0ac7354568e6906ec133c4dd9f5bd8e6641bf8a900361e4fb2fec723c663c0511447f9ad98f676b89a9d65854a2b71dd5214c6ab6a12e8b8a0ddd022997add57e24dd23", 0xf3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x4, 0xcf, 0x2c00000000000, 'queue0\x00', 0x29}) 19:13:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000100)=""/103, &(0x7f0000000180)=0x67) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) r3 = creat(&(0x7f00000001c0)='./file0/../file0\x00', 0x1) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000200)=0x1) 19:13:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf401, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x5, 0x0, 0x0, @broadcast}}}}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x6, 0x2) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) [ 2395.072246][ T7774] Bluetooth: hci2: command 0x1003 tx timeout [ 2395.078414][T11878] Bluetooth: hci2: sending frame failed (-49) [ 2395.084970][T28313] Bluetooth: hci1: command 0x1003 tx timeout [ 2395.091064][T28313] Bluetooth: hci3: command 0x1003 tx timeout [ 2395.091158][T11878] Bluetooth: hci1: sending frame failed (-49) [ 2395.097377][T28310] Bluetooth: hci3: sending frame failed (-49) [ 2395.152277][ C1] net_ratelimit: 20 callbacks suppressed [ 2395.152286][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2395.163792][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2395.169563][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2395.175341][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2395.472271][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2395.478100][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2396.272251][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2396.278027][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2396.283828][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2396.289549][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2397.152330][T28313] Bluetooth: hci3: command 0x1001 tx timeout [ 2397.152337][ T7774] Bluetooth: hci1: command 0x1001 tx timeout [ 2397.162629][T28310] Bluetooth: hci1: sending frame failed (-49) [ 2397.164503][T28313] Bluetooth: hci2: command 0x1001 tx timeout [ 2397.170535][T28310] Bluetooth: hci3: sending frame failed (-49) [ 2397.177114][T11878] Bluetooth: hci2: sending frame failed (-49) [ 2399.232304][T28313] Bluetooth: hci2: command 0x1009 tx timeout [ 2399.232311][ T7774] Bluetooth: hci3: command 0x1009 tx timeout [ 2399.232352][ T7774] Bluetooth: hci1: command 0x1009 tx timeout [ 2400.432249][ C1] net_ratelimit: 20 callbacks suppressed [ 2400.437966][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2400.443775][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2400.449589][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2400.455348][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2400.592304][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2400.598074][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2401.392283][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2401.398149][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2401.404026][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2401.409780][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:13:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r2, 0x2}}, 0x18) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:13:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:13:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:13:34 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x1261) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:13:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x50001, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000140)={{0x0, 0x7}, 'port0\x00', 0x12, 0x80000, 0xbc, 0x401, 0x2, 0x6, 0x1, 0x0, 0x2, 0x3}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:13:34 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0xc07000, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2403.207673][T31336] Bluetooth: hci1: Frame reassembly failed (-84) [ 2403.260968][T31336] Bluetooth: hci2: Frame reassembly failed (-84) 19:13:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003000000000000000000000000be96e1f653b898de1008f7cba5287ec4256cf28fbb07b2e2fa5f9af62faf5f96f7753a6d69b104cb208db24275ee22221aa9316b04c46adad84784d18d1da7ef25d14e757769bec8a3b1f58a3b4a98f5656307a3da61eb6669bd75d5cf0238badfa0ef6220e57c17423dc42bd1692762bcfb05ac1e67a52ab310225460d5a1cc83349908fa63cfe0b4159f2aa717e5bf274885bcf432bb9a20085a0a69dc282813240a86c516fe"], 0xfffffdef) 19:13:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) 19:13:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) bind$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSBRKP(r3, 0x5425, 0x40000000) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:13:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x129002) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0xfff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x800000000000000f) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000000c0)="24c09c1121eba9f851bafb603b514bcf2a5e0d83bfd37266d8954d3f1a54c8578a3c264f33ff38d26aa264813a3b037897ff4360b3d1d8f058967350f59a679081733afa6a31dc23428740ebd78ac9199e787004d6ef277750dad3b04b4ad0779cd8") ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:13:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0xb2, 0x0) 19:13:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101000, 0x40) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000300)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80440}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x1c}}, 0x0) lsetxattr$security_ima(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.ima\x00', &(0x7f00000002c0)=@v1={0x2, "7ea5ee8ea36c1f072f558cf754"}, 0xe, 0x2) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0xff, 0x3ff, 0x2, 0x8}, {0x5, 0xfff, 0xe1, 0x80000001}, {0x4, 0xfffffffffffffffa, 0x3b, 0x7}]}) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r4, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="f36f000000000000000000000000000000ff00"/32], 0xfffffdef) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000380)={0x9, 0x6, 0x0, @broadcast, 'bridge_slave_1\x00'}) [ 2405.232277][T29153] Bluetooth: hci1: command 0x1003 tx timeout [ 2405.238514][ T8520] Bluetooth: hci1: sending frame failed (-49) [ 2405.312226][T28312] Bluetooth: hci2: command 0x1003 tx timeout [ 2405.318398][ T8520] Bluetooth: hci2: sending frame failed (-49) [ 2405.552292][ C1] net_ratelimit: 20 callbacks suppressed [ 2405.552298][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2405.563754][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2405.569551][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2405.575390][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2405.872283][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2405.878168][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2406.672307][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2406.678145][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2406.683958][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2406.689728][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2407.312453][T28312] Bluetooth: hci1: command 0x1001 tx timeout [ 2407.318549][ T8520] Bluetooth: hci1: sending frame failed (-49) [ 2407.392330][T28312] Bluetooth: hci2: command 0x1001 tx timeout [ 2407.398432][ T8520] Bluetooth: hci2: sending frame failed (-49) [ 2409.392300][T29153] Bluetooth: hci1: command 0x1009 tx timeout [ 2409.472224][T29153] Bluetooth: hci2: command 0x1009 tx timeout [ 2410.832249][ C1] net_ratelimit: 20 callbacks suppressed [ 2410.837956][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2410.843776][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2410.849593][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2410.855382][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2410.992250][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2410.998021][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2411.792266][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2411.798119][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2411.803967][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2411.809709][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:13:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x24000, 0x0) mknodat(r1, &(0x7f0000000140)='./file0\x00', 0x684, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) 19:13:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) readahead(r0, 0x200, 0x8) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000100)=""/123) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:13:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socketpair(0x0, 0x7, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x2) r2 = socket$unix(0x1, 0x801, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r3, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r2, &(0x7f0000000000), 0xfffffdef) 19:13:45 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x2000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:13:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) 19:13:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x129002) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0xfff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x800000000000000f) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000000c0)="24c09c1121eba9f851bafb603b514bcf2a5e0d83bfd37266d8954d3f1a54c8578a3c264f33ff38d26aa264813a3b037897ff4360b3d1d8f058967350f59a679081733afa6a31dc23428740ebd78ac9199e787004d6ef277750dad3b04b4ad0779cd8") ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:13:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x5, 0x2080) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r2, 0x500, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0xfffffffffffffff8, @bearer=@udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) r3 = socket$unix(0x1, 0x801, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') listen(r4, 0x0) connect(r4, &(0x7f00000000c0)=@un=@abs={0x1}, 0xffffffffffffff3d) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x26) write$binfmt_aout(r3, &(0x7f0000000000), 0xfffffdef) [ 2413.421118][T31327] Bluetooth: hci1: Frame reassembly failed (-84) 19:13:45 executing program 4: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c270aef2769e7") r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x8837fc9, 0x20200) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000140)=0xf4240) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast2, @multicast1, 0x0}, &(0x7f0000000280)=0xc) accept4$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000005c0)=0x14, 0x0) getpeername$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000700)=0x14) recvmmsg(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000780)=""/157, 0x9d}, 0x2}, {{&(0x7f0000000840)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000d00)=[{&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/139, 0x8b}, {&(0x7f0000000a80)=""/127, 0x7f}, {&(0x7f0000000b00)=""/4, 0x4}, {&(0x7f0000000b40)=""/16, 0x10}, {&(0x7f0000000b80)=""/138, 0x8a}, {&(0x7f0000000c40)=""/141, 0x8d}], 0x7, &(0x7f0000000d80)=""/250, 0xfa}, 0x4}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000e80)=""/230, 0xe6}], 0x1, &(0x7f0000000fc0)=""/149, 0x95}, 0x20}, {{&(0x7f0000001080)=@alg, 0x80, &(0x7f0000002400)=[{&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/202, 0xca}, {&(0x7f0000002200)=""/145, 0x91}, {&(0x7f00000022c0)=""/44, 0x2c}, {&(0x7f0000002300)=""/231, 0xe7}], 0x5, &(0x7f0000002480)=""/39, 0x27}, 0x86}, {{&(0x7f00000024c0)=@ax25={{0x3, @bcast}, [@remote, @rose, @rose, @null, @netrom, @rose, @netrom, @rose]}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/224, 0xe0}, {&(0x7f0000002700)=""/242, 0xf2}, {&(0x7f0000002800)=""/74, 0x4a}], 0x4, &(0x7f00000028c0)=""/234, 0xea}, 0xb66}], 0x5, 0x40000002, &(0x7f0000002b00)={0x77359400}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003a40)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000003b40)=0xe8) accept$packet(r1, &(0x7f0000003b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003bc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000003c00)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003d00)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003e00)={'nr0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003e40)={'team0\x00', 0x0}) r14 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r14, 0x100000114, 0x3f, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003e80)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000003f80)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003fc0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f00000040c0)=0xe8) getpeername$packet(r0, &(0x7f00000041c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004200)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000005640)={@empty, @broadcast, 0x0}, &(0x7f0000005680)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000005d40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005d00)={&(0x7f0000004240)=ANY=[@ANYBLOB="18060000", @ANYRES16=r3, @ANYBLOB="000a26bd7000fcdbdf250300000008000100", @ANYRES32=r4, @ANYBLOB="4c02020044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000014000400a48a0606090000009800ff0704000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000200000008000600", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r8, @ANYBLOB="080007000000000084000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000540004000000204c20000000010000020000000034400073080000000300060a03000000e20002048a30000000010807000000000000098109000000070000ffab090000e0ff070105000000010005318000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000300000008000600", @ANYRES32=r9, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000900000008000600", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="4802020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004001f0000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400050000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=r17, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000008000300030000000800040002000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000500000008000600", @ANYRES32=r18, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400b7000000080007000000000064000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000340004000600021f030000008c0b200900000000ffff0008020000000200047b0200000003008075000000008000013f56000000"], 0x618}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040890) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:13:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x129002) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0xfff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x800000000000000f) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000000c0)="24c09c1121eba9f851bafb603b514bcf2a5e0d83bfd37266d8954d3f1a54c8578a3c264f33ff38d26aa264813a3b037897ff4360b3d1d8f058967350f59a679081733afa6a31dc23428740ebd78ac9199e787004d6ef277750dad3b04b4ad0779cd8") ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:13:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x9, 0x400000) getsockopt$inet6_dccp_int(r1, 0x21, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$unix(0x1, 0x801, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1}, 0x8) fcntl$addseals(r0, 0x409, 0x1) listen(r3, 0x0) connect(r0, &(0x7f0000000040)=@un=@abs={0x1}, 0x80) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000feff000000000000f8cc1e409f865b1ab273bd8c89623800000000000000000000002f9a9e2a78e0861fda6972ded1d165140c37be336445e43ab4ddb74566118474f1fd42103ac06ab0fe44e290b0d63cfc532c3f2f10f5f9daa34d1ad3f048dc93a27d504a69bd001100886f1002dbb60d386f0278c4605de4ced0f94a1ba5e235e64011461bbe68a6bf2493d2c85575f506367c"], 0xfffffdef) 19:13:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x200, 0x3, 0x800, 0x1, 0x6, 0x347b, 0x4, 0x1f, 0x4, 0x400, 0x8, 0x9}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:13:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x129002) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0xfff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x800000000000000f) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000000c0)="24c09c1121eba9f851bafb603b514bcf2a5e0d83bfd37266d8954d3f1a54c8578a3c264f33ff38d26aa264813a3b037897ff4360b3d1d8f058967350f59a679081733afa6a31dc23428740ebd78ac9199e787004d6ef277750dad3b04b4ad0779cd8") ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) [ 2415.472250][T28312] Bluetooth: hci1: command 0x1003 tx timeout [ 2415.478430][ T8520] Bluetooth: hci1: sending frame failed (-49) [ 2415.552280][T28312] Bluetooth: hci2: command 0x1003 tx timeout [ 2415.558437][ T8520] Bluetooth: hci2: sending frame failed (-49) [ 2415.952224][ C1] net_ratelimit: 20 callbacks suppressed [ 2415.952233][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2415.963774][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2415.969564][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2415.975346][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2416.272217][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2416.278005][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2417.072207][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2417.077979][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2417.083827][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2417.089574][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2417.552311][T28312] Bluetooth: hci1: command 0x1001 tx timeout [ 2417.558418][ T8520] Bluetooth: hci1: sending frame failed (-49) [ 2417.632290][T28312] Bluetooth: hci2: command 0x1001 tx timeout [ 2417.638404][ T8520] Bluetooth: hci2: sending frame failed (-49) [ 2419.632261][T28312] Bluetooth: hci1: command 0x1009 tx timeout [ 2419.713233][ T3878] Bluetooth: hci2: command 0x1009 tx timeout [ 2421.232228][ C1] net_ratelimit: 20 callbacks suppressed [ 2421.237911][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2421.243703][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2421.249555][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2421.255332][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2421.392287][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2421.398060][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2422.192225][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2422.198058][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2422.203905][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2422.209658][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:13:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x100) r3 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x2, 0x2) r4 = dup3(r0, r1, 0x80000) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{r3, 0x0, 0x1000000018000, 0x10000}, {r4, 0x0, 0xfffff000, 0xfffffffff0000000}]}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:13:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000000000000000003237e4705a217c3823531fe2d7f3b0d1fdba9c265fcf3a6247a2ff2e882d05c80ceb927ee83f34e378b6b309b9a9d8da2f05916fb502ff04153994955cfe4c1ca64300"/98], 0xfffffdef) 19:13:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x129002) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0xfff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x800000000000000f) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000000c0)="24c09c1121eba9f851bafb603b514bcf2a5e0d83bfd37266d8954d3f1a54c8578a3c264f33ff38d26aa264813a3b037897ff4360b3d1d8f058967350f59a679081733afa6a31dc23428740ebd78ac9199e787004d6ef277750dad3b04b4ad0779cd8") ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:13:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x29003e, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) sendfile(r0, r0, 0x0, 0xffffffffffffff80) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0xcbe, 0x8, 0x3}) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000100)) 19:13:55 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x2000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:13:55 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x3f00) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:13:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x129002) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0xfff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x800000000000000f) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000000c0)="24c09c1121eba9f851bafb603b514bcf2a5e0d83bfd37266d8954d3f1a54c8578a3c264f33ff38d26aa264813a3b037897ff4360b3d1d8f058967350f59a679081733afa6a31dc23428740ebd78ac9199e787004d6ef277750dad3b04b4ad0779cd8") ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:13:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:13:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:13:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000}) r3 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x1, 0x201) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={r2, 0x80000, r3}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:13:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x129002) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0xfff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x800000000000000f) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000000c0)="24c09c1121eba9f851bafb603b514bcf2a5e0d83bfd37266d8954d3f1a54c8578a3c264f33ff38d26aa264813a3b037897ff4360b3d1d8f058967350f59a679081733afa6a31dc23428740ebd78ac9199e787004d6ef277750dad3b04b4ad0779cd8") ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:13:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x503000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x401, 0x10}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r2, 0x1}, &(0x7f00000001c0)=0x8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:13:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000040)="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") listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) ioctl$FICLONE(r2, 0x40049409, r0) [ 2424.132078][T31327] Bluetooth: hci1: Frame reassembly failed (-84) [ 2424.143916][T31327] Bluetooth: hci1: Frame reassembly failed (-84) 19:13:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x129002) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0xfff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x800000000000000f) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:13:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) r2 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000340)) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000300)={0x5, 0x9}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) r3 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x6, 0x682) r4 = accept4(r0, &(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x80, 0x80800) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000240)={r5, 0x1, 0x6, @remote}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000003c0)={0x5, 0x5, 0x8004, 0x3, 0x9, 0xfffffffffffffffb, 0x80, 0x2e63, 0x0}, &(0x7f0000000400)=0x20) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYBLOB="d9000000c0179a3df1c3924052c0d48dd2f413597468b2800a457920e87abfed153b902ebee1e0dc9bd54937e059f33e984a7b93404f36b6763266e66cbe5f447c0ccfed1a27b96a54ad5385f05839dc2b76d462a6635a12c580927e83982f7675151dd1805f9c18321170149cdee66b28b3ce7096645ca3e0445c3e36c4b126585c1171895eceda48544520df5aa7760af829562eeb3747475a57c9572ffce6e52c2c4fab14421674a9c6a13049eec6bbf6b5f85f33cc0abf8d8ee27f541f8c42ce568658382707eeb614324710527d20c565864374ef672c4d62bc9d294fa5777e5edefdbf532ce77792"], &(0x7f0000000540)=0xe1) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000280)={r5, 0x1, 0x6, @random="5b581df8541f"}, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x20000, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) 19:13:56 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x2000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:13:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000400d374822ec0cadd7d00"/24], 0xfffffdef) r3 = accept4(r0, &(0x7f0000000040)=@tipc=@id, &(0x7f00000000c0)=0x80, 0x80800) sendmsg$nfc_llcp(r3, &(0x7f0000001580)={&(0x7f0000000100)={0x27, 0x1, 0x1, 0x7, 0x112, 0x10000, "7e11c1a6c1e80269ec28a2822a77f7bf726d4863f386ec24f7257031138199cb09e1891613c5478519d8731dc8c15d8e3498a8804b30a1ebc2661df0cef68f", 0x1d}, 0x60, &(0x7f0000001500)=[{&(0x7f0000000180)="37b3fc4247e2e00e6310e5732e4cd34ec8334ffa5e8697f0f9c968e676769f7f56e4bea675645f7b57b89198c7989f165025d0813f9c66913874d966584e80ef53960269b95dfcd4a372683f9978745bd85c1076f75a3e0dd1c03b539dcf52ef2f6426ac3dbe00356bfe36dad3d43f95168ee3ffe27301b7fa310ab64c16c27fe5d4e57fe8977b8babcc2ac08d75f22e8e5d3a2c7292057672a924fa413bf1fa19fada9ed04b99db2084719093102d04aa9f20ceb53b8bdf", 0xb8}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="006a628a869db10d306a3a3f9bbc636f5636e3c6907b39b471157a7fb04e681460e3430f7726890ab930561edfd9fe2a750118f3ba6b2c6a45bab850622b953207cf341e3fef06b20add9fb8de8407f1ef3e570f28be3a596c85d299a9c6cd2f3de8d37814e443ce8da3c3b8bd1570b3103b9d4b0129a23a41f7231fbe88479d720ae32d9f3ded", 0x87}, {&(0x7f0000001300)="671f5768da8b9fc3dc175bacd966d678ffe4be7ec4d62335495141ae4f25295a665d84c58faf346d8a6a812691f87ee789e824f521cae964ac5c2ba2a067db38994372ad8819b42353b95b3787bcaf1ded484414a1a1b08f7df3f8174a6aefc693efda96d6fd46ba9d489cf4fde09f994741540f4fcbcd462d38357761ddd17b218a12d3731871", 0x87}, {&(0x7f00000013c0)="3c7742e288a92aec768e68e4cabda645c7f51fc61047ef691c3f901e5695c4b111e74d58b9900950285e9a1cef32d230a13bae495c30e16ccbcd4ec0496071df33eaed6d83133c0a6367c90cd2bca0cdeca845cb3a680d89c5ff42b93d741a42ebc2553c45497388f1065d5d12a11fc65c2a7f08452b6fcea5a72e41e45227fb0da342588cbb1b8998f7e5f37349ee72bfa2fd9f72a6af2403349198d71d0d843e5ce6124cb51a90e0f8420e213904f2cbb197324359d4c27340b8a06f7b39b842d027ed5e47601753ad0e890016cd25a020a1973b7675d4d513c527edf163c536788af02d8c", 0xe6}, {&(0x7f00000014c0)="3dd241523d", 0x5}], 0x6, 0x0, 0x0, 0x4048001}, 0x800) 19:13:56 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x2000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:13:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x129002) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0xfff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:13:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x123c02, 0x0) ioctl$RTC_VL_CLR(r2, 0x7014) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:13:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x3, 0x4) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f0000000100)=0x8) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000080)) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000cbd8000000000000000000005f2e765d0edd5fa6ee668657b75c0b4275124cdfaa554e2bacebf87de5f81ed8be52d8c6c6d62043b6823148255db6e1b4e8bdd82e13a39c8184926875cc0f6d9b685261f030d25fc4c2fe7cd1fa3ada3610187067ea000000000000ae4cdc2d29d17987770f3b5a33529aeae85c3642a573869db44a93ea6b6794ec06aedda7f2ab7858c60f71cdffe81eddf5778fed4a5e7f551d5b9606009392015ef67a79ebadbe01e2a46419413afe354ad8662786df2e4fa8dff31dc76be7d47d1febb5631fb376f41d360a7b"], 0xfffffdef) 19:13:56 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x4000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:13:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x129002) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0xfff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) [ 2426.202186][T29153] Bluetooth: hci1: command 0x1003 tx timeout [ 2426.208349][ T1286] Bluetooth: hci1: sending frame failed (-49) [ 2426.352227][ C1] net_ratelimit: 20 callbacks suppressed [ 2426.352236][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2426.363760][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2426.369526][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2426.375283][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2426.672211][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2426.678024][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2427.472196][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2427.477983][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2427.483783][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2427.489531][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2428.272254][T29153] Bluetooth: hci1: command 0x1001 tx timeout [ 2428.278606][ T1286] Bluetooth: hci1: sending frame failed (-49) [ 2430.352262][ T2928] Bluetooth: hci1: command 0x1009 tx timeout [ 2431.632248][ C1] net_ratelimit: 20 callbacks suppressed [ 2431.637949][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2431.643694][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2431.649452][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2431.655178][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2431.792265][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2431.798059][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2432.592255][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2432.598095][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2432.603970][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2432.609721][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:14:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x6) ioctl$KDADDIO(r0, 0x400455c8, 0x4f) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x6) 19:14:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hci(r1, 0x800448f3, &(0x7f00000000c0)="cf05582e8aa0439ced81e4bfbf70bd29985fde03afbef46985e1319b75320499361d3979fcc27dd24eb67c38899daf904eff") r3 = socket$unix(0x1, 0x801, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000100)=0x80000000, 0x4) bind$unix(r4, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r3, 0x0) connect(r3, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r3, &(0x7f0000000000), 0xfffffdef) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x5) 19:14:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x129002) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0xfff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:14:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0xb2, 0x0) 19:14:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb8, 0x105000) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) mq_timedsend(r1, &(0x7f0000000140)="46b93da906ea6597050adc87601504e5bc945113008de9eb4854f9ca2ebee3c07f2ad8ee2ba87681b657fc07a759778f95934cdaa3febe4bd3fc85c3066a5594c5110cb8eddf76e3d9699484699ca715a4b90796a98f9f2c23f6221943f7e9b1b287345ad8141c5b0466c2762f47221313ae4c7ef1a183b2d99fc7175b269c69c3e37a40162a9d6cf387c8aa4d79f184475675a072a073a539224e4118697e96af96d9013c1aee9ae2b7746e070dde67ba8e4052b1cdd2b518c14440f22dd1b690c0b76e11995cacda96", 0xca, 0x42c, &(0x7f0000000280)={r2, r3+10000000}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffff9c, 0x5423, &(0x7f00000000c0)=0x800000000000010f) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000380)=0x1) 19:14:06 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x60ff) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:14:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:14:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x406101, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f0000000080)) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:14:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x129002) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0xfff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:14:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0xb2, 0x0) 19:14:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x58000, 0x0) 19:14:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x14000, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x508}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0xffffffffffffff25, 0x5, 0x800, 0x401, 0x5]}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r4, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000001c0)={0x8e, 0x0, 0x1000, 0x1}, 0x10) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:14:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x129002) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0xfff) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) 19:14:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:14:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x129002) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0xfff) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) 19:14:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x10001, 0x200000) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:14:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0xb2, 0x0) 19:14:06 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x6112) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:14:06 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x800, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000001c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x40806, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x482600, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000240)={0x7, 0x7, [{0x3ff, 0x0, 0x8}, {0x40, 0x0, 0x4}, {0x2, 0x0, 0x6}, {0x8, 0x0, 0x6}, {0x2, 0x0, 0x800}, {0x6, 0x0, 0x6}, {0x1, 0x0, 0x80000000}]}) getsockname$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0x10) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x5, 0xfffffffffffffffc, 0x8, 0x2, 0x2, "8af0fcf740cca7ce89fa04c8c8768f8b7ad8b6", 0x7, 0x7e}) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000140)) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000040)={0x3, {0x8000, 0x85, 0x10, 0xffffffff80000001}}) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) [ 2435.233573][T31327] Bluetooth: hci1: Frame reassembly failed (-84) 19:14:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x129002) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0xfff) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) 19:14:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:14:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000080)="8a9a41838100000000") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) 19:14:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5418, &(0x7f0000000080)=0x2) [ 2435.503152][T24511] Bluetooth: hci2: Frame reassembly failed (-84) 19:14:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x129002) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:14:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000), 0xfffffdef) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x8, 0x1, 0xa5, 0x7, 0x18, 0x80000000, 0x8, 0x3, 0xf8, 0x8, 0x1, 0x2}) 19:14:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xfff) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:14:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x129002) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:14:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="000082bad6a44f5c9b699ba1c400000000000000000000000aa90000"], 0xfffffdef) fcntl$setflags(r2, 0x2, 0x1) 19:14:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:14:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x7400) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2436.752188][ C1] net_ratelimit: 20 callbacks suppressed [ 2436.752197][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2436.763730][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2436.769545][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2436.775297][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2437.072249][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2437.078046][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2437.312209][T27474] Bluetooth: hci1: command 0x1003 tx timeout [ 2437.318418][ T8520] Bluetooth: hci1: sending frame failed (-49) [ 2437.552165][ T2928] Bluetooth: hci2: command 0x1003 tx timeout [ 2437.558314][ T8520] Bluetooth: hci2: sending frame failed (-49) [ 2437.872704][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2437.878526][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2437.884353][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2437.890096][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2439.392238][ T2928] Bluetooth: hci1: command 0x1001 tx timeout [ 2439.398348][ T8520] Bluetooth: hci1: sending frame failed (-49) [ 2439.632173][ T2928] Bluetooth: hci2: command 0x1001 tx timeout [ 2439.638310][ T8520] Bluetooth: hci2: sending frame failed (-49) [ 2441.472209][T27474] Bluetooth: hci1: command 0x1009 tx timeout [ 2441.712245][T27474] Bluetooth: hci2: command 0x1009 tx timeout [ 2442.032180][ C1] net_ratelimit: 20 callbacks suppressed [ 2442.032189][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2442.043644][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2442.049433][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2442.055228][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2442.192230][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2442.198013][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2442.992194][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2442.998044][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2443.003871][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2443.009607][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:14:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:14:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:14:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x7530}, 0x10) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x80001, 0x0) ioctl$TCXONC(r3, 0x540a, 0xc0d) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000140)={0x0, @reserved}) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) listen(r2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) write$binfmt_aout(r1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x5e) 19:14:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x800000000000000f) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101000, 0x0) getsockopt$nfc_llcp(r2, 0x118, 0x7, &(0x7f00000000c0)=""/3, 0x3) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:14:17 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:14:17 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x9400) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:14:17 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:14:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{0x436d85aa, 0x1, 0x5, 0x3f}, {0x7, 0x9, 0x0, 0x7}]}, 0x10) ioctl$VT_ACTIVATE(r1, 0x5606, 0x401) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x7fffc, 0xffffffffffffff9c}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={r2, 0x80000, r3}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) clone(0x200000, &(0x7f00000001c0)="d8", &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="51d6afbb9ece2f6fd599c135e60e3ac477ba137c272ea1d81d14b62368f0f5640f21f05e44bad20ec6ef8d0919305f3c4cb4faa81edea348af2276f9c905b19bad7c0b3ba6ced975d8da5b11458b055d1baf24334aec969c1ede9f0db416f68862de4f65a64a9f2f7d5940eaa44d507436c4fa691dc9acc1fcaca5da42b4700f7dc5a1ca48c4f2a8f412f2dfbac126953113e2127533717857d770ddeea3efcda3680d68fb5270d6390c57aa19a88195d90a") 19:14:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4100, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x7d6}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={r2, 0x8}, &(0x7f0000000240)=0x8) r3 = socket$unix(0x1, 0x801, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000280)=@abs={0x1}, 0x6e) listen(r4, 0x0) connect(r3, &(0x7f0000000100)=@in6={0xa, 0x4e21, 0x8f4, @remote, 0x6}, 0xfffffffffffffc4a) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009e7d0000000000158c00"/32], 0xfffffdef) 19:14:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000d40)='/dev/admmidi#\x00', 0x4, 0x401) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000d80)={0x9, 0x5, 0xffffffffffffffff, 0x32dd}, 0x6) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000300)='/dev/md0\x00', 0x40000, 0x0) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000340)=0x1) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x400080, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000140)=0x1, 0x4) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f0000000180)="ccb6f57175170c2b2ac2b46a7e5a268d0b9c0fa396bff2ee15e3c43e716c0313652451b72a3b2dec3698826b40332f2ef1e564e32e7db9a0f74c454f21a6cf0595b74b682d1f2aef055b282980e073ffd4422a7916455fbd287a4b762f040df096da5df2dba53d9263d5fa86e04dee636f4fe694d57c8b9d94a4ba1e0be02dfc973f5f", 0x83}], 0x1, 0x1) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x20800, 0x0) connect$x25(r5, &(0x7f00000002c0)={0x9, @remote={[], 0x1}}, 0x12) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9, 0xc, 0xffffffffffffffff, 0xffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6}) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000003c0)={0x1, 0x1b, 0x1, r5}) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f00000003c0)) 19:14:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='rdma.current\x00', 0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000200)={0x103, 0x29, 0x2, {0x5, [{{0x20, 0x2, 0x2}, 0x5, 0x2, 0x7, './file0'}, {{0xc2, 0x4, 0x8}, 0x6, 0x5, 0x7, './file0'}, {{0x2, 0x4, 0x6}, 0x8e3, 0x7, 0x7, './file0'}, {{0x84807a384012b6d1, 0x4, 0x2}, 0x9, 0x9, 0x7, './file0'}, {{0x90, 0x1, 0x3}, 0xfffffffffffffff7, 0x5, 0x7, './file0'}, {{0x0, 0x3, 0x3}, 0x7, 0x8, 0x7, './file0'}, {{0x0, 0x4}, 0x3, 0x3, 0x7, './file0'}, {{0x44, 0x2, 0x4}, 0x92d, 0x100000001, 0x7, './file0'}]}}, 0x103) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000380)) r2 = socket$unix(0x1, 0x801, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) sched_yield() setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000340)={@rand_addr=0x6, @remote, 0x1, 0x8, [@loopback, @multicast1, @multicast1, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x6e5a, @empty]}, 0x30) bind$unix(r3, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r3, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) fstat(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) lchown(&(0x7f0000000040)='./file0\x00', r4, r5) write$binfmt_aout(r2, &(0x7f0000000000), 0xfffffdef) [ 2446.063043][T24511] Bluetooth: hci1: Frame reassembly failed (-84) 19:14:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:14:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x4800, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000480)) r2 = socket$unix(0x1, 0x801, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r3, 0x0) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80008}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x284, r5, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x19c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5d, @dev={0xfe, 0x80, [], 0x17}, 0xfffffffffffff001}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfff, @local, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x80000000, @mcast2, 0x1000}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc332}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffff0001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @rand_addr=0x101}, 0xd5}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @loopback, 0x100000001}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x428}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0x1f}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}}}}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f6}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc9}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x85f8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe11600000000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x4000}, 0x80) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) write$binfmt_aout(r2, &(0x7f0000000000), 0xfffffdef) 19:14:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:14:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:14:18 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:14:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000100)={0x8, {{0x2, 0x4e20, @broadcast}}}, 0x88) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x407fffffffff, 0x0, 0x3, 0x100000, 0x0, 0x80000000, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffe, 0x0, 0x1}) 19:14:18 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0xfeff) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:14:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) [ 2447.152175][ C1] net_ratelimit: 20 callbacks suppressed [ 2447.152184][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2447.163656][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2447.169444][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2447.175244][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2447.472228][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2447.478034][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2448.112195][T28312] Bluetooth: hci1: command 0x1003 tx timeout [ 2448.118822][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2448.272173][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2448.278010][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2448.283857][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2448.289612][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2450.192165][T29153] Bluetooth: hci1: command 0x1001 tx timeout [ 2450.198297][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2452.272175][T28312] Bluetooth: hci1: command 0x1009 tx timeout [ 2452.432180][ C1] net_ratelimit: 20 callbacks suppressed [ 2452.437890][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2452.443732][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2452.449559][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2452.455331][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2452.592246][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2452.598022][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2453.392224][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2453.398063][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2453.403880][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2453.409662][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:14:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:14:27 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:14:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r1, 0x6a9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:14:27 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0xfffe) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:14:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) r2 = accept4$inet(r0, &(0x7f0000000180)={0x2, 0x0, @initdev}, &(0x7f00000001c0)=0x10, 0x80800) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000240)=0x10) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000140)={0x81, 0x5}) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000100)) 19:14:27 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:14:28 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:14:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) [ 2456.328135][ T402] Bluetooth: hci1: Frame reassembly failed (-84) 19:14:28 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000080)=0x1e) r1 = dup(r0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f00000000c0)) ioctl$TIOCSBRK(r1, 0x40044591) 19:14:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x0, 0x8, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:14:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0xf) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:14:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:14:28 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x40000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:14:28 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x200, 0x0, 0x2, 0x9}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={r2}) [ 2457.552170][ C1] net_ratelimit: 20 callbacks suppressed [ 2457.557867][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2457.563717][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2457.569535][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2457.575328][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2457.872146][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2457.877932][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2458.352184][T29153] Bluetooth: hci1: command 0x1003 tx timeout [ 2458.358347][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2458.672129][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2458.677953][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2458.683799][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2458.689573][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2460.432252][T29153] Bluetooth: hci1: command 0x1001 tx timeout [ 2460.438355][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2462.512208][T29153] Bluetooth: hci1: command 0x1009 tx timeout [ 2462.832153][ C1] net_ratelimit: 20 callbacks suppressed [ 2462.832160][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2462.843624][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2462.849418][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2462.855237][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2462.992218][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2462.998004][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2463.792189][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2463.798030][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2463.803876][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2463.809613][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:14:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:14:38 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 19:14:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:14:38 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000021c0)=""/4096, 0x1000}], 0xffffffffffffdb0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:14:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000140)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:14:38 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x200000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:14:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) [ 2466.559764][T24511] Bluetooth: hci1: Frame reassembly failed (-90) 19:14:38 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:14:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:14:38 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 19:14:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x91) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) connect(r0, &(0x7f0000000100)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43}}}, 0x80) 19:14:38 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:14:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x8ad, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:14:38 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x400000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2467.952151][ C1] net_ratelimit: 20 callbacks suppressed [ 2467.952160][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2467.963735][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2467.969567][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2467.975384][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2468.272144][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2468.277957][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2468.602145][ T2928] Bluetooth: hci1: command 0x1003 tx timeout [ 2468.608359][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2469.072126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2469.078206][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2469.084276][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2469.090080][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2470.672252][ T2928] Bluetooth: hci1: command 0x1001 tx timeout [ 2470.679227][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2472.752154][T29153] Bluetooth: hci1: command 0x1009 tx timeout [ 2473.232193][ C1] net_ratelimit: 20 callbacks suppressed [ 2473.232200][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2473.243812][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2473.249613][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2473.256043][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2473.392307][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2473.398614][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2474.192161][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2474.197992][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2474.203836][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2474.209581][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:14:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCCBRK(r0, 0x5428) ioctl$KDADDIO(r0, 0x400455c8, 0x1000000) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000140)="b10330d52313c934d3c2900f28ca0dd94fc4957174b3aaf621a3eddc44f519d9fca488d14ff3c625d5d6362396cc0e0729b782dc71919a4f0151ec3c20d8ca370e67d9b2e28012254e6916f1a6dfd4817f2708dc04d91a11944f2ce45675f0b874e1fe1774447994fee81a30cfdbc5dacab5f670e8117f28d70831c9230a59600b5557e40f592ddec39a8434a16d7046cc25b2aea03d580ecceffe58de2e527189b385b7bb09394116be7ffe777d62578bef0fc109269c9b92f0b250ef035eccc4de32d5d0b3ff5b0b4469f4836c5cda260ec418d05ec398dddecad589fcc91e2a8931da0441a535120ea644bb3930a19eb549f9b931f4744e59858c58") 19:14:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:14:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) ioctl$TIOCSBRK(r1, 0x5427) 19:14:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={r2, 0x6b45f758}, &(0x7f00000001c0)=0x8) 19:14:48 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 19:14:48 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x507100) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:14:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8e, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:14:48 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) socket$pppoe(0x18, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x800000000000000f) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mISDNtimer\x00', 0x200480, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) write$P9_RLINK(r1, &(0x7f0000000140)={0x7, 0x47, 0x2}, 0x7) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:14:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x4525e00d23a0855) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) fremovexattr(r1, &(0x7f0000000000)=@known='trusted.overlay.redirect\x00') 19:14:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x800, 0x3}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:14:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x400, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:14:48 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:14:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf", 0x0, 0x3}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) [ 2477.111663][T30390] Bluetooth: hci1: Frame reassembly failed (-84) 19:14:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x2, 0x80) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140)={0x1b80, 0x7, 0x4, 0x4}, 0x8) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:14:48 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x50d000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:14:49 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x2, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4) ioctl$TIOCSBRK(r1, 0x40044591) write$sndseq(r1, &(0x7f0000000180)=[{0x7, 0x20c6, 0xfff, 0x2, @tick=0x9, {0x61e, 0x6}, {0x7, 0x4}, @result={0x200, 0x7}}, {0x9, 0x868d, 0x5, 0x0, @tick, {0x5, 0x10001}, {0x6, 0x5}, @quote={{0x3f, 0x80}, 0xffff}}, {0x100, 0x6, 0xfff, 0x3, @time, {0x1ffe0000000, 0x2}, {0x0, 0x7}, @queue={0x7ff, {0x7, 0x8001}}}, {0x19fa, 0x7d85460c, 0x523, 0xfff, @time={0x77359400}, {0xff9a, 0xa00000000000000}, {0x0, 0x4dffa4aa}, @connect={{0x2, 0x5}, {0x8, 0x3}}}, {0xc902, 0xfffffffffffffff8, 0x2, 0x44, @tick=0x1ff, {0x2, 0x4}, {0xfff, 0x4}, @connect={{0x9}, {0xfffffffffffffffb, 0x800}}}], 0xf0) 19:14:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:14:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:14:49 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/4096, 0x130a}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:14:49 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:14:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:14:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000180)={'bpq0\x00', 0x200}) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000100)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000140)=0x9) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) [ 2478.352186][ C1] net_ratelimit: 20 callbacks suppressed [ 2478.352195][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2478.363761][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2478.369538][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2478.375304][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2478.672127][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2478.677917][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2479.152153][T29153] Bluetooth: hci1: command 0x1003 tx timeout [ 2479.158326][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2479.472095][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2479.477883][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2479.483723][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2479.489457][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2481.232130][T28313] Bluetooth: hci1: command 0x1001 tx timeout [ 2481.238257][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2483.312164][T29153] Bluetooth: hci1: command 0x1009 tx timeout [ 2483.632086][ C1] net_ratelimit: 20 callbacks suppressed [ 2483.632091][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2483.643558][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2483.649346][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2483.655141][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2483.792168][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2483.797968][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2484.592134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2484.598064][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2484.603885][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2484.609620][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:14:59 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x200000, 0x0) getsockopt$rose(r0, 0x104, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x736c, 0x200000) r3 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000140)={{0x5, 0x1, 0xb2, 0x200, '\x00', 0x80000000}, 0x3, 0x3, 0x9, r3, 0x6, 0xbbda, 'syz1\x00', &(0x7f0000000040)=['/dev/ptmx\x00', '/dev/ptmx\x00', '/dev/ptmx\x00', 'ppp0++>\x00', '\'\x00', '/dev/ptmx\x00'], 0x32, [], [0x8, 0x6, 0xf2, 0x7]}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0x2) 19:14:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:14:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:14:59 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:14:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x1, 0x8100) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000140)=""/237) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000240)=0x2, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x111000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f00000002c0)) 19:14:59 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x70c000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:14:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:14:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:14:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000002200)=[{&(0x7f0000001080)=""/235, 0xeb}, {&(0x7f00000021c0)=""/64, 0x40}], 0x100000000000007f) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) pipe2$9p(&(0x7f0000000000), 0x4000) 19:14:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:14:59 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:14:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000240)={0x28c, 0x0, 0x3, 0xb3}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000280)={r3, 0x1}) r4 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0xfffffffffffffff9, 0x5c0) openat$cgroup_ro(r4, &(0x7f0000000140)='pids.current\x00', 0x0, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x3, 0x0) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f00000001c0)={0x4, 0x2}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20400080}, 0xc, &(0x7f0000000b80)={&(0x7f0000000740)=@newqdisc={0x418, 0x24, 0xcf147b6829acd3af, 0x70bd28, 0x25dfdbfe, {0x0, r6, {0xf, 0x1}, {0xfff9, 0x7}, {0xfff2, 0xe}}, [@TCA_RATE={0x8, 0x5, {0x1, 0x3f}}, @qdisc_kind_options=@q_choke={{0xc, 0x1, 'choke\x00'}, {0x378, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x4}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x400, 0x7, 0x4, 0xc, 0x2, 0x1f, 0x3}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x80}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f, 0x8, 0x1, 0x1a, 0xf, 0xb, 0x3}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8001, 0x8, 0x80, 0x2, 0x16, 0xe, 0x3}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0x3, 0x100000001, 0x19, 0x16, 0x0, 0x6}}]}}, @TCA_STAB={0x58, 0x8, [@TCA_STAB_BASE={0x1c, 0x1, {0x80, 0xad0, 0x7ff, 0x5, 0x0, 0x6, 0x9}}, @TCA_STAB_BASE={0x1c, 0x1, {0xfffffffffffff2d5, 0x1, 0x8000, 0x1, 0x0, 0x14b, 0x467f, 0x26}}, @TCA_STAB_BASE={0x1c, 0x1, {0x5, 0x40000000000000, 0x8, 0x2, 0x3, 0x5, 0x3, 0x1}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x400}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x76}]}, 0x418}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) [ 2488.752124][ C1] net_ratelimit: 20 callbacks suppressed [ 2488.752134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2488.763641][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2488.769419][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2488.775230][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2489.072111][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2489.077965][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2489.712683][T29153] Bluetooth: hci1: command 0x1003 tx timeout [ 2489.718859][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2489.872085][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2489.877860][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2489.883641][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2489.889371][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2491.792112][ T2928] Bluetooth: hci1: command 0x1001 tx timeout [ 2491.798230][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2493.872143][T29153] Bluetooth: hci1: command 0x1009 tx timeout [ 2494.032087][ C1] net_ratelimit: 20 callbacks suppressed [ 2494.032093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2494.043545][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2494.049353][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2494.055166][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2494.192171][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2494.197957][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2494.992147][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2494.997955][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2495.003796][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2495.009535][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:15:09 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_setscheduler(r0, 0x3, &(0x7f0000000040)=0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0x2) 19:15:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:15:09 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket(0x5, 0x2, 0x10000) setsockopt$inet_dccp_int(r1, 0x21, 0xf, &(0x7f0000000000)=0x80000001, 0x4) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r2 = dup(r0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$TIOCSBRK(r2, 0x40044591) 19:15:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000140)=0x1) 19:15:09 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:15:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x715000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:15:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:15:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x191) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xffff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0xfffffffffffffb6d}, &(0x7f00000001c0)=0x8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:15:09 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180), 0x0) r1 = dup(r0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000000)={0x1, 0x1c000000000}) ioctl$TIOCSBRK(r1, 0x40044591) 19:15:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) [ 2498.064654][T30390] Bluetooth: hci1: Frame reassembly failed (-84) 19:15:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:15:09 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:15:09 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x8000000000000000, 0x2000000000040) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) accept4(r1, 0x0, &(0x7f0000000040), 0x80800) ioctl$TIOCSBRK(r1, 0x40044591) 19:15:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) 19:15:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) 19:15:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) 19:15:10 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:15:10 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x740000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:15:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x40, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) [ 2499.152105][ C1] net_ratelimit: 20 callbacks suppressed [ 2499.152113][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2499.163606][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2499.169382][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2499.175171][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2499.472140][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2499.477957][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2500.112078][ T2928] Bluetooth: hci1: command 0x1003 tx timeout [ 2500.118394][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2500.272089][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2500.277876][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2500.283747][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2500.289490][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2502.202101][T29153] Bluetooth: hci1: command 0x1001 tx timeout [ 2502.209174][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2504.272143][ T2928] Bluetooth: hci1: command 0x1009 tx timeout [ 2504.432112][ C1] net_ratelimit: 20 callbacks suppressed [ 2504.437838][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2504.443634][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2504.449435][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2504.455208][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2504.592109][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2504.597911][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2505.402116][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2505.407901][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2505.413729][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2505.419463][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:15:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) ioprio_get$pid(0x2, r1) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x10000, 0x120) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r2, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x93b) 19:15:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, 0x0) 19:15:20 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:15:20 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x240, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x9, 0x8001, 0x1, 0x5, 0x1, 0x4100000000, 0x0, {0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x9, 0x7fff, 0x200, 0x2}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x3, 0x4, 0x8202, 0x4, 0x1, 0x7, 0x5, 0x4, r2}, &(0x7f0000000200)=0x20) r3 = dup(r0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000240)) r4 = semget(0x3, 0x0, 0x2) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000280)=[0x8000, 0x1, 0x7, 0x3, 0xfffffffffffffffa, 0x3]) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000000)=0x800) ioctl$TIOCSBRK(r3, 0x40044591) 19:15:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1001) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:15:20 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x940000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:15:20 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x20000, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r0, &(0x7f0000000240), &(0x7f0000000280)=""/192}, 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x0) readv(r1, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x901, 0x0) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f00000004c0)) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x4, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r4 = dup(r1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x7, 0x30, 0x4, 0x9}, &(0x7f0000000380)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e24, 0x4, @ipv4={[], [], @broadcast}}}, 0x0, 0xffffffff88cafe71}, &(0x7f0000000480)=0x90) ioctl$TIOCSBRK(r4, 0x40044591) 19:15:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, 0x0) 19:15:20 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:15:20 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:15:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, 0x0) 19:15:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x8, 0x2, 0x3, 0x2, 0x628, 0x7}) 19:15:20 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:15:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x210000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) r2 = dup(r0) accept4$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="43da00d2e44600000000", @ANYRES32=r1, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xffffffffffff8000, 0x86, &(0x7f0000000180)=""/134, 0x41100, 0x1, [], r3, 0x3, r1, 0x8, &(0x7f0000000600)={0xfff, 0xfff}, 0x8, 0x10, &(0x7f0000000640)={0x6, 0x5, 0xd458, 0x2}, 0x10}, 0x70) ioctl$KDSETLED(r1, 0x4b32, 0xfffffffffffffff8) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x7}) 19:15:20 executing program 3 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:15:20 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:15:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000004}) 19:15:21 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0xc07000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:15:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 19:15:21 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:15:21 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in6=@initdev}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) ioctl$TIOCSBRK(r1, 0x40044591) 19:15:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x2, &(0x7f0000000080)) [ 2509.552063][ C1] net_ratelimit: 20 callbacks suppressed [ 2509.552072][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2509.563606][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2509.569413][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2509.575202][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:15:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000340)={0x10000, 0xc16a, 0x1000}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4000, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r4, 0x704, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3a7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x805) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000100)={0x7c, 0x9, 0x6}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) [ 2509.872047][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2509.877834][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2510.672066][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2510.677862][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2510.683695][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2510.689464][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2511.232046][T27474] Bluetooth: hci1: command 0x1003 tx timeout [ 2511.238208][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2513.312094][ T2928] Bluetooth: hci1: command 0x1001 tx timeout [ 2513.318193][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2514.832089][ C1] net_ratelimit: 20 callbacks suppressed [ 2514.837771][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2514.843552][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2514.849349][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2514.855118][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2514.992079][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2514.997847][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2515.392131][T27474] Bluetooth: hci1: command 0x1009 tx timeout [ 2515.792130][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2515.797981][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2515.803830][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2515.809576][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:15:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 19:15:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5401, &(0x7f0000000080)) 19:15:31 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x68e00, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000080)) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) 19:15:31 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0xd05000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:15:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000140)='./file0\x00', 0x2c) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000180)={0xff, 0x6}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200201, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000001c0)=0x8001) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:15:31 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:15:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5402, &(0x7f0000000080)) 19:15:31 executing program 0: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) readv(r2, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r3 = accept4$ax25(r0, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @default, @null, @bcast, @bcast, @null, @default, @default]}, &(0x7f0000000540)=0x48, 0x0) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000580)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r1}) r4 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmdt(r4) io_uring_setup(0x62d, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x3, 0xd5}) r5 = dup(r2) ioctl$TIOCSBRK(r5, 0x40044591) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x121800) 19:15:31 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000b80), 0x24, 0x0) umount2(&(0x7f0000001e40)='./file0\x00', 0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) accept$alg(r1, 0x0, 0x0) 19:15:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5403, &(0x7f0000000080)) 19:15:31 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:15:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000140)={0x3, 0x1}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) [ 2519.952074][ C1] net_ratelimit: 20 callbacks suppressed [ 2519.952083][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2519.963639][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2519.969459][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2519.975263][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2520.282099][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2520.287928][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2521.073999][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2521.079792][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2521.085657][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2521.091407][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2521.712054][T28313] Bluetooth: hci1: command 0x1003 tx timeout [ 2521.718235][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2523.792165][T28313] Bluetooth: hci1: command 0x1001 tx timeout [ 2523.798295][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2525.232058][ C1] net_ratelimit: 20 callbacks suppressed [ 2525.237753][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2525.243587][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2525.249392][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2525.255175][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2525.392177][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2525.398049][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2525.872094][T27474] Bluetooth: hci1: command 0x1009 tx timeout [ 2526.192083][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2526.197947][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2526.203775][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2526.209509][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:15:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = syz_open_dev$adsp(&(0x7f00000007c0)='/dev/adsp#\x00', 0x81, 0x200000) getsockname$inet(r1, &(0x7f0000000800)={0x2, 0x0, @dev}, &(0x7f0000000840)=0x10) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x400000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x1f, 0x30}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e22, 0x7fff, @local, 0x4}}}, &(0x7f0000000240)=0x84) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:15:41 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x1000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:15:41 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x20000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x321) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = shmget$private(0x0, 0x3000, 0xd, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f00000002c0)=""/40) readv(r1, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000240)=""/121) r3 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x80, 0x2) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000340)={0xde, 0x1, 0x1}) r4 = dup(r3) ioctl$TIOCSBRK(r3, 0x40044591) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/173, 0xad}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/156, 0xd}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000740)=""/60, 0x3c}], 0x5) 19:15:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5405, &(0x7f0000000080)) 19:15:41 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:15:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x256000, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000140)=0x9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x570, 0x0, 0x0, 0x0, 0x128, 0x128, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xc8, 0x128}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0x0, 0xffffff00, 0x0, 0xffffff00], 0x4e24, 0x4e24, 0x4e24, 0x4e23, 0x8001, 0x1f, 0x5, 0x80000001, 0x9}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@rt={0x138, 'rt\x00', 0x0, {0x84cf, 0xffffffffffff0000, 0x0, 0x2d93, 0x22, 0x5, [@local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, @mcast1, @loopback, @mcast2, @remote, @mcast1, @dev={0xfe, 0x80, [], 0xc}, @ipv4={[], [], @broadcast}, @remote, @mcast2, @loopback, @loopback, @ipv4={[], [], @multicast2}, @ipv4={[], [], @broadcast}], 0xe}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@rand_addr="1aeee086d650d4d2ff64723cc71b6d86", @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0xffffff00, 0xb83a55dc0bcaa7b2, 0xff, 0xffffffff], [0x0, 0xffffffff, 0xffffffff, 0xffffffff], 'veth1_to_bond\x00', 'rose0\x00', {0xff}, {0xff}, 0x2f, 0xff, 0x0, 0x31}, 0x0, 0x110, 0x150, 0x0, {}, [@common=@unspec=@nfacct={0x48, 'nfacct\x00', 0x0, {'syz0\x00', 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x4, 0xffffffff, 0x10001}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) 19:15:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5406, &(0x7f0000000080)) 19:15:41 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xba3, 0x1) 19:15:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}]}) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000040)={0x1, 0x1, [0x5fe27a53, 0x1, 0x1, 0x0, 0x4, 0x8000, 0x8, 0x6]}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x68, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9c}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffffffffffffe, @ipv4={[], [], @empty}, 0x200}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:15:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5407, &(0x7f0000000080)) 19:15:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x181800, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:15:41 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:15:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5408, &(0x7f0000000080)) [ 2530.362078][ C1] net_ratelimit: 20 callbacks suppressed [ 2530.362086][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2530.373539][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2530.379342][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2530.385126][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:15:42 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x2000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:15:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:15:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5409, &(0x7f0000000080)) 19:15:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='.$\x00') ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:15:42 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:15:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x540a, &(0x7f0000000080)) 19:15:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r3 = getpgrp(0xffffffffffffffff) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000001c0)=r3) r4 = add_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="f3cb5e51e776e6480ef78f725078d1a360a5fbe9330b425ab794cbd39c49b2a2e19efa4acee65b6ce5d63b0b0ca078c68770eda6f65dcfba35853ef913603e72172ece3c0f49b81956", 0x49, 0xffffffffffffffff) keyctl$unlink(0x9, r2, r4) ioctl$TIOCSBRK(r1, 0x40044591) [ 2530.672037][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2530.677913][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2531.472022][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2531.477837][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2531.483688][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2531.489437][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2532.192050][T28313] Bluetooth: hci1: command 0x1003 tx timeout [ 2532.198172][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2534.272090][T27474] Bluetooth: hci1: command 0x1001 tx timeout [ 2534.278204][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2535.635688][ C1] net_ratelimit: 20 callbacks suppressed [ 2535.635694][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2535.647169][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2535.652982][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2535.658792][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2535.792112][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2535.797915][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2536.352057][T27474] Bluetooth: hci1: command 0x1009 tx timeout [ 2536.592089][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2536.597881][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2536.603707][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2536.609457][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:15:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) write$binfmt_misc(r0, &(0x7f0000000140)={'syz1', "809357a48a8244746db067f53b5af4df9e6bede350dd7ab006f35e8a97d77e8766bce7819c731b6ceb788433f767349ffe4ba77cf5f01a18725121ec5b0feb7c98bac6e8c408cf68516eb23020f59b08698f44cbcf2d3525acdc6c3969722bd177df7700fe595c071ad1087fb522631caca3d9e11638d7e839f3492d89a5a919d1b2f15aea7ea46656c0fee7807f4f074214b21ffcc8067f37a14933bb4b52183d29ffd68c301ce9267a736779f1f628ea24ccc8"}, 0xb8) 19:15:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x540b, &(0x7f0000000080)) 19:15:52 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c4, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x67a4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x698}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x50}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_BEARER={0x110, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb0d}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xff, @loopback, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff00000000}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf2d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd2c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40000}, 0x45) ioctl$TIOCSBRK(r1, 0x40044591) 19:15:52 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x3000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:15:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x800000001000000e) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:15:52 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2540.752846][ C1] net_ratelimit: 20 callbacks suppressed [ 2540.752940][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2540.765232][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2540.772043][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2540.777987][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:15:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x540c, &(0x7f0000000080)) 19:15:52 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:15:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x540d, &(0x7f0000000080)) 19:15:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x18) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xbfc) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:15:52 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) tee(r0, r0, 0xefa, 0x7) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x5, 0x9, 0x4e6, 0x4}) dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:15:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x540e, &(0x7f0000000080)) [ 2541.072086][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2541.078218][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2541.872038][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2541.877823][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2541.883643][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2541.889380][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2542.832165][T28313] Bluetooth: hci1: command 0x1003 tx timeout [ 2542.838346][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2544.912129][T28313] Bluetooth: hci1: command 0x1001 tx timeout [ 2544.918229][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2546.032023][ C1] net_ratelimit: 20 callbacks suppressed [ 2546.032031][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2546.043527][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2546.049323][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2546.055112][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2546.192060][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2546.197867][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2546.992095][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2546.997929][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2547.003768][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2547.009525][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2547.015459][T29153] Bluetooth: hci1: command 0x1009 tx timeout 19:16:02 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0xff) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r2 = dup(r1) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000000)=r2) ioctl$TIOCSBRK(r2, 0x40044591) 19:16:02 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:16:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x80002) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000140)) 19:16:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x540f, &(0x7f0000000080)) 19:16:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.current\x00', 0x0, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:16:02 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x9000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:16:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5410, &(0x7f0000000080)) 19:16:02 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) keyctl$set_reqkey_keyring(0xe, 0x1) ioctl$TIOCSBRK(r1, 0x40044591) [ 2551.152023][ C1] net_ratelimit: 20 callbacks suppressed [ 2551.152032][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2551.163548][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2551.169387][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2551.175300][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:16:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x11000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:16:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5411, &(0x7f0000000080)) 19:16:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000080)) 19:16:03 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:16:03 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5179, 0x40000) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) 19:16:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5413, &(0x7f0000000080)) [ 2551.472021][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2551.477862][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2552.272044][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2552.277822][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2552.283635][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2552.289379][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2553.072108][ T2928] Bluetooth: hci1: command 0x1003 tx timeout [ 2553.078250][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2555.152009][T29153] Bluetooth: hci1: command 0x1001 tx timeout [ 2555.158114][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2556.432057][ C1] net_ratelimit: 20 callbacks suppressed [ 2556.432066][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2556.443627][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2556.449418][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2556.455227][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2556.592058][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2556.597849][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2557.232043][ T2928] Bluetooth: hci1: command 0x1009 tx timeout [ 2557.392073][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2557.397918][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2557.403772][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2557.409506][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:16:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:16:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x4) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:16:12 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:16:12 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:16:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5414, &(0x7f0000000080)) 19:16:12 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x8000) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x6, 0x4) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) 19:16:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5415, &(0x7f0000000080)) 19:16:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5416, &(0x7f0000000080)) 19:16:13 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) readv(r0, &(0x7f0000002580)=[{&(0x7f0000000000)=""/22, 0x16}, {&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/144, 0x90}, {&(0x7f00000021c0)=""/210, 0xd2}, {&(0x7f00000022c0)=""/65, 0x41}, {&(0x7f0000001140)=""/11, 0xb}, {&(0x7f0000002340)=""/220, 0xdc}, {&(0x7f0000002440)=""/171, 0xab}, {&(0x7f0000002500)=""/98, 0x62}], 0x9) r1 = dup(r0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000002880)={0x8001, 0x800, 0x8000, 0x64a, 0x196, 0x9, 0x7, 0x4, 0x0}, &(0x7f00000028c0)=0x20) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000002900)={r2, 0x1f, 0x11e012c6, 0x188b, 0x7, 0x3}, &(0x7f0000002940)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002700)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000002800)=0xe8) sendto$packet(r1, &(0x7f0000002640)="c6ad53c44d753569907a8a3272b850304b704181fcbdeaa9f076d7fbe312814d8564ae9147e2acafd7b0556be84cdc32c8ec6394a2f820f51f02e2c6742a4e375230993bcabe77d7788df1120e6b84c36e9715f621eebfb1f7136427661c1c29592294f5efe0e7f34215db2e335379f8b0c3f003695cb11013d871a5bbb80f791b8f825917075be3fe268017b0c6c668fd055a0234a2fa524940b3b118542aab6350b88d01b85390", 0xa8, 0x20004010, &(0x7f0000002840)={0x11, 0xf6, r3, 0x1, 0xfffffffffffffc00, 0x6, @dev={[], 0x21}}, 0x14) ioctl$TIOCSBRK(r1, 0x40044591) 19:16:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x25) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000100)="11087ef751cf2b0ac96cd75f36e845e4ec40acdca9afb98c5b8303727501a73b6d0a37ba6c016e2d276c8e2293a02112a4c29825130302320534b035021194659202ab9239ce37a3fcfcc631e0667ef4444a9534e89a636f4b1715ce12ca2a14287c15be21c9c2adbae4") r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x4e0000, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000200)={0x0, 0x86, 0x5, [], &(0x7f00000001c0)=0x351d638d}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:16:13 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:16:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5418, &(0x7f0000000080)) [ 2561.552017][ C1] net_ratelimit: 20 callbacks suppressed [ 2561.552025][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2561.563505][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2561.569761][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2561.575557][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2561.882037][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2561.887838][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2562.671981][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2562.677777][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2562.683550][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2562.689320][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2563.312088][T28313] Bluetooth: hci1: command 0x1003 tx timeout [ 2563.318222][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2565.392073][T28313] Bluetooth: hci1: command 0x1001 tx timeout [ 2565.398185][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2566.832028][ C1] net_ratelimit: 20 callbacks suppressed [ 2566.832034][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2566.843696][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2566.849886][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2566.855692][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2566.992133][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2566.998078][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2567.472137][T29153] Bluetooth: hci1: command 0x1009 tx timeout [ 2567.792116][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2567.798284][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2567.804511][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2567.810393][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:16:23 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x3f000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:16:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x802) ioctl$TCGETX(r0, 0x5432, &(0x7f0000000180)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400, 0x0) getpeername$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x10) 19:16:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x1, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x13) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:16:23 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000b00)=@broute={'broute\x00', 0x20, 0x3, 0x780, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000380], 0x0, &(0x7f0000000280), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x41, 0xa01, 'bpq0\x00', 'veth0\x00', 'tunl0\x00', 'bcsf0\x00', @dev={[], 0x22}, [0xff, 0xff, 0xff], @dev={[], 0x15}, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0xf0, 0xf0, 0x140, [@helper={'helper\x00', 0x28, {{0x0, 'RAS\x00'}}}, @connlabel={'connlabel\x00', 0x8, {{0x9, 0x1}}}]}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x2a, 'syz0\x00', 0xfffffffffffeffff}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{{{0x3, 0x60, 0x0, 'vlan0\x00', 'ifb0\x00', 'veth1\x00', 'bond0\x00', @local, [0x0, 0xff, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x108, 0x180, 0x1b8, [@limit={'limit\x00', 0x20, {{0x52, 0x8001, 0x4, 0xfb5c, 0x1f, 0x5}}}, @ipvs={'ipvs\x00', 0x28, {{@ipv6=@mcast2, [0xffffffff, 0xffffff00], 0x4e21, 0x3f, 0x7, 0x4e24, 0x1, 0x4}}}]}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0xf609, 0x0, 0x5, 0x0, 0x0, "198a25ffc95aa4d55c3534c97806b2c292d234b1b75b9dde2b2775799b664919c6900a371517088de71b1d2819d1296ba193dfb308223ce2c5a1833452c3cc2c"}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@remote, 0xfffffffffffffffc}}}}, {{{0x0, 0x58, 0x6000, 'syzkaller1\x00', 'ip6_vti0\x00', 'hsr0\x00', 'lo\x00', @link_local, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x2f8, 0x378, 0x3c8, [@bpf0={'bpf\x00', 0x210, {{0x37, [{0x1, 0x2, 0xd919, 0x7}, {0x2, 0x6, 0x9, 0x4}, {0x8, 0x8001, 0x30, 0x80000001}, {0x80, 0x6, 0x9, 0x1000}, {0x4, 0x1, 0xea22}, {0x85, 0x6b2d, 0x0, 0x401}, {0x5, 0x5, 0xffffffffffffff00, 0x100}, {0x9, 0x87, 0x6, 0x40}, {0x5, 0x1c00000000, 0x7, 0x4}, {0x3, 0xfffffffffffffffd, 0x10000, 0xfff}, {0x5, 0x0, 0x7, 0x3}, {0x1, 0xfffffffffffffff7, 0x40, 0x5}, {0x8, 0x3c94, 0x24}, {0xa0000000, 0x1, 0x2, 0x3}, {0x1, 0x8, 0x1b, 0x2}, {0x3, 0xfffffffffffffff9, 0x8001, 0x40}, {0x20, 0x1, 0x1ff, 0xd4e5}, {0x8, 0x3, 0x1ff}, {0x8, 0x5, 0x1000, 0x10001}, {0x8001, 0x0, 0x2}, {0x401, 0xfcc, 0xffffffff, 0x3f}, {0x6, 0x6, 0x0, 0xe458}, {0x8, 0x40, 0x5, 0x3}, {0x4, 0x7, 0x7, 0xfffffffffffffffa}, {0x9, 0x8, 0x200000000, 0x800}, {0x1, 0x86, 0x20, 0x1}, {0x2e5b, 0x1, 0x3ff, 0x1}, {0xc060, 0x9, 0x8, 0x4}, {0x3, 0xfffffffffffffffd, 0x4, 0x3}, {0x8217, 0x1, 0x3, 0x1}, {0x1, 0x1, 0x10000, 0x9}, {0x4, 0xe9f, 0x7f, 0x5df5b36c}, {0x101, 0x3b4e, 0x7, 0x8000}, {0x0, 0x1, 0x833, 0x1ff}, {0x3, 0x7, 0xc329, 0x2}, {0x80000000, 0x7, 0x510d, 0x2}, {0x200, 0x7, 0x1, 0x6}, {0x100000000, 0x3, 0x4, 0x5100000}, {0x6, 0x6e, 0x9, 0x7}, {0x6, 0xfffffffffffff001, 0x3, 0x3}, {0x9f1, 0x3, 0x9, 0x4}, {0x8, 0x5, 0x3, 0x2}, {0x1, 0x9, 0x1000}, {0x1, 0x7d9a, 0x8, 0x2}, {0x8, 0x2, 0x8b2, 0x5}, {0x5, 0x5, 0x205, 0x5}, {0x100000001, 0x1, 0x0, 0x80}, {0x4, 0x9, 0x1, 0x5}, {0x3, 0x6, 0x9, 0x2}, {0x7, 0x1, 0x7, 0x8}, {0x40, 0x80000000, 0x1, 0x1}, {0x101, 0x2, 0x4, 0xb48}, {0xfff, 0x9, 0xb1dd, 0x7ff}, {0x800, 0x0, 0x0, 0x5281}, {0x63, 0x8000, 0x4, 0x7ff}, {0x6, 0x0, 0x7, 0x7}, {0x3ff, 0x8, 0x7c42, 0x170e04ed}, {0x10000, 0x10001, 0xbf3, 0x8}, {0xffff, 0x9, 0x4f, 0x967}, {0x5, 0x1000, 0x3, 0x5}, {0xf0d, 0x3, 0x80000000, 0x2}, {0xfffffffffffffff8, 0x8001, 0x7, 0x1000}, {0x8, 0x7}, {0x9, 0x1d5, 0x6, 0xffffffff00000000}], 0x2}}}, @ipvs={'ipvs\x00', 0x28, {{@ipv4=@multicast2, [0xff0000ff, 0xff, 0xffffff00, 0xffffffff], 0x4e22, 0xed, 0x7, 0x4e20, 0x39, 0x1a}}}]}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xb1}}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x1, 0x3f}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fffffff, 0x8000}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x7f8) r3 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000002000700", @ANYRES32=r2, @ANYBLOB="02000700", @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="040003000000000008000300", @ANYRES32=r5, @ANYBLOB="10000200000000002000050000000000129ac03af8b8369671ed87f481d7a99b13481e8e2ae38525c7ed7958aab5282c27033feb89ec9b78d92d"], 0x44, 0x2) ioctl$TIOCSBRK(r1, 0x40044591) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000000)=""/51) 19:16:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5419, &(0x7f0000000080)) 19:16:23 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:16:23 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@generic={0x3, 0x6, 0x7f}) ioctl$TIOCSBRK(r1, 0x40044591) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x2002, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, r2, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x77}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x10001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffffffff8001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8b}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x8000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0xb0}}, 0x8000) 19:16:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x541a, &(0x7f0000000080)) [ 2571.539299][T30390] Bluetooth: hci1: Frame reassembly failed (-90) 19:16:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x541b, &(0x7f0000000080)) 19:16:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000140)={0x80000000, 0x9}) 19:16:23 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:16:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x541d, &(0x7f0000000080)) 19:16:23 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x61120000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2571.952033][ C1] net_ratelimit: 20 callbacks suppressed [ 2571.952042][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2571.963935][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2571.969913][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2571.975950][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:16:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x541e, &(0x7f0000000080)) [ 2572.282068][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2572.288109][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2573.072098][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2573.079289][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2573.086624][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2573.093093][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2573.552105][ T2928] Bluetooth: hci1: command 0x1003 tx timeout [ 2573.558830][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2575.632085][T29153] Bluetooth: hci1: command 0x1001 tx timeout [ 2575.639179][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2577.231967][ C1] net_ratelimit: 20 callbacks suppressed [ 2577.231972][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2577.243610][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2577.249677][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2577.255682][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2577.392076][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2577.397908][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2577.712046][ T2928] Bluetooth: hci1: command 0x1009 tx timeout [ 2578.192061][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2578.197889][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2578.203749][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2578.209628][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:16:33 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:16:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) ioctl$TIOCSBRK(0xffffffffffffffff, 0x40044591) 19:16:33 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x100, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000140)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:16:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x1a) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x633b, 0x80000) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000180)=0x1e) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) getrlimit(0xf, &(0x7f0000000040)) 19:16:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x541f, &(0x7f0000000080)) 19:16:33 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0xfeffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:16:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5420, &(0x7f0000000080)) 19:16:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:16:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0xe21}, 0x10) r2 = dup(r0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x100, 0x8, 0x1000, 0x5, 0x7, 0x1, 0x8000, 0x6, 0x8, 0xffffffffffffb09f, 0xc43a, 0x5, 0x7, 0x2471, 0x5]}, &(0x7f0000000400)=0x100) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000440)={r3, @in={{0x2, 0x4e20, @multicast1}}}, 0x84) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000200)={0x3, 0x0, 0x6aa, 0x4, '\x00', 0xffff}) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000280)=""/119) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') sendfile(r0, r4, 0x0, 0x1000003) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r5, 0x400455c8, 0x0) accept$unix(r4, &(0x7f0000000180), &(0x7f0000000000)=0x6e) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000080)=0x2) 19:16:33 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:16:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x8000000000000011) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:16:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5421, &(0x7f0000000080)) 19:16:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:16:33 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0xff600000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:16:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCSETXW(r0, 0x5435, &(0x7f0000000000)={0x6135, 0x1, [0x3f, 0x9, 0x5, 0x10000, 0x7f00], 0xff}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x440, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000140)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) getresgid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) write$P9_RSTATu(r1, &(0x7f00000003c0)={0x71, 0x7d, 0x2, {{0x0, 0x47, 0x3ff, 0x5, {0x30, 0x3, 0x8}, 0x10000000, 0x80000001, 0x1, 0x7, 0x0, '', 0x0, '', 0xa, '/dev/ptmx\x00', 0xa, '/dev/ptmx\x00'}, 0x15, 'wlan0md5sumself+user\xa9', r2, r3, r4}}, 0x71) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x7) 19:16:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5422, &(0x7f0000000080)) [ 2582.309965][T12030] Bluetooth: hci1: Frame reassembly failed (-84) [ 2582.352055][ C1] net_ratelimit: 20 callbacks suppressed [ 2582.352063][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2582.363546][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2582.369369][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2582.375197][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:16:34 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:16:34 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000100)=""/189) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000000c0)={0xffffffff, 0xf47}) 19:16:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5423, &(0x7f0000000080)) 19:16:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0xed8f, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 2582.671968][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2582.677795][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:16:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5424, &(0x7f0000000080)) 19:16:34 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000100)={0x100000001, 0x2, 0x40}) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x9, 0x1}]}) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) 19:16:34 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0xffffff7f) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:16:34 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:16:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5425, &(0x7f0000000080)) 19:16:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc256eee239a2a053c1e123c3eb995cd5d71") r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000100)={0x9, &(0x7f0000000240)=[{0x2, 0x0, 0x4, 0x9}, {0x7f, 0x8, 0x4, 0x6}, {0x2bed, 0x2, 0xffffffffffffaa0c, 0xb73b}, {0x2, 0xfffffffffffffffb, 0x80, 0x7fff}, {0x9, 0x6, 0x4, 0x1ca}, {0x3, 0x2, 0x9, 0x4}, {0xfff, 0x5e, 0x3, 0x401}, {0x8, 0x27b, 0x7, 0x1}, {0x200000000000000, 0x7f, 0x100, 0x7ff}]}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000180)={0x2, {{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x18}, 0x4}}}, 0x88) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) [ 2583.471950][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2583.477787][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2583.483647][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2583.490388][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2584.352033][ T3878] Bluetooth: hci1: command 0x1003 tx timeout [ 2584.358186][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2586.432109][ T2928] Bluetooth: hci1: command 0x1001 tx timeout [ 2586.438230][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2587.632030][ C1] net_ratelimit: 20 callbacks suppressed [ 2587.637759][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2587.643584][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2587.649414][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2587.655225][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2587.792116][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2587.797932][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2588.512006][ T3878] Bluetooth: hci1: command 0x1009 tx timeout [ 2588.591995][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2588.597801][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2588.603659][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2588.609429][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:16:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x103200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:16:44 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) r2 = shmget(0x2, 0x3000, 0x6, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) ioctl$TIOCSBRK(r1, 0x40044591) 19:16:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5427, &(0x7f0000000080)) 19:16:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000003c0)=0x5) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0xfffffffffffffffe, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/49}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x2}) r2 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x8001, 0x100) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000200)={0xa500000000000000, 0xf000, 0x7ff, 0x6, 0x1d}) socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$llc(r2, &(0x7f0000000280)=""/245, 0xf5, 0x42, &(0x7f0000000040)={0x1a, 0x305, 0x1099, 0x1ff, 0x400, 0x6, @dev={[], 0xb}}, 0x10) 19:16:44 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0xfffffffe) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:16:44 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:16:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5428, &(0x7f0000000080)) 19:16:44 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x3e) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={r1, 0x7e, 0x8}, 0x8) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r3 = dup(r2) ioctl$TIOCSBRK(r3, 0x40044591) [ 2592.752338][ C1] net_ratelimit: 20 callbacks suppressed [ 2592.752386][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2592.764508][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2592.771049][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2592.777309][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:16:44 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:16:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5429, &(0x7f0000000080)) 19:16:44 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={r2, 0x1b380937, 0x0, 0xfffffffffffffff9, 0x81, 0x9}) 19:16:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000100)) [ 2593.071957][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2593.077816][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2593.871971][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2593.877778][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2593.883534][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2593.889269][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2594.672040][ T2928] Bluetooth: hci1: command 0x1003 tx timeout [ 2594.678186][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2596.751977][T29153] Bluetooth: hci1: command 0x1001 tx timeout [ 2596.758121][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2598.031937][ C1] net_ratelimit: 20 callbacks suppressed [ 2598.031943][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2598.043394][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2598.049164][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2598.054942][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2598.191999][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2598.197802][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2598.832065][ T2928] Bluetooth: hci1: command 0x1009 tx timeout [ 2598.992007][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2598.997872][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2599.003706][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2599.009445][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:16:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:16:54 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x504) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:16:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5432, &(0x7f0000000080)) 19:16:54 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x400000000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:16:54 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:16:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd0703008191bf51e32b05b47b26c1bca7abc9d3bcb86ef6affe157e3798e58ebfa6ac44d2cbb05052039d27d93") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x900, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000140)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:16:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5433, &(0x7f0000000080)) 19:16:54 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:16:54 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x800000000000001, 0x2003) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000080)={0x20, 0x8}) r2 = dup(r0) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x10b180, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x3, 0x10000) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$TIOCSBRK(r2, 0x40044591) 19:16:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5434, &(0x7f0000000080)) 19:16:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x820c0, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$KIOCSOUND(r1, 0x4b2f, 0x7c29) accept$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) getresuid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x0, 0x4e20, 0x9, 0xa, 0x80, 0x80, 0x3f, r3, r4}, {0x3ff, 0x10000, 0x40, 0x1, 0x6, 0x9, 0xc237, 0x6}, {0x458c, 0x0, 0xff, 0x100000000}, 0x8, 0x6e6bb0, 0x0, 0x1, 0x0, 0x3}, {{@in=@multicast2, 0x4d3, 0x33}, 0x0, @in=@empty, 0x0, 0x1, 0x3, 0x2, 0x10000, 0x1, 0x7}}, 0xe8) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0xfffffffffffffffc}) 19:16:54 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x3c74, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e24, 0x3, @rand_addr="c4a0ba0019a229fb01d1461f3fde9d8c", 0x100000001}}, [0xff, 0xff, 0x5, 0x6, 0x800000008, 0x4, 0x1, 0x9, 0x401, 0x6, 0x3, 0x3, 0x1004000000, 0x0, 0x9]}, &(0x7f00000001c0)=0x100) ioctl$TIOCSBRK(r1, 0x40044591) syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x7fff, 0x2000) [ 2603.151955][ C1] net_ratelimit: 20 callbacks suppressed [ 2603.151963][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2603.163494][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2603.169354][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2603.175192][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2603.481971][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2603.487796][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2604.271938][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2604.277759][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2604.283640][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2604.289391][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2604.911983][T27474] Bluetooth: hci1: command 0x1003 tx timeout [ 2604.918135][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2606.991948][ T2928] Bluetooth: hci1: command 0x1001 tx timeout [ 2606.998062][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2608.431936][ C1] net_ratelimit: 20 callbacks suppressed [ 2608.431942][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2608.443392][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2608.449165][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2608.455029][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2608.592074][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2608.597924][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2609.072016][T27474] Bluetooth: hci1: command 0x1009 tx timeout [ 2609.392334][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2609.398234][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2609.404093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2609.409863][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:17:04 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x5e7, @rand_addr="3efd78a92081e3388fc54cd889ec7034", 0x3a27}, 0x1c) ioctl$TIOCSBRK(r1, 0x40044591) 19:17:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5435, &(0x7f0000000080)) 19:17:04 executing program 4: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000140)=0x10001) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000380)=0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000240)={0x5, 0x9af}) ptrace$poke(0x5, r4, &(0x7f0000000200), 0x7) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e5}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) 19:17:04 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:17:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0)='TIPCv2\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4a00, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') socketpair(0x0, 0x80000, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000a80)={&(0x7f0000000540)=@pptp={0x18, 0x2, {0x2, @empty}}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000005c0)="f18b10a3db9f", 0x6}, {&(0x7f0000000600)="2373f28b5511f989d0eeee29fc0655fa65e0fdb1a67396a9d5c1280bbef52abaf4a5", 0x22}, {&(0x7f0000000640)="246eed599c467fecb25ba236f184b3715ba7eb1fa9961e04f114a779da182519e8fef76b044f7ac0077a30dced5f4ed3d0ef3d71b84b186ef21e23e2eabbde637b01764e31c955d1b821bd95ecb9172f1ca6531496ddafabb8f45ec32bc6e664f075a738a5cfc0", 0x67}, {&(0x7f00000006c0)="4c48c0985b31b90e72660363da489beb6eaf598d9b6f8469763dedb8feea57e1203b7704ccb9c42dd1e46f73542f1f8134930440be7d3b16512fecfcb516ecfcc6781f47642555e46bc56a87dd6d5490ba746de451db7f2be6389eb5b4000b8cdaee75e34ea40d8a643996009de47b91010bdbf5a0251717cf794bc2e62e38cf262b9cbc31031e5e0c841e94a2191efbed88332381272642e1b5d546fe8608079d3045e011fa4bf745", 0xa9}, {&(0x7f0000000780)="8734", 0x2}, {&(0x7f00000007c0)="15ad8868a5ede5e3cc927d8567617f9a5fef27da4a489ceb2d4823d3a45ee7a9911c232feb0debb6822bd01555d00a0705965399370b1b654f68d1b3517b0aa42bb9e7b62d0d3b4955159385d98d37a1f54fbe18904338884ecef22f9803f58f038f4fa967cdfa87cf0460897820f54c1cdaa2cdf7265f2c037e17b554eea4ab045c5c86e7e43566ed06e9a65c3f5b55aa235ad26bb2389fb0cb5b60be17d7ffe4bf1a9b024c20f3a90c7f3f29df3450cef7db46b4ea655ab0b793fb7e3c", 0xbe}, {&(0x7f0000000880)="3349170a9b4f44fd80ed9e8d9d5de76004d641ec0dfdeead809a94d3d558cc2310f741ac05ca1a28089f5146afdb90064ce6d3e8f73cc681eefe310cd86547e2ed0a1ddb8b628d8f3593734a4040327d32a8057dacdf71f4706e1d8af884a20e517b7dec43d26dd91b7220d9f9594d898ececaa382b6c178aa378f0b808bfeadc41bbbbda6f8740295e8be66ad1e4195b06d5812d4f95af2ec349777ee35b07b0e75d7008f3a", 0xa6}, {&(0x7f0000000940)="48b3371333d27c63dd2379560b6c3f1b1ccf7c9643d836d7b90548f89cad5dcdd3e96d75ab3a97be748ca38e3849fdcbb5945f519d1f817109bfc2e0597144808b9d0c68641fc07c1a4c5511bf86f70de6c8da144ee4a95c924aca1d61a34768b57e52605ca5fdabff02dc386d34b370d41dbe0fd2f0eba1c2537d025e2ddaaa36b180cf9bd0ec6a741d9791709084afe50da5d66a50feea9dc15213dd", 0x9d}], 0x8}, 0x4000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)="73d4ef485d8d86b7764dc1242fb4ec36dc1f832a9ee02e613f36d09d3a1bc744ba17c93c6117e9e2b369de59a8a064d91a9feafca952836e24fafd16de1ea20101fca82ae27eac978b9252aadf4713a6964d60d8c149e5b7468f110b9c40785d9e5d259ed75a60ad2b483f5bb7dac28d402afc56034dc9e421e5811b2b70391c217a33080f3bd3768f5691ac34fc885f9b6f640800ea031d47fb549d26cb0f3d4615b84c71e0bf13826d62620fe62fc97ef445ca3b5ef9cc44d334bbf642b99847569defb9e2555ff8fa4b4be8e5d6de064ed2eca61ffdfce45b857b01abbb1b", 0xe0, r3}, 0x68) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3108000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x13c, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xe8, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xfffffffffffff315, @mcast2, 0x10001}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3f, @mcast1, 0x258}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0xffffffffffffffff, 0x6, @empty, 0x400}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x13c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:17:04 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x60ffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:17:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) 19:17:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5437, &(0x7f0000000080)) [ 2613.163256][T24511] Bluetooth: hci1: Frame reassembly failed (-84) 19:17:04 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xffffffffffffffc1, 0x1c0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0x4) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r2 = dup(r1) ioctl$TIOCSBRK(r2, 0x40044591) 19:17:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5441, &(0x7f0000000080)) 19:17:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5450, &(0x7f0000000080)) 19:17:05 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:17:05 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000080)={0x3, 0x1, [0xadc, 0x7fff, 0x3, 0x5, 0x7, 0x1, 0x2, 0x1]}) 19:17:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5451, &(0x7f0000000080)) 19:17:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800000000000000f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)="5eca9648febb76b918748eee8cf452d8988ac7d12306e0a17c4030ba07dce232b487fef358b2ead6898f2f8ce74ac6", 0x2f, r0}, 0x68) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) [ 2613.551950][ C1] net_ratelimit: 20 callbacks suppressed [ 2613.551959][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2613.563539][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2613.569462][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2613.575457][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:17:05 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000100)={@remote, 0x6c, r2}) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)={0x6000, 0x4000}) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r4 = dup(r0) ioctl$TIOCSBRK(r4, 0x40044591) write$binfmt_aout(r0, &(0x7f0000000200)={{0x10f, 0x7, 0x5, 0x3a5, 0x7d, 0x3f, 0x16c}, "05fcf7ba8dd45e1ef88e6e01e11d723545b1f3eac37b546dec3d09df1ea634ddda3206261d2d4b2eeefac4be8f8794bbed4880f06df3d765ab5ced69adaced16e115a9f6f2aa4927b6fcd6685d0e3c13105cad9c0e871711b4680e51a3750eee1e3a324caf61f828313d9009d23214", [[], [], [], [], []]}, 0x58f) [ 2613.881950][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2613.887759][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2614.671939][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2614.677847][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2614.683781][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2614.689522][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2615.231894][ T2928] Bluetooth: hci1: command 0x1003 tx timeout [ 2615.238104][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2617.311934][ T3878] Bluetooth: hci1: command 0x1001 tx timeout [ 2617.318050][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2618.831925][ C1] net_ratelimit: 20 callbacks suppressed [ 2618.831931][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2618.843350][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2618.849098][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2618.855870][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2618.991957][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2618.997770][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2619.391959][ T2928] Bluetooth: hci1: command 0x1009 tx timeout [ 2619.791944][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2619.797820][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2619.803675][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2619.810734][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:17:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000140)=0x5, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 19:17:14 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x740000000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:17:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5452, &(0x7f0000000080)) 19:17:14 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x301800, 0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f00000000c0)={0x80000001, "a5f4b2271d7ed5dfb151616863144cc0855d3e9ffc3bd5d37b80a0072ca45712", 0x802, 0xffff, 0x7fff, 0x9, 0x7}) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r2 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) pkey_alloc(0x0, 0x80000000000000) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000080)) 19:17:14 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:17:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x1a) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000140)={0x7b, 0x0, [0x0, 0x1800000000, 0x5, 0x9]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000240)=0x7, &(0x7f0000000280)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x800000000000000f) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x121a00, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)) 19:17:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5456, &(0x7f0000000080)) 19:17:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5457, &(0x7f0000000080)) 19:17:15 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40400, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0xf7}, &(0x7f0000000140)=0x8) r3 = dup(r0) ioctl$TIOCSBRK(r3, 0x40044591) 19:17:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5456, &(0x7f0000000080)) 19:17:15 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) getsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0x4) 19:17:15 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2623.951932][ C1] net_ratelimit: 20 callbacks suppressed [ 2623.951942][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2623.963466][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2623.969290][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2623.975110][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2624.271954][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2624.277801][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2625.071888][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2625.077663][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2625.083453][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2625.090117][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2625.392030][T27474] Bluetooth: hci1: command 0x1003 tx timeout [ 2625.398191][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2627.471994][T27474] Bluetooth: hci1: command 0x1001 tx timeout [ 2627.478120][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2629.231924][ C1] net_ratelimit: 20 callbacks suppressed [ 2629.237633][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2629.243402][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2629.249203][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2629.254923][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2629.392014][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2629.397781][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2629.551913][ T2928] Bluetooth: hci1: command 0x1009 tx timeout [ 2630.191937][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2630.197735][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2630.203598][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2630.209345][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:17:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x7, 0x3b2}, {0xc97c, 0x7}, {0x7ff, 0x200}, {0x1ff, 0x2}, {0xfffffffffffffffd, 0x7}, {0xfffffffffffffffa, 0x2}, {0x7, 0x81}, {0x4, 0x6}]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:17:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x545d, &(0x7f0000000080)) 19:17:25 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:17:25 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x7ff2dac83000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:17:25 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) open_by_handle_at(r0, &(0x7f0000000000)={0x10, 0x1f, "ccad8f41010027f5"}, 0x2) 19:17:25 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2633.619139][ T2697] Bluetooth: hci1: sending frame failed (-49) 19:17:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5460, &(0x7f0000000080)) 19:17:25 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0xffd9}], 0x1) r1 = dup(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$TIOCSBRK(r1, 0x40044591) 19:17:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x40045431, &(0x7f0000000080)) 19:17:25 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x2e0, @time={0x0, 0x1c9c380}, 0x7, {0x3ff, 0x8}, 0xd3, 0x1, 0x1}) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000140)) r2 = dup(r0) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000000)={0x7, 0x367}) ioctl$TIOCSBRK(r2, 0x40044591) 19:17:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x40045436, &(0x7f0000000080)) 19:17:25 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2634.351947][ C1] net_ratelimit: 20 callbacks suppressed [ 2634.351956][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2634.363481][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2634.369253][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2634.375055][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2634.671879][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2634.677709][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2635.471873][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2635.477709][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2635.483545][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2635.489311][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2635.631907][ T3878] Bluetooth: hci1: command 0x1003 tx timeout [ 2635.638017][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2637.712223][ T2928] Bluetooth: hci1: command 0x1001 tx timeout [ 2637.718361][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2639.631945][ C1] net_ratelimit: 20 callbacks suppressed [ 2639.637640][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2639.643401][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2639.649169][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2639.654902][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2639.791962][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2639.797944][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2639.803895][ T2928] Bluetooth: hci1: command 0x1009 tx timeout [ 2640.591956][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2640.597822][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2640.603659][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2640.609422][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:17:35 executing program 2: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000140)=0x2) 19:17:35 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x7fffffffefff) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:17:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x40049409, &(0x7f0000000080)) 19:17:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) r2 = geteuid() syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x6, &(0x7f0000003480)=[{&(0x7f00000000c0)="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", 0x1000, 0x4}, {&(0x7f00000021c0)="d2b7c61b67d4c59c2d238146a17c2e1f4e7cba106d164dc5f3d8932ce1cad05733f2bc7d1933f0843ce5d7cfcc1752ad35465511a1e6c9b1e4f01cccd60f463a45499c339351503a6136f79ed549e15e8ed5336edfaaa74f3c7d0df6f809448eb4dfbd938c1ce2fe195c7ef097fcc097ef8110cecb4145bfc3c07f6ce098b2577c8adb4c1d2748a9522824b31efddf6f0cbb6ecdc032581c6e0035358e53b0fb057c67bd2d08f54f7da80c0d096ae4561368d2326fbc817f588d74d8ecc16a736c787650a882b591b3b6aa7d20b2d402db398447fed4f6be4170906039ebc21e0d", 0xe1, 0x9}, {&(0x7f00000022c0)="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", 0x1000, 0x6}, {&(0x7f00000010c0)="1d0f9619c01d0e51b70cd7d898e72d7d76eac6a3149f5cc07c63bcb12fee11b8d51dfb2e275e606fe266918e586846f0a88c1352130a588a2884368d03be", 0x3e, 0x785c}, {&(0x7f00000032c0)="b684dc19819b63e3520349fb4b8ec7ea505cb3f0c4e9028138260904aa097be47475b3a20745f3ed74b7f03937aeec21467f9860c536107f398d862799779580e075baa9aeec8254932aef6e62e468c314b2ca50cef0cf3f1629e9805eb0175a87fb65d9df37dfd8b9700eb001e7ebf400832cc9b1aa5fe8511c6e1f0103ae45d4cc383098566ce09c628a6b7588ba1848740cbb3efa794e99bf689db15f6390eadfba6941b6d611844e0a67", 0xac, 0x6}, {&(0x7f0000003380)="506b7b340cffe2f7511cef2569815fa9fa6d1d70acfbfacd67ff8aa324a1a4057ed433416c3728f38596466665b83060e8c8f2c8c85570f1d8959ce27471aec6e06c8052a3b6261333209779a4c8973d7ac6fe64dd2afe730bbfd81d1dec070c6480bad2c9985bf071de42de0e440abb73453b91c208b05a19571a0202b9bf369adc7bf024d3b8089a601ed2437b6068342265e33361fbf415b49e07698d44f0fb2da46e888328bec742e77745f3cadf7df05e73f71c2b131c63cb7a516cdaa7d47e90b8bc086bba2bc33b6becd158e25eba70b847f4f7a901a970ba89", 0xdd, 0x70fc}], 0x4004, &(0x7f0000001100)={[{@session={'session', 0x3d, 0x1e}}, {@mode={'mode', 0x3d, 0x8}}, {@map_off='map=off'}], [{@uid_gt={'uid>', r2}}, {@fsmagic={'fsmagic', 0x3d, 0x3f}}, {@hash='hash'}]}) ioctl$TIOCSBRK(r1, 0x40044591) 19:17:35 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:17:35 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:17:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x4020940d, &(0x7f0000000080)) 19:17:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001080)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000001240)='\x9e\xbeB\xca\xf59\xa9\x84 \x00\x00\x00\x00\x00\x00\x00~-s\xf8\xc8\xa2\xa7\xbb\x9c\xda7\xd8\xb9z\xc7\xfdh\x93\x13\xf2\xeaGWz\bcg\"B\x17@\x12`U\xee\xa5\x8dK\xbe\xeei{\x00'/68) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001100)={0x5, 0x8001, 0x1, 'queue1\x00', 0x2}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1) r3 = dup(r0) ioctl$TIOCSBRK(r3, 0x40044591) 19:17:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x419, 0x20080) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000100)=0xa) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000000c0), 0x4) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) 19:17:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x402c542b, &(0x7f0000000080)) 19:17:35 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:17:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000580)={0x0, 0xa6}, &(0x7f00000005c0)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000600)={0x80, 0x8000, 0x3, 0x4, 0x0}, &(0x7f0000000640)=0x10) sendmsg$inet_sctp(r1, &(0x7f0000000740)={&(0x7f0000000000)=@in={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000080)="f8e09bbfd66be1181effdb410406de7cdb77db025320f7de7cf980dd05efcddc50b21f28727ab2515a474642b1176e41aabd1cbd3531cdfa427426d36a69e583c106d6340477722bde019c4dc66620af106e555d3b6e175a2884203370d9a34b59edab6b8f0fefb8832a268720413f856b14c7c3aa37c5facdde2c695a201c7c3d014c341816d25d1a00dff9b5e85c783f88d828e169aefeba59290a9651e67c920410acf3d713d49edb0e78fe52edc891d2e181a87edfefb17f5ab295f7bd74f1f210ad324eb3", 0xc7}, {&(0x7f0000000180)="3c2619915a8790af9240d08f0001af73c8b1df0e3333b5bc77e29b379fe5922f7113db8db4f1459e1f28bdd986eabf4fc3b3828666f35f2aad615d5265780279cca83a891971dc5fa83a1d4b8739da622cea4a804e", 0x55}, {&(0x7f0000000200)="e822815bcc468eb1a9ec09dac57a47d64a293fa30ebdade5b2ce0c345110454e4625b1689d268fb924da1ccac414bf1d4d5736622d305049f41edd38da7bf59c051fdd3b9ba55ed17d0f1e54d9387b5cf6a3be376fc8e0552e42fb9384fe17852557ec9ffc64ee5fdc5e26ea5c8c0d0ba00b76e30c0c079ffeefa973203532ba4fd69175b0c69d9a254d87ce77b28f85ef58046ee077fcc11e25b910b242b7", 0x9f}, {&(0x7f00000002c0)="3f96e73d614810e27321c4e17e47fce275d5f66f3460481bd237b78b45b78e422f97b07db0c9e547df5207d7", 0x2c}, {&(0x7f0000000300)="d39407a1598e27fa6105b008d333bfdd10c4bc8fd8a0045d374839af161c9517084a0fceca56b49b41d7affe6539a1ddcb6078267c71d38533b2c20a4755814e4e69858e4047e94541a9511eba29b50b2707220bd3605fdcfef23842f726d2ace8761ba8c4be1faa23272691", 0x6c}, {&(0x7f0000000380)="dc23c3177b4c2f2c8af924bbb5b5f3d09f5940d519179fdeaf83feeb3129ea9a84681e7189c90f2698df5a6ad42ebb33425a89ba9a3ed8153246c70c6e1d93e340a583e90eeb0ea3edc456c92230a387178a44a9d0d94bbdcd9526", 0x5b}, {&(0x7f0000000400)="a03af07e67f32663a122483e66f8961e577efa0b640490b51b8eb26b038f9e02e3cb7b14f94732116f145afe042fb0f6141ee070abde966ad6dad47c98c5cf9adc363c60aaa7dc3f349c9ff9b4f2799aa51540868ea4ac4058fbb6f32f06ada1092d424a57fea0c72092dbb4d232368f14cce1ae5b6079d5f039856442e5f6bf04cd63e985086a206fb8fc21ce5e42645849dec9018e0dcb2323135e84582ba221d433093bdc93aa3e8ac8e4ac40986e1b9d96fa6f4b5156ae5c17d47972d5c054dbf221b40c1ba7c848cbb85dc3667800", 0xd1}], 0x7, &(0x7f0000000680)=[@sndinfo={0x20, 0x84, 0x2, {0x1f, 0x8000, 0x7ff, 0x0, r2}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x1f}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x5, 0x7fffffff, 0x5e89, r3}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x90, 0x44000}, 0x1) ioctl$TIOCSBRK(r1, 0x40044591) [ 2644.751912][ C1] net_ratelimit: 20 callbacks suppressed [ 2644.751918][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2644.763376][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2644.769166][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2644.774989][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2645.071903][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2645.077719][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2645.871872][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2645.877711][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2645.883563][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2645.889313][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2645.951848][ T3878] Bluetooth: hci1: command 0x1003 tx timeout [ 2645.958055][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2648.031943][ T3878] Bluetooth: hci1: command 0x1001 tx timeout [ 2648.038192][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2650.031918][ C1] net_ratelimit: 20 callbacks suppressed [ 2650.037615][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2650.043372][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2650.049139][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2650.054863][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2650.111852][T28313] Bluetooth: hci1: command 0x1009 tx timeout [ 2650.191900][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2650.197672][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2650.991896][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2650.997680][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2651.003549][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2651.009332][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:17:45 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x800, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0x2) 19:17:45 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x940000000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:17:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x402c542c, &(0x7f0000000080)) 19:17:45 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:17:45 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) r2 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x2, 0x30}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r3, 0x0, 0x7, 0xc99a, 0x4, 0x8}, &(0x7f0000000140)=0xffffffffffffff26) r5 = dup(r0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, {0xa, 0x4e24, 0x9, @local, 0x1ab}, 0x1, [0x2343, 0x1, 0xb41c, 0x1, 0x4, 0x9, 0xfffffffffffffff8, 0x10000]}, 0x5c) ioctl$TIOCSBRK(r5, 0x40044591) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000001c0)=0x200000000) fcntl$setflags(r0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0)={r4, 0x51, "a1858cafcc10a683ad2bfe9c3bd4e1b9b3f6cbf8631a09ff525edce98267b2dd9d80d29a2614baefdc76b5037353192a86e49a518ad24ba0cd669696e764cef54b71d78b64bce84732d2bfa986738b6246"}, &(0x7f0000000340)=0x59) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x280, 0x0) 19:17:45 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:17:45 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x1) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) 19:17:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x402c542d, &(0x7f0000000080)) 19:17:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x80045430, &(0x7f0000000080)) 19:17:46 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x60000, 0x0) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000080)) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000100)) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r2 = dup(r1) ioctl$TIOCSBRK(r2, 0x40044591) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3f, 0x1, 0x1000}, 0x4) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) 19:17:46 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:17:46 executing program 4: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000140)=0x2) [ 2654.580675][T24511] Bluetooth: hci2: Frame reassembly failed (-84) [ 2655.151887][ C1] net_ratelimit: 20 callbacks suppressed [ 2655.151896][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2655.163368][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2655.169159][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2655.174944][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2655.481911][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2655.487753][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2656.111916][ T3878] Bluetooth: hci1: command 0x1003 tx timeout [ 2656.118120][ T8520] Bluetooth: hci1: sending frame failed (-49) [ 2656.271886][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2656.277757][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2656.283607][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2656.289351][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2656.591851][ T3878] Bluetooth: hci2: command 0x1003 tx timeout [ 2656.597985][ T8520] Bluetooth: hci2: sending frame failed (-49) [ 2658.191933][ T3878] Bluetooth: hci1: command 0x1001 tx timeout [ 2658.198078][ T8520] Bluetooth: hci1: sending frame failed (-49) [ 2658.671938][ T2928] Bluetooth: hci2: command 0x1001 tx timeout [ 2658.678110][ T8520] Bluetooth: hci2: sending frame failed (-49) [ 2660.271895][ T2928] Bluetooth: hci1: command 0x1009 tx timeout [ 2660.431916][ C1] net_ratelimit: 20 callbacks suppressed [ 2660.431924][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2660.443472][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2660.449239][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2660.455042][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2660.591885][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2660.597708][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2660.751873][ T3878] Bluetooth: hci2: command 0x1009 tx timeout [ 2661.391903][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2661.397718][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2661.403832][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2661.409597][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:17:55 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0x2) 19:17:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x80045432, &(0x7f0000000080)) 19:17:55 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) 19:17:55 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x1000000000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:17:55 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r4 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r4, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:17:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x80045438, &(0x7f0000000080)) [ 2664.250046][T12030] Bluetooth: hci1: Frame reassembly failed (-84) 19:17:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x80045439, &(0x7f0000000080)) 19:17:56 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f00000001c0)=0xe8) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000200)={r2, 0x1, 0x6, @remote}, 0x10) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r3 = dup(r0) r4 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000600)={'syz', 0x3}, &(0x7f0000000740)="fbbadae11c962e3ec00cc0c844fb1c6af7d3b2a3ef956e0f0040de93d95fe3c1b0c4aa7c53b2ca1d64ab27a93e9c7b653b77ab9d8582ee11650270b50799db9a713f6c7d87dbc29c454d80c1e1bd036ddae9a3bafef1a547f8d4fb39b1c9e7ba1d4ca3791fcd1da9d4e9a01ab43a0ea74adc27070393fd4935980ebd142e33142915f3b3a3887c5b1bc5c9248962d10217f9e9c3644f0a249939ff4c262e0cf1db7c662ddcf5b9eea0bd430ffc2c43d4936b3ff9071d8f9f437bdea5ebfb2349efaf690f27d592961b03a4d1f2d2078c9baa50612ab8379e4f196dd427a1f0d99edd98dbc50ec6959b5cc41d9c3378845073d87fdbfc2879cc", 0xf9, 0xfffffffffffffff8) r5 = add_key(&(0x7f0000000840)='blacklist\x00', &(0x7f0000000880)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, r4, r5) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000080)={0x0, {0x3, 0x400, 0x100, 0xa8200cc}}) recvmsg(r3, &(0x7f0000000440)={&(0x7f0000000280)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)=""/136, 0x88}, {&(0x7f00000003c0)=""/64, 0x40}], 0x2, &(0x7f00000021c0)=""/4096, 0x1000}, 0x20) sendmmsg(r3, &(0x7f0000000680)=[{{&(0x7f0000000480)=@can={0x1d, r6}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)="85d9d7418032368f98fa1794107bb12bd09d2aa3e50366dfcba1d6bfa667e957406f352a7c43ddcee3d95e29405b2887af887f4a72be7e8531a381e98efa302be87b289047805eac03eed03616098f7d13501b6da99330989e7ed6c70aac273590013105c3050d33ae5aefc1a2b3a30e06817ab05030fe529e4b31528d7403f6b11b78fcdf205d1d15860812a103e0366d2bfa1386b4de3d3833f93f4819cdc14d1e260dcec236e0c05e2228de0dd94f0bd31a10cbadc0a009eb057122b83a5f990df2871d7acf93ca54b50a3ff2e46086efe0724a958fb1f789951057f33b058a9599783a29c3ad74e0416dbc", 0xed}, {&(0x7f0000000600)}], 0x2}}], 0x1, 0x40000) ioctl$TIOCSBRK(r3, 0x40044591) poll(&(0x7f00000006c0)=[{r3, 0xa0}, {r1, 0x8000}, {r3}, {r0}, {r0, 0x4000}, {r3, 0x8080}, {r0, 0x8522}, {r1, 0x80}, {r1, 0x8001}, {r0, 0x4014}], 0xa, 0x2) dup(r0) 19:17:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x80045440, &(0x7f0000000080)) 19:17:56 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0xa) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000080)=0xc2) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r2 = dup(r0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000140)) ioctl$TIOCSBRK(r2, 0x40044591) r3 = getpgrp(0x0) ptrace$getregset(0x4204, r3, 0x3, &(0x7f0000000100)={&(0x7f00000000c0)=""/58, 0x3a}) 19:17:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x802c542a, &(0x7f0000000080)) 19:17:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) [ 2665.551852][ C1] net_ratelimit: 20 callbacks suppressed [ 2665.551858][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2665.563544][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2665.569340][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2665.575175][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2665.871869][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2665.877753][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2666.271848][T28313] Bluetooth: hci1: command 0x1003 tx timeout [ 2666.278056][ T8520] Bluetooth: hci1: sending frame failed (-49) [ 2666.671831][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2666.677654][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2666.683472][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2666.689211][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2666.911840][T28313] Bluetooth: hci2: command 0x1003 tx timeout [ 2666.919185][ T8520] Bluetooth: hci2: sending frame failed (-49) [ 2668.351936][T28313] Bluetooth: hci1: command 0x1001 tx timeout [ 2668.358182][ T8520] Bluetooth: hci1: sending frame failed (-49) [ 2668.991990][T28313] Bluetooth: hci2: command 0x1001 tx timeout [ 2668.998146][ T8520] Bluetooth: hci2: sending frame failed (-49) [ 2670.431957][ T3878] Bluetooth: hci1: command 0x1009 tx timeout [ 2670.831865][ C1] net_ratelimit: 20 callbacks suppressed [ 2670.837575][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2670.843429][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2670.849252][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2670.855088][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2670.991907][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2670.997737][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2671.071916][ T3878] Bluetooth: hci2: command 0x1009 tx timeout [ 2671.791893][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2671.797779][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2671.803613][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2671.809406][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:18:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000080)=""/104, 0x68}, {&(0x7f0000000100)=""/169, 0xa9}, {&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f00000001c0)=""/169, 0xa9}, {&(0x7f0000000280)=""/61, 0x3d}, {&(0x7f00000002c0)=""/145, 0x91}], 0x6, 0x0) ioctl$TIOCSBRK(r1, 0x40044591) 19:18:06 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x4000000000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0xc0045878, &(0x7f0000000080)) 19:18:06 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r4 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r4, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = openat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x140, 0x40) getsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:18:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0xc0045878, &(0x7f0000000080)) 19:18:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0xc0189436, &(0x7f0000000080)) 19:18:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x0, 0x0) bind$tipc(r1, &(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x41}, 0x3}}, 0x10) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x52bc2262, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="915def04fb383500c1f09eb19dbf4cef037d75bbf672f3ef5d42f2053b270b6026f2ed57", 0x24, 0xffff}], 0x4, &(0x7f0000000200)={[{@noautodefrag='noautodefrag'}, {@check_int_print_mask={'check_int_print_mask', 0x3d, 0x49}}, {@compress='compress'}, {@rescan_uuid_tree='rescan_uuid_tree'}], [{@subj_role={'subj_role', 0x3d, '@'}}, {@subj_type={'subj_type', 0x3d, '/dev/input/event#\x00'}}, {@euid_lt={'euid<', r2}}, {@dont_measure='dont_measure'}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/input/event#\x00'}}]}) r3 = dup(r0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000300)={0xa, &(0x7f00000002c0)=[{0x342a, 0x4}, {0x7, 0xffffffffffffffff}, {0x3, 0x5}, {0x2, 0x3f}, {0x8, 0x4e7}, {0x6, 0x8}, {0x0, 0x9}, {0x7fff, 0x800}, {0xfffffffffffffff8, 0xec7}, {0x49d, 0x4}]}) ioctl$TIOCSBRK(r3, 0x40044591) 19:18:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0xc020660b, &(0x7f0000000080)) 19:18:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000080)={{0x3, 0x1, 0x3, 0x1}, 0x3ff, 0xfff, 'id0\x00', 'timer0\x00', 0x0, 0x80, 0x0, 0x0, 0x1ff}) 19:18:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x10}) 19:18:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:18:06 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r4 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r4, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x1e}) 19:18:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) setsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000080)="09d848aac0e1c7675be14cabe5c94bb5189bb66106e9fc243a4b0ad4e09aff403c9c40a5cc734607b1b7122f8529168b6d1a9eb9459d3ae2a391bdc3767f8f670d29236223e47fa8cb4c75076bc562516e26c78b1877bdda20b1accef17263926f1e6e491b2a09d56db99bd9ef44dbbc939f4e23c952227fce56e7e335b8cfd287b7c3c566a711f671d40a0f833c63", 0x8f) 19:18:06 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x20000000000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2675.951869][ C1] net_ratelimit: 20 callbacks suppressed [ 2675.951875][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2675.963436][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2675.969270][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2675.975376][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2676.271857][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2676.277747][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2676.591821][T28313] Bluetooth: hci1: command 0x1003 tx timeout [ 2676.597996][ T8520] Bluetooth: hci1: sending frame failed (-49) [ 2677.071832][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2677.077664][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2677.083489][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2677.090145][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2677.232052][T28313] Bluetooth: hci2: command 0x1003 tx timeout [ 2677.238218][ T8520] Bluetooth: hci2: sending frame failed (-49) [ 2678.671901][ T3878] Bluetooth: hci1: command 0x1001 tx timeout [ 2678.678010][ T8520] Bluetooth: hci1: sending frame failed (-49) [ 2679.311870][ T3878] Bluetooth: hci2: command 0x1001 tx timeout [ 2679.317972][ T8520] Bluetooth: hci2: sending frame failed (-49) [ 2680.751838][T28313] Bluetooth: hci1: command 0x1009 tx timeout [ 2681.231853][ C1] net_ratelimit: 20 callbacks suppressed [ 2681.237552][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2681.243304][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2681.249090][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2681.254832][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2681.391969][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2681.397849][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2681.403807][T28313] Bluetooth: hci2: command 0x1009 tx timeout [ 2682.191898][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2682.200418][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2682.206266][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2682.212033][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:18:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000000)={0x5, 0x2, 0x6, 0x1f, 0x3}) 19:18:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x1e00}) 19:18:16 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xaee, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f00000001c0)={0xffffffffffff0001, 0x6, 0x4, 0x400}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x80) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = dup(r1) ioctl$TIOCSBRK(r4, 0x40044591) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'nlmon0\x00', 0x0}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x300, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4008810) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@remote, 0x5f, r5}) 19:18:16 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r3, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:16 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x30c8daf27f0000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x100000}) 19:18:16 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) dup(r0) ioctl$TIOCSBRK(r0, 0x40044591) [ 2684.824591][T24511] Bluetooth: hci1: Frame reassembly failed (-84) 19:18:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:18:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x10000000}) 19:18:17 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r2, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:17 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x2440) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/176) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r2 = dup(r1) ioctl$TIOCSBRK(r2, 0x40044591) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x80000000, 0x8200, 0x3, 0x2, r3}, &(0x7f0000000200)=0x10) 19:18:17 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x50710000000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2686.361927][ C1] net_ratelimit: 20 callbacks suppressed [ 2686.361937][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2686.373520][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2686.379336][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2686.385140][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2686.671837][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2686.677628][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2686.831842][ T3878] Bluetooth: hci1: command 0x1003 tx timeout [ 2686.838091][ T8520] Bluetooth: hci1: sending frame failed (-49) [ 2687.471806][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2687.477615][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2687.483469][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2687.489215][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2687.551828][ T3878] Bluetooth: hci2: command 0x1003 tx timeout [ 2687.558030][ T8520] Bluetooth: hci2: sending frame failed (-49) [ 2688.911902][T28313] Bluetooth: hci1: command 0x1001 tx timeout [ 2688.918014][ T8520] Bluetooth: hci1: sending frame failed (-49) [ 2689.631871][T28313] Bluetooth: hci2: command 0x1001 tx timeout [ 2689.637954][ T8520] Bluetooth: hci2: sending frame failed (-49) [ 2690.991853][ T3878] Bluetooth: hci1: command 0x1009 tx timeout [ 2691.631808][ C1] net_ratelimit: 20 callbacks suppressed [ 2691.631822][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2691.643287][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2691.649110][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2691.654900][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2691.711931][ T3878] Bluetooth: hci2: command 0x1009 tx timeout [ 2691.791884][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2691.797679][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2692.591940][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2692.597792][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2692.603659][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2692.609471][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:18:26 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x6, 0x40400) ioctl$TCSETS(r0, 0x5402, &(0x7f00000003c0)={0x7, 0xd0, 0x56d0, 0x4, 0x15, 0x10000, 0x200, 0x6a54acf4, 0xdd, 0x5, 0x8, 0x7ff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, 0x1, [], &(0x7f0000000040)=0x6}) ioctl$KDADDIO(r1, 0x400455c8, 0x0) close(r2) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000200)=0x5) r3 = syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000814) 19:18:26 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:18:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x1e000000}) 19:18:26 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r2, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:26 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0xc0700000000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0xfdfdffff}) [ 2695.012349][T19652] Bluetooth: hci1: Frame reassembly failed (-84) [ 2695.023464][T12030] Bluetooth: hci1: Frame reassembly failed (-84) 19:18:26 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r2, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:18:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0xfffffdfd}) 19:18:27 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:18:27 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r2, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:27 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0xd0500000000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2696.751865][ C1] net_ratelimit: 20 callbacks suppressed [ 2696.757560][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2696.763345][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2696.769154][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2696.774930][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2697.071849][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2697.077696][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2697.083921][T28313] Bluetooth: hci1: command 0x1003 tx timeout [ 2697.090080][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2697.871787][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2697.877601][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2697.883455][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2697.889221][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2699.151855][ T3878] Bluetooth: hci1: command 0x1001 tx timeout [ 2699.161625][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2701.231971][T28313] Bluetooth: hci1: command 0x1009 tx timeout [ 2702.031819][ C1] net_ratelimit: 20 callbacks suppressed [ 2702.031825][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2702.043463][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2702.049676][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2702.055531][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2702.191855][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2702.197926][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2702.991847][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2702.997711][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2703.003567][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2703.009324][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:18:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000140)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4000, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0xf, 0x100, 0x2, {0x8, 0x0, 0x6456, 0xcbc}}) 19:18:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x10000000000000}) 19:18:36 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r2, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:36 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000640)={@multicast1, @multicast1, 0x0}, &(0x7f0000000680)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000840)={@remote, @loopback, 0x0}, &(0x7f0000000880)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) getsockname$packet(r1, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000ac0)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000bc0)={@initdev, @loopback, 0x0}, &(0x7f0000000c00)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c40)={'bridge_slave_1\x00', 0x0}) getpeername$packet(r1, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000cc0)=0x14) getsockname$packet(r1, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d40)=0x14) accept$packet(r1, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000dc0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000e80)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000f80)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000fc0)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f00000010c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001100)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000021c0)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000001140)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000022c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f00000023c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000024c0)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f00000025c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000002ac0)={&(0x7f0000000000), 0xc, &(0x7f0000002a80)={&(0x7f0000002600)={0x454, r2, 0x311, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0xac, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffff800}}}]}}, {{0x8, 0x1, r4}, {0x174, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x74, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}, {{0x8, 0x1, r13}, {0x10c, 0x2, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x9, 0x7, 0xa0, 0x889}, {0x80000001, 0x7, 0x1, 0x81}, {0x1, 0x7fffffff, 0x6, 0x1}, {0x80000000, 0x0, 0xff, 0x400}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x78, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}]}}]}, 0x454}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) 19:18:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:18:36 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x100000000000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:36 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:18:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:18:36 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r2, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x1000000000000000}) [ 2705.239580][T30390] Bluetooth: hci1: Frame reassembly failed (-84) 19:18:37 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f00000021c0)=""/4096, 0x20a}], 0x10000330) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r1, &(0x7f0000000200)={0x78, 0x0, 0x7, {0x10000, 0x10000, 0x0, {0x5, 0x171a9c8d, 0x5, 0x9847, 0x4, 0x3ff, 0x2, 0x100, 0x0, 0x3f, 0x1, r2, r3, 0x10001, 0x3f}}}, 0x78) r4 = dup(r0) ioctl$TIOCSBRK(r4, 0x40044591) 19:18:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x1e00000000000000}) [ 2707.151860][ C1] net_ratelimit: 20 callbacks suppressed [ 2707.151869][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2707.163373][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2707.169147][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2707.175047][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2707.231764][T20198] Bluetooth: hci1: command 0x1003 tx timeout [ 2707.238041][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2707.471817][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2707.477848][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2708.271786][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2708.277796][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2708.283730][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2708.289472][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2709.311913][T20198] Bluetooth: hci1: command 0x1001 tx timeout [ 2709.318180][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2711.391954][T28313] Bluetooth: hci1: command 0x1009 tx timeout [ 2712.431846][ C1] net_ratelimit: 20 callbacks suppressed [ 2712.437550][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2712.443398][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2712.449535][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2712.455375][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2712.591845][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2712.597624][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2713.391831][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2713.397686][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2713.403550][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2713.409460][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:18:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xf24) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:18:47 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r2, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:18:47 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000001c0)=""/155) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="0600050001000500fffb0100"], 0x10) r1 = dup(r0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCSBRK(r1, 0x40044591) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x24004000) 19:18:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0xfdfdffff00000000}) 19:18:47 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x200000000000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:47 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r2, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x10}) 19:18:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:18:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x44202, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) 19:18:47 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x14000) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:18:47 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r2, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x1e}) 19:18:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:18:47 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x300000000000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:47 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r1, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:47 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:18:47 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) 19:18:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x1e00}) 19:18:47 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x2, 0x3, 0x81d, 0xfffffffffffffffa, r2}) ioctl$TIOCSBRK(r1, 0x40044591) 19:18:47 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) 19:18:47 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r1, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:47 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) ioctl$TIOCSBRK(r1, 0x40044591) 19:18:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x100000}) 19:18:48 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r1, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x10000000}) 19:18:48 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x900000000000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:48 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) 19:18:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) syz_emit_ethernet(0xee, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000180091002e00810021000011bce0c75fc2059466f96271fad1d8e2411ce7f66d2fe6a2fd61a5715d9f6cfeae3119c5600be21126bb38db2deda4833ebb5370faec4e9d0e49dac368f761fe9c588bba6d0d35e89ac23517bae27761fdd2728b62048ce3e6314fb083d5a569218ea660265cac010220de12a3270c9ff1b7825bfb43bb79a20c3967867aaf76108fa22064115c121c6df5edfce322c994eb91477b46696829ddb0aee7d4e1afdbbd073961e56a84bfd577175dadd5b98909e233464d15fd348457a2aab770c3103f1a75ab3f77ca30fe3f9cef7ff975cab86cd3882228b75d"], &(0x7f0000000000)={0x0, 0x2, [0x409, 0x6c3, 0x825, 0xeb3]}) 19:18:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:18:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:18:48 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r1, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x1e000000}) [ 2716.600582][T12030] Bluetooth: hci1: Frame reassembly failed (-84) 19:18:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:18:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000080)=""/227, &(0x7f0000000000)=0xe3) 19:18:48 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r1, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xfdfdffff}) 19:18:48 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x2000000000000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:18:48 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r1, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2717.551815][ C1] net_ratelimit: 20 callbacks suppressed [ 2717.551825][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2717.563347][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2717.569135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2717.574970][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2717.871794][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2717.877627][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2718.671778][T28313] Bluetooth: hci1: command 0x1003 tx timeout [ 2718.671786][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2718.671919][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2718.677880][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2718.677960][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2718.701500][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2720.751835][T28313] Bluetooth: hci1: command 0x1001 tx timeout [ 2720.757951][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2722.831801][ C1] net_ratelimit: 20 callbacks suppressed [ 2722.831810][T28313] Bluetooth: hci1: command 0x1009 tx timeout [ 2722.831815][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2722.831894][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2722.854980][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2722.860711][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2722.991858][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2722.997702][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2723.791866][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2723.797662][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2723.803507][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2723.809255][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:18:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = socket(0xa, 0x80002, 0xffffffffffff5921) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r2, &(0x7f0000000180)=0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:18:58 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x1, 0x1a, 0x8, 0x40, 0x2, 0xc2f2, 0x49}) 19:18:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xfffffdfd}) 19:18:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:18:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:58 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x3f00000000000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:18:58 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) fchmod(r0, 0x0) epoll_create1(0x80000) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:18:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x10000000000000}) 19:18:58 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xfffffffffffffffc) fchdir(r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/sequencer2\x00', 0x1, 0x0) getsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000001e00), &(0x7f0000001e40)=0x4) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000001fc0)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001d00)={0x4, 0x8202, 0x9, 0x81, 0x0}, &(0x7f0000001d40)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001d80)={r2, 0x2, 0x20, 0x8}, &(0x7f0000001dc0)=0x10) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002080)='/proc/self/net/pfkey\x00', 0x10208, 0x0) pwritev(r3, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000}], 0x1, 0x0) write$binfmt_elf32(r0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0xb28) r4 = semget(0x0, 0x7, 0x401) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f0000001f00)=""/156) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000002000)=0x14) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000040)) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001180)=0x14) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f0000001e80)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xdebe, @default, @bpq0='bpq0\x00', 0x2, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 19:18:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:18:59 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x1000000000000000}) 19:18:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) r4 = getuid() r5 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f0000000480)=0xe8) r8 = getpid() r9 = fcntl$getown(r1, 0x9) r10 = geteuid() r11 = getpgrp(0x0) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getegid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000008c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000a00)=0xe8) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000e40)) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0xffffffffffffffff, r1, 0x0, 0x12, &(0x7f0000000b00)='/dev/input/event#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000b80)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000c80)=0xe8) getgroups(0xa, &(0x7f0000000cc0)=[0xee01, 0xee00, 0xee00, 0x0, 0xee00, 0xee00, 0xee00, 0x0, 0x0, 0xffffffffffffffff]) sendmsg$netlink(r1, &(0x7f0000000e00)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x808100}, 0xc, &(0x7f0000000780)=[{&(0x7f0000000080)={0x28, 0x3a, 0x200, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x18, 0x50, [@typed={0x8, 0x18, @u32=0x80}, @typed={0xc, 0x60, @u64=0x8000}]}]}, 0x28}, {&(0x7f00000021c0)={0x22f8, 0x2f, 0x102, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x1008, 0x84, [@typed={0x1004, 0x3b, @binary="06e688a23c250ae0138395aed68811d572f9210448ddc156b456e9775a024c1a13e9c16b6183548bd43d11b6a08d4f826f062b0fd24a105f9a2ae88aed75ed3a2756cb38182e725d6cc39e3b37777744abf18060639926960223e23abb00cb3bd66bc7b55c9a9b8e85478ba4fd802ffb3812465776fc13dfb9cbd50f85d06fa32db37b0c1dff5a903538e9d7c0a3615d675ec9ea528e82c3ebcffd16afae13dc20fa5af5266ebd93274b1a7c27417b8e0f5340f8436e42e9fbddf115a077072e606a88be0c5acf648e8ef7cc96c322cbdce2f4ca99f82fb197ae9f2787de9baad88d673837c8ff47fc4a3b93b4d0cec65b4b6565f042e41658f072a039e9843e71c78e67fa0ca9a25dabcc244f89572dc26337ac45b001b948f871bdeae2e79bdf2bdc869262251e9fcbdb98b74c8ff926b7ce79ab96646c17e306d8456e40bab8772db4bcefbea2a4f9a23d5e01c5588c3f6e7dd5897664870fa7917940eccd156b2d6c98d3aebb86ba336c9b0beb38a21025bd6d8ab890b3a9875785de7d54bdcbe82c3edda4fc012fa65f3b77db97c98cf24fc1c64b736e159b61b08bb57ddce1c0556669858ee9d8913bd3dd98671d59ed8fe1f856145a3274be6c81858fadc412aecaad7c254d04c9a73f617423a0ae8241f260e1a4d0aa432c607fbde260b84c05def28990b59cefddc59cf8176f416d82b3aad5ebab5e943bca85cbcc04c45a716b6e3261f7c77198726eee59bffb073c7fe72487920dee1ac5ef418fe42b6802454de6e762022acbb6add0c10237b04b7456c39ba4f7a351e3d0ff3bde73db990e9926494d7a8606ff4fae16b52d548acd485c50d453f97a78f4eccb3e14e2aaa3df6a89e81dbd7e1a8b165fc73770754a5a2963116f328d6ee725ff21647b8641c1158dcec56028e5d460ed5be8dbbb774e3d3e27eaba93d429b202ed94c40a7d3424b8360c51d3d828cf606f5c4223ef8dff87b2cb134c3b9f196ed3e40e492a7d86dc5be6d6713f9b7cbea1f31c89abde8c36f122144e78af04a2d61cbaa0404df016ddb98104d0c1dc24412aa39f9460b57460b2b39e8bd9781912ca3793f0703dfc36c5dbbb7c4514da1f45bd9ee0ad572e3fe8dc120f799c4ec348b914964e4cb3168ada85dde7ba1e72d9f502fb75fe7d960229b2a95257a94f6a70e813749ebfe6df8b5722b2975a8743d9ccdbf2af7f3ac01abff0848d1fdd44954f9676eab9fca0784803d021af2f76c1285ba499b28259daa8600226f68aa3bd03d86f78c82eed08eadafde14cb6efdd271da52e2d70d59ea596258e1964899d97aa36f0e138ca2718959a813e425b129994f498abc8de9ecb14c5f5e5cc9cc9dbf69d488642e538ae5726d7bb7ff8a27bd3e30d3a85e33d5b4fbcf03a898a205a6750da8e65978250c55446ce2ec96b7c668cc05e2c791b328f853fb906017f09081aef9e4df1ed867c23409672ff59198b4785972eaa84473d02d4c19f31f3874c5cd2a53308901c73849c3dfd4689ac7477f31c5d59b63a049bca1bd6bedfd4f48406b41a86dfef4ea269c6ebbcec2392e85f4a1e7a1a55dded7e9b1fe2b5453a0e53a746ab588d2ddedd4d1be4811436bbfe7dc6eaba3d37456006da98790675418cfcb5ac25915531c4292e3bef31599c0b1dc0d23fecbad939bfc09189ebc044ef7ca7f6dc9df4443b4446b9136adf0787c4353244a00c8266bf532406b579fe7e81c9865cb8562b24bd1c3d1213351f005af67573a6957d25f81ffb7ee33de970dcffe60b2330b0aa4b22644597a9a48f02791f2b577978563463f2d3e9b08a45f76b7d4cf45a5fe6ae1548256f9608a1a16a603e29269692137a814984961223e17d051bc4e3bac076b5bbbb9f65d992c3c8475709cb78267359b8e6caf9648ed1d5df5d86fbe1c00b45795d7335a9f96667cd256ac8c7bc7b91234fdd94cfe4960ff936979bf1c89de0dc8095f2923d939023bd6706ca2da196d4f81763826e1407a16f9825f263d2dfd09a747c74bf23fede5ecee3acdb13939e2303a6f85bf2fc4b2a619e5134c0039a5d65dd70c3293cc2b5cc2282641989db08aae1cac18364ad7a48712d319636144d615a13b100dba32ebdbb7d21ae60d940ea83aee82f47ff5f4da476cadce8fd229c886c16e1b29e8ba249beca0fd4c0fcf0ce9986c7cca038c1f2fab6988f758c67dd49360ed50a4861b95044b34bde231c0cdf8ee487a20e9650fd51110c1cfd1d67a44ca9c4bb616b81d3f44a01d51622ef4067f85b4a981d5d1246543cc5344c56b9c3bb4af111ed0c3b9ac60dc583668d244846585554a18e095d2f7beb3cdb251a6713419441749a70b367cfd464cdf2c537709b203f31eca2072ae71f806c8f569fcc6dbddb7433ef0e3a91bea58ff88229d9a9ddcdad714d73c7cf7fc2b5eb06427a6d17a0074f1cec54a2b8df987331170ad4944fe3aaffcf7ffe0af03f65df47886d1feab28ed1340c2eaf1bc3a2e60f66ac003484ef7fa64fea500b9a878fcba90187eb1a27dd358a6d71e8e3e077e8bdd78e3c80e6840311c8e82bdcf7555ebbf91141444358ba0abd962b05665ccaff9431c39f8cdd0d61f05ef2583c0d39855afa49a41376f6710c8aff3b06d8804c8fcfdf911c2b1f17af476dbfc67e43e01887a21195b346aa470fafe4d79cb12f3997e56b4cf3e9b00f33351a6e2fc5b2a7977e7a37201dd8b0c46fd3ee48fbe5195d58242e5be668238a73c9a68589ffb8f22a0ba9121661e3cdea79d11e2774abcb44d755f4fb54b3ef32da39f2e990a7ce4896742dc804ea1f5d5785d09c5274a3ae3cf817bacd30234ed22ab0c5a72d92fc55add8a16554f72253c2d4f34e29ddb70fa4f1a313dcc9239738610a0e450bcf1831ca9239ed0d53b292e381c7f42be98a6b5c9e3924cbd6c653a4a1257f8d5a5e024b9e8dedd1920ca6b9d8c3687459b27274eef01e0bf78518175ca5a3c3ef7e1cad8c6e3b31497607253c8184ba48ed1add52df6e2f2788a71cb933eb1b712850e63af4d7ab373b594c460f815049940c4c4cd61fd3778d2d0eaa863982f89ebb91a6358f334f41f9fd144d55b62dce78893229f4aee1d7773bf2c0a17ac9daf823a5e83d39ac620a0e7de54a500f871ef0675327171a403395d97266bcb85012efbb09193755c0fe813942e6fb70d79fd25c44f026fb8271ede4dee7b51849acac7e8aa194f04097622160c86dc4e8f8b5038885d463b2aa61a0610c0451ebffb32c35d281581c19613bb3ec13b84065a59262b9afc33fb8d45deedf953338a758b040f104644af86aae75b9cf70055ed2cb9c98dd10f7eced4146e25226e784a6811d9f39ce9a6c287e09a6d848defdc3fc76be46cbd005d2ce3e0870d46fcb5068c050571207ff90da91c1279c58ad54f703dc02872f90b7084021c3948cecc6560a6c4ad9dde9f80e3fb8fc21857bc8f29793818c8c4e33826e479e5a41446ffa3eb4f4e9e7b0f8878290800be505173b552faaf973e14eef966cec62a53b649aae63d6fcf1dce4c413094b270544fca0ca3d4f51c4efc434e0d96475a7f8bdab0d085ff9e9cb6dd2fd3b40d947a49314a114145e97c52162d953f2796efb0e16e6566f4d35d0d2d64b2c50dba6dffa07e024055c910e02f2e28134a92d6d2daa7c81170749105427d1928dd12c4f6125e16440d68efbbd11dc08b6241eddff381f93ba31d3cbe03c6a239a62cbd928ba5de7c3d106fb7636c31475f079a990fdea8311f85db3879ac26af1fa3fcb69898d8b271e65aba0b55a1e1b869fa44be1e4d46e0f2ee8697a70b57a760701dbb7751563d0f2f5459eb102a77a3e3208362dc8dcf893b18bb50729908c741f964e696ddb7c9104692b729d02a95bcb400c120166e653c0285e70e6b5806ef1883aba82da6429ff876bfd9502e9e396ea312ffd8c904ac1041189960633ee312ae6a0bbea377124bd2e7477041ad16a497b52dbc17769a54306ac29637a975e62623dfd70b080cbaa443c07e5a1ee969a04211779c55b134744d8ddf10c4900ca719aa37c997936f4320e86abd67ed8ceecc67555816ef11c1ed949cd9f1cd4e088bef4f76cdb346b41486f7485617e055d8cdf3fdfea67372922d7cdb5551e3bf2b69a4750b032107579589d2aa2987baa7b91ef7116cf5a166f298f20e47170e879c1e566fb1b29af5dc3db61faae82f856aee3fd3c1a734f448a4b8678012f7ef47493adfd667fc9bd77fdff57c487579ec07fe37c21dffaec9a395b56afc243e8158896770bc8687f347b426d354892a6055bb84d220ec623fab68864ac8882c5b08a19df7e44735928f047775d2b699a94a5d1e769ac40bef583e91fe9a59faafdd53559b794d973998b08b5fcf911c514f9628d658fbd4e872feae6ea36654170683db41f48281e3c53990406abd87af99c6664e609f26e4e60f27b11ed7000dbd4ec468f53f571cbc33b9b2beac6de2e412d3dae0ab76e994b1b655c85e581913cd1eeed5a19ab5780fa2283c8b774cea19061055ae208072ac97903bd5c0ebb677e6dd4e1361f254eaefde4aa907c33f3b831db5894d2f725a73b2268e0e01980e9f9b3503763b97ac42f08fe1902066df16084004233af723dcbc04d14e2c6dee58f1dd639190820d800a291a7175725b77fe086391ef9aa824349ecbda70ad54dad93c0bfc9cb74f5ba6ce2b54aa2a81dca6b334b9ce9b465660eab95d7761136d651941fddc19edfb55ff5b8a011e328f5811505c0291afafa3e37b493a078236214d08d5251701380d11c6563ce01b3ffb931d1be247042ca2eed4b9364300e8a22157e6a7368315dc58d404bc2533d918a95001fd5455b9afd8e28c34edec2f8e7f347bf543b39b10060a6fcfb5797e5363232f79d63cafaedf5625af0671ac756386869b3dea9a147ef84d2633cd67089f2ba80ecc56b82de6c698474a0cfec9d1da003467d87264080f5c01ff96a5130dd730e306fd0e36afbb5b449571e2471fa799bd0d914d5476ac9a6d237f5b4e9344663a828054a708b0a69fcbd21d2a98fe3fcfa5ba430c642436c8b08126721e204491451edf6eaebd72ade4fa6834934f1c399e90b29ee654a5557598e57b64b81b9171cf58f78a2dece29a85b33beea94393b6b873042d0ddb9ee58c64570daf48709d9d5bf0953e216ede7e031432c8bfaaf6ce79ff69888e0393618773662d373ed5c881b0264383d20f7acf52564089aabddfb57940f533dbdb16c2887a541ceef3e2123e865a11764390bb62d5e506f4b3768d1a6c5705cf756cc01d148a7b7c9a659ba8fb7f060a74f8365c47f6486432860976da44a97c6a1dd7df7558b3a4e62e3e3ac260187fcf1e858ab4a88ca8f2b9253ac226f8355dab8237e530381c59a531893a479840e51a4ca951f546cb15726e9f500083e5cb4effc2a3d62db21a196c799a6225cec7402c6b85945bec4d981f6f504edde97d0b02a848b68a035d6b4cc77034810343ce8ab2ef06589daf01c98201fba35f4e0273bbaf7088ee4beafd11cff78e88f3b06590630a4bffcff9442a2bf9e84bf0ab14c648ec875ae14d2f64b8c6ffef16f0d690c55409412cd12e810bb044a2149ed2e0b2b2431b4a6d8398e48a2f3b5e11380f815f8933f02bff2404ec86f181838c5e8ff1d75df8d0196bff159d48d05e1ef164fb31a20fb031e47cf03b3b3e5e10efbc59e39cc9ec25e2595689976899ac5703e14e0758714e3435322fdde93d61e8bde42262e5a267f490e7c60eb70a10f5ce7bdb65f6e3b9b081876dc"}]}, @generic="2ebd50a041311dd904555e847cde2ca18d1acb40a959a9c8d7478e66425657c633a32c68762d94bcecf1abb83735b5f52125fe26397a49acfb3640a91b482af0d2e074530eb2e03b8c232a89b7f215b3d0cb9df302ea88ee75135f6b03f0a2a3283c0a7ab811eaf57e2d79e97dd4668efa815551625eba3ec15c96e1c6587fc7c3b58e0f58b1075c8a8bee8a2df27c7dab19a0645f9d3cd61b0a6c01904c7c26845bec9d016d15c1c8462265b557f9497bf173f9cde1c72df82f47d1920ba57d18", @nested={0x1030, 0x6c, [@generic="24aa60da0672035f4a17c7f556", @typed={0x8, 0x3d, @u32=0x10001}, @typed={0xc, 0x40, @u64=0x8}, @typed={0x8, 0x74, @str='em1\x00'}, @generic="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"]}, @nested={0x128, 0x11, [@generic="cdbac591b2b2e90742314e6d499dc7fb8108ef47f9403ced703d39ba29fcdb414293360a0b150947c6697859cabda95042c1b5c3f9cb6cb3a01e67c7884c2642e940", @typed={0x8, 0x5b, @uid=r2}, @typed={0x8, 0x6c, @pid=r3}, @generic="c619903cea2a78b343302e6fb4b5b15132b1218482113a7ac1bbe2dc7654f5c0db7dc5c9f9e98a024a86a447e69e54fd72440935805b8059cd359b0b324093b22ccccfc2cc818f1ea46cbb8445ed57ebbb50a981c6e1ed15ac22164656e8a8cb62b620c3a76358eebf968f44c07f7967e82a7ab3a4776814b5653c701de071844e83583b4763db708851c3b674d8d3100a8f17024b1bf9e92829ed7cfb0289b08c4d2daac5ca0e1adbed3013db17dcabbe87917e69c17a0d356cee625a35416d3f32132f450b3ce01ebd03d8c9d9e558"]}, @nested={0x64, 0x16, [@generic="479c3dcceacf85344c8398352857f219b99fe50d6ad23943679d200a3756af919fcf3787bad222aac0231750eada45782f057ae6f1e1122bc238ac8566b75b129299e5ec36eac17caff8b6b789e14f17e891fa0224e98ecb909849599a2944"]}, @nested={0x5c, 0x28, [@generic="83f7880114eb638d8d0a2a50b0a6a1ba1c7184f4785aa7977f4021403e7b699b0f4dc6d21e9763c8366f8caca2f9785f156d1d00f3d602029b50f8f20f1f456b29d4894bcbf885a8820afd76b71e190ae36bd45d916fdf"]}, @typed={0x4, 0x41}]}, 0x22f8}, {&(0x7f0000000280)={0x100, 0x38, 0x0, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x5d, @fd=r1}, @nested={0xcc, 0x61, [@generic="c35ced0d083567285ca05133f0bd9b884a03e9aec70107482ae7db40fa5bebee5257089a34c56f8d680378939c01dd08f2b0b6ad64ec535a225bffe38d3e997ed3b1ae8a636d83ee6f7f31240eb3b001ac7583110465f06862c3cf8d90b69cd1f24494cb4fef1dbe8de269039129a9aef02c27a8368964321816a8d2e0a8cc575dd044e1ec91cc32d0b5b422e80f5d48d072d261c3fd7ad68a0e81b5fb0eb8bdf64b09726bf262e918b8a3a53abda05798c33dfc44a0a1eb82a2bfe6d62b", @typed={0x8, 0x39, @uid=r4}]}, @typed={0x8, 0x26, @uid=r5}, @typed={0x8, 0x2b, @uid=r6}, @typed={0x8, 0x3, @fd=r0}, @typed={0x4, 0x79}]}, 0x100}, {&(0x7f00000004c0)={0xe0, 0x18, 0x800, 0x70bd25, 0x25dfdbff, "", [@generic="d50b53d572", @generic="de9a199e86ea9b9e6f67f5f7371e7531e3", @generic="f8903a411803bc56187ed7388745f06d696156995f906baaf07cec7cfab75d87fd2591b9b5e847309ca93cc57dd832ed0f27f6e491fba360603169c24fd2685aa1b41cf25b2002e622b3483fe370a4253e52998710c7b482f4497fba344e10bbb3325f6b5e999d8c09bae1e0d9d503043bbb8342fc2d265110cd3a1a2b8d709c24997384b6aa4a64b8d06685e770e835070c1df5889cc0ad340c7143646b322a5cb5b61b863408c9a3", @typed={0x8, 0x2f, @uid=r7}, @typed={0x8, 0x34, @ipv4=@dev={0xac, 0x14, 0x14, 0x1a}}]}, 0xe0}, {&(0x7f00000005c0)={0x24, 0x20, 0x10, 0x70bd29, 0x25dfdbff, "", [@typed={0x14, 0x37, @ipv6=@empty}]}, 0x24}, {&(0x7f00000044c0)={0x1240, 0x42, 0x520, 0x70bd25, 0x25dfdbfb, "", [@nested={0x1230, 0x12, [@generic, @typed={0x8, 0x14, @fd=r1}, @generic="2efd806853e11f70b3bebcb4c30f1cd6e85f9b64f664f7ca46dd2813aed1caab1e7a6483a1be02cb38b4002416f62ff9ef50395efcfe76ab29c520c2c99ded468d56d00000fa62c36217d5ce3caf1c56965317bc16a1ab67d302b468d7c1d21870ab1df6057f43a52769ad00e6c438d08243c0869a6b74", @generic="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", @generic="616ccdf36022ca03411feb56dd58c87e8c3c0ddd5f1b28eb7abbac22f553ba4aa729f930fad623930212976599176119bb8f66a72909782bfa430a24d072cf55aac89a115e1b8169474ade7954ffc8184bab1786119129b4542392e1b32d8fa53892eb1583875eba67758cafa7dee437dc3cdce243d4b7efe8c13a27899b4693c5814bda2ed11a82faedba0da2c440babbed1299e9737b2b25dd4853f441d8bd3faa146b5fbbbd3dd48572d8622be47499c6682be675e22a7122a4b754861661b7290f8cde419480dc674eb056e9ef73896f0d0370b9d8dabdf862cefb2407eee0466d", @typed={0x8, 0x7d, @pid=r8}, @typed={0x18, 0x59, @str='/dev/input/event#\x00'}, @generic="462c9607d205234031b823d94d8ef4254d0f506e8a16d97e486fec53013994963283cf96250fbea3e5df93d02196e9452ca525eb283e496c2e61911ae3b2afd1a1402e7565f613c293219260278b7b818fe371d88097469e95186f414efbf4ec96be7156eea2e95603bfa076ccd520541d844beafd38b1c15620a6b18b4fe245194088876eb48074e1ef47ff5c7f09d2f82676db87fe4f759f372ccb9b45ecae1d4cd763a6175c3c2b34"]}]}, 0x1240}, {&(0x7f0000005700)={0x1444, 0x1e, 0x909, 0x70bd27, 0x25dfdbfe, "", [@nested={0x10d4, 0x86, [@generic="b8ab7879b0ab3636f18acc39a80001bb27e9305242d1caf1d935487e576369bb8d55726d1b9db5eeac2cfadbedd1f28000d205e9170652c063bfdada4e3f418fbc7b16e3978c9500f1444f98d89cdb3cfe3359ed26f9cbb1fe7b6e2e3013517c1af8abf1cd8fa7e4a9e0dfc11614a3c3a4a2918e4626c0a611337683fe2e1beb9d4c932590c3d7759f6614a5ac4f2b5b1014", @generic="0210973d114e66ca70fccff777b1875d8162d1c8226fdb36183278ebbe453acc919284f343369a0f996dde2454", @typed={0x4, 0x1b}, @generic="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", @typed={0xc, 0x1, @u64}]}, @nested={0x324, 0x31, [@generic="7788523edde8215d2992b91e88424efa703c3e81ba5fb55abf7c4868792db2797a7478e15a36ac783148c68dafbd29dfcab3d83fa0e8fc6ac2998b6ae22c644f09798fecdb191c0459629f8183226021af15b7b2cd480170b1e838ffd32f00505fe63760dfd055cef9cb153bdf3184435269f0ce1e3b5527ee46d32b7a52b29a33acb449d4f29e330e75bfc55265af706e09a32316c83738e8bd21f5437020c02e30f568d63a31d571fbceebb02bcb8dad42ac6fd9527bccb9f45b1ef15c", @generic="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", @typed={0x4, 0x23}, @typed={0x8, 0x48, @str='GPL\x00'}, @generic="5f6bd4bbc69060dc162251649460af8842bc916242c0092592718d17cfafede9801cfafe1beed80444c7acdd6bf571ea592e6f488d9f8f3c1d7be2115d97a4f506bb4c92ea74f516b6652faa0f5295f67ee159ec692cf234a5ff0e0a7ea05e3923a784720b4230c47188a2c24a5aad5e1d9f6f10cccf9e7a8b29621329ad43cf18f1251d4f28088a3132343166ffc4680c48b334f4a4c71caecc09afcf86bbc5cebe255877722fc60523704e876d206e176d", @generic="1965a21a80e8a1636c740dd2e79ea01004", @typed={0x1c, 0x26, @str='&wlan0vboxnet1cpuset}!-\x00'}, @typed={0x8, 0x2a, @pid=r9}, @typed={0x5c, 0x1e, @binary="c0859a2630e99cc2d705c51a4429cf3484f2de598a4c5281a4cbb3dd519073b671fccca36288cb7dd89aabe788ab5e9b47dd964278965f5190dbb63cf74759af274f9638836ecb60e1bb35d19380fdadecb02a75c494a70c"}, @generic="fc651ac055edf126f50891d278309fe25505c1"]}, @generic="dc8bef09bdcefd250feb0fb694aebbf2a59d4cb81797f337b97e4739d781972550543cdeec08410d90d322fcd6514b0db2daf26b71502d2f67"]}, 0x1444}, {&(0x7f0000000600)={0x160, 0x12, 0x200, 0x2c3, 0x25dfdbfd, "", [@generic="8bada2ca6be4118a53e2a5c1894a8431319cbfab00ee3b4de81dadda31ad80c379f854a484f70e80976c0fe13e7f580d3ffee7b2afce57f0b23314df2682ec2ecd4a0021e6cef4c4e43627fd4001b87f86a044e2105669db46ef3d77976b67f0b0cbfcfb498d700fd2463e77db450bd1e443c6aa4d42309cbd0a57b04c715f86807ebf4c8ff19724e1dac30e028e0a2543304e01c5753e2623e6e85f7f3dc5b87ebcf94d9ae071f499b3b20088685bfe", @nested={0xa0, 0x75, [@typed={0x8, 0x8f, @u32=0xfffffffffffffffd}, @generic="7fff4b3082fec0eeeabf8c29c986f10cc0e5710cd08951d7eb274bc18c56500c5cb5c974bdfb210d6d3dba02a785dc54f0d14cbba45c89d5d64f0e665fe68aef287378a874f4baeb7e9fd9b552709071ca38190bedf76b7dd05966ae7caf22d04a7f34ede4e810c20f090928e5398790c9dfe3c5824dd0cf5050de5c6392a2ea1acbc315cb327b61cbe8", @typed={0x8, 0x4, @uid=r10}]}]}, 0x160}], 0x8, &(0x7f0000000d00)=[@rights={0x28, 0x1, 0x1, [r1, r0, r1, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r1, r1]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @rights={0x28, 0x1, 0x1, [r0, r0, r1, r1, r1, r1]}], 0xd8, 0x855}, 0x40001) 19:18:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xc0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)) 19:18:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:18:59 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x6112000000000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:59 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:59 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) sendto$isdn(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000020000000c3245cf241f848367b4152c47cefe8b82ea3b2bd58d096a98c9d540e2118e50f525dce49b404095db773c4ab2845497a6a545c98ff9e7f630da3200c61fdebca0b5848f24da0090c7a206ad3765b3253a132a6335f16ce586c8e4ed2e4fe166ae14fc11338025cfb87e1"], 0x72, 0x10, &(0x7f0000000100)={0x22, 0x6, 0x9, 0x80, 0x20}, 0x6) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r2 = dup(r1) ioctl$TIOCSBRK(r2, 0x40044591) ioctl$RTC_UIE_OFF(r0, 0x7004) 19:18:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x1e00000000000000}) 19:18:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:18:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x1) preadv(r0, &(0x7f00000024c0)=[{&(0x7f0000000080)=""/112, 0x70}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/177, 0xb1}, {&(0x7f0000002280)=""/227, 0xe3}, {&(0x7f0000001100)=""/65, 0x41}, {&(0x7f0000002380)=""/137, 0x89}, {&(0x7f0000002440)=""/71, 0x47}], 0x7, 0x0) r1 = semget$private(0x0, 0x0, 0x402) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001180)=""/8) readv(r0, &(0x7f0000001180), 0x0) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) 19:18:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:18:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xfdfdffff00000000}) 19:18:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2727.951805][ C1] net_ratelimit: 20 callbacks suppressed [ 2727.951815][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2727.963312][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2727.969130][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2727.974950][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2728.271797][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2728.277617][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2729.071747][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2729.077558][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2729.083426][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2729.090502][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2729.551789][T20198] Bluetooth: hci1: command 0x1003 tx timeout [ 2729.557978][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2731.631775][T20198] Bluetooth: hci1: command 0x1001 tx timeout [ 2731.637956][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2733.231767][ C1] net_ratelimit: 20 callbacks suppressed [ 2733.231772][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2733.243246][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2733.249004][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2733.254769][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2733.391824][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2733.397596][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2733.711755][T21773] Bluetooth: hci1: command 0x1009 tx timeout [ 2734.191786][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2734.197641][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2734.203503][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2734.209246][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:19:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:19:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x10}) 19:19:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:19:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:19:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x8000000000000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:19:09 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$tipc(0x1e, 0x7, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0x9, 0x4) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) 19:19:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x1e}) 19:19:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:19:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2737.917005][ T402] Bluetooth: hci1: Frame reassembly failed (-84) 19:19:09 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) ioctl$TIOCSBRK(r1, 0x40044591) 19:19:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x1e00}) 19:19:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2738.351800][ C1] net_ratelimit: 20 callbacks suppressed [ 2738.351809][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2738.363472][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2738.369371][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2738.375610][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2738.671783][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2738.677711][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2739.471737][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2739.477814][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2739.484407][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2739.490435][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2739.951753][ T3878] Bluetooth: hci1: command 0x1003 tx timeout [ 2739.958126][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2742.031768][ T3878] Bluetooth: hci1: command 0x1001 tx timeout [ 2742.037936][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2743.631744][ C1] net_ratelimit: 20 callbacks suppressed [ 2743.631750][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2743.643222][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2743.648993][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2743.654763][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2743.791790][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2743.797575][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2744.111746][T21773] Bluetooth: hci1: command 0x1009 tx timeout [ 2744.591828][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2744.597698][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2744.603531][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2744.609299][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:19:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0xc) 19:19:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:19:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x100000}) 19:19:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:19:19 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000021c0)=""/4096, 0x130b}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) ioctl$TCFLSH(r1, 0x540b, 0x4) 19:19:19 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0xfeffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:19:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:19:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:19:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x10000000}) [ 2748.172974][ T402] Bluetooth: hci1: Frame reassembly failed (-84) [ 2748.184497][T22870] Bluetooth: hci1: Frame reassembly failed (-84) 19:19:20 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) ioctl$FICLONE(r0, 0x40049409, r1) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x4e, 0x1, 0x1000, 0x8, 0x0, 0x1, 0x20000, 0x2, 0x1, 0x1f, 0x6, 0x49, 0x8000, 0x100000000, 0xfffffffffffffff7, 0x7, 0x3, 0x1, 0xf0100000000, 0x5, 0x7, 0x101, 0x299, 0x40, 0x8, 0x400, 0x7, 0x0, 0x4, 0x6, 0xffff, 0xfff, 0x228d, 0xffffffffffffffe0, 0xa3a, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x4}, 0x3, 0x1000, 0x400, 0x9, 0x200, 0x8, 0x1}, r2, 0x7, 0xffffffffffffffff, 0x3) 19:19:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:19:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2748.751786][ C1] net_ratelimit: 20 callbacks suppressed [ 2748.751795][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2748.763347][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2748.769145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2748.774973][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2749.071735][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2749.077513][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2749.871752][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2749.877670][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2749.883661][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2749.889430][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2750.191767][T20198] Bluetooth: hci1: command 0x1003 tx timeout [ 2750.198282][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2752.271790][T20198] Bluetooth: hci1: command 0x1001 tx timeout [ 2752.278038][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2754.031789][ C1] net_ratelimit: 20 callbacks suppressed [ 2754.031796][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2754.043693][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2754.049503][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2754.055337][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2754.191780][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2754.197681][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2754.351765][T21773] Bluetooth: hci1: command 0x1009 tx timeout [ 2754.991843][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2754.998080][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2755.004166][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2755.009967][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:19:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vfio/vfio\x00', 0x800, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f00000003c0)={'TPROXY\x00'}, &(0x7f0000000400)=0x1e) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x80800, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000200), &(0x7f0000000240)=0xe, 0x80800) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000100)=0x20, 0x4) fcntl$getownex(r2, 0x10, &(0x7f0000000280)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x74, r3, 0x128, 0x5, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x46}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xedf}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffffffffff01}]}, 0x74}, 0x1, 0x0, 0x0, 0x40840}, 0x40001) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000140)={'\x01\x00\xf8\xff\xff\xff\x00\x00\x1a\x00', {0x2, 0x4e1e, @multicast2}}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x8, &(0x7f0000000180)=[{0xfffffffffffffffc, 0x5}, {0xfff, 0x100000001}, {0xdd, 0x4}, {0x1, 0x1}, {0x1c2f, 0x1}, {0x101, 0x342f0964}, {0xffffffffffffffe0, 0x8}, {0x100000001, 0x8}]}) 19:19:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x1e000000}) 19:19:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:19:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:19:30 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x343302) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000080)={0xfffffffffffffffc, 0x2}) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) 19:19:30 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0xffefffffff7f0000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:19:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:19:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfdfdffff}) 19:19:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:19:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:19:30 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0xd0000) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000080)={0x9, 0x7, 0x14}) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) 19:19:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffdfd}) [ 2758.498317][T23294] Bluetooth: hci2: Frame reassembly failed (-84) [ 2759.151749][ C1] net_ratelimit: 20 callbacks suppressed [ 2759.151756][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2759.163434][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2759.169221][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2759.175028][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2759.471755][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2759.477923][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2760.271703][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2760.277624][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2760.283574][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2760.289463][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2760.431788][T27474] Bluetooth: hci1: command 0x1003 tx timeout [ 2760.437932][T23303] Bluetooth: hci1: sending frame failed (-49) [ 2760.591688][T21773] Bluetooth: hci2: command 0x1003 tx timeout [ 2760.597835][T23303] Bluetooth: hci2: sending frame failed (-49) [ 2762.512017][T21773] Bluetooth: hci1: command 0x1001 tx timeout [ 2762.518153][T23303] Bluetooth: hci1: sending frame failed (-49) [ 2762.674569][T21773] Bluetooth: hci2: command 0x1001 tx timeout [ 2762.680690][T23303] Bluetooth: hci2: sending frame failed (-49) [ 2764.431799][ C1] net_ratelimit: 20 callbacks suppressed [ 2764.437535][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2764.443386][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2764.449238][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2764.455044][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2764.591866][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2764.597937][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2764.604103][T21773] Bluetooth: hci1: command 0x1009 tx timeout [ 2764.751772][T27474] Bluetooth: hci2: command 0x1009 tx timeout [ 2765.391769][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2765.397567][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2765.403587][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2765.409348][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:19:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000000)) 19:19:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0xc47}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 19:19:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:19:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x10000000000000}) 19:19:40 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0xffffff7f00000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:19:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:19:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:19:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x1000000000000000}) 19:19:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1063}], 0x1) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x8000, 0xbc88, 0x400, 0x100000001}) [ 2768.722524][T30390] Bluetooth: hci2: Frame reassembly failed (-84) [ 2768.735804][T23570] Bluetooth: hci2: Frame reassembly failed (-84) 19:19:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:19:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x1e00000000000000}) 19:19:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2769.551775][ C1] net_ratelimit: 20 callbacks suppressed [ 2769.551782][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2769.564865][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2769.571050][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2769.577098][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2769.871712][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2769.877674][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2770.671665][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2770.677505][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2770.683368][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2770.689146][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2770.751713][T20198] Bluetooth: hci1: command 0x1003 tx timeout [ 2770.751720][ T2928] Bluetooth: hci2: command 0x1003 tx timeout [ 2770.751863][T23303] Bluetooth: hci2: sending frame failed (-49) [ 2770.770549][T23303] Bluetooth: hci1: sending frame failed (-49) [ 2772.831745][ T2928] Bluetooth: hci1: command 0x1001 tx timeout [ 2772.837846][ T2928] Bluetooth: hci2: command 0x1001 tx timeout [ 2772.837920][T23303] Bluetooth: hci1: sending frame failed (-49) [ 2772.844428][T23837] Bluetooth: hci2: sending frame failed (-49) [ 2774.831725][ C1] net_ratelimit: 20 callbacks suppressed [ 2774.831731][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2774.843427][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2774.849388][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2774.855240][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2774.911739][ T2928] Bluetooth: hci2: command 0x1009 tx timeout [ 2774.911769][T20198] Bluetooth: hci1: command 0x1009 tx timeout [ 2774.991777][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2774.998349][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2775.791781][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2775.799152][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2775.805370][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2775.811396][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:19:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000002c0)={0xfffffffffffffffd, 0x8, 0x6ca7, 0x2, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000340)={r2, 0xdd, "bb8177e72f60bddfbf53bae6471584d49371157c4c87892eeb61496e8f65dae0f0500cc1ea4709754d07e9af3b66ff6c2db2dd60c7e219898a3a917e1505995f63a3e87843abd212d1c74258cef53d18216003fba37aea157bc0e97cd62e0c90d2a7b62a8ff0361b06c4447b57165f869573c551086f3fa0c565e15fd9623215614ea4014013456b4ceb158ccad04b8be60536f8c0c49f6a12f78ee79feead8221bac2ca23d168937f667885ca718bf028d5952527b3ecf64874151d84e2659866d05266559a762728f2a40d6ad99298f9eb04d346aa9fad539947e5e5"}, &(0x7f0000000440)=0xe5) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) socket$caif_stream(0x25, 0x1, 0x4) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000240)="b0fc72e9ea721c24c855db817efdb3e3a7d17b6c52b10707f0ea6ec8020008b1909f043c52f090112ccd0839a2c8688ce75197a3e51f934b736af767631ed9335e") write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000200)={0xa, 0x3db, 0xfa00, {r4}}, 0xffffffb4) pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0x4000) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000180)=0x7fff) 19:19:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:19:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfdfdffff00000000}) 19:19:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:19:50 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0xffffffff00000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:19:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) [ 2778.902907][T30390] Bluetooth: hci1: Frame reassembly failed (-84) [ 2778.912328][T23850] Bluetooth: hci1: Frame reassembly failed (-84) 19:19:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10}) 19:19:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(0xffffffffffffffff, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:19:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:19:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1e}) 19:19:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0xffbffffffffffffd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:19:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(0xffffffffffffffff, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:19:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:19:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1e00}) 19:19:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2779.265670][ T402] Bluetooth: hci2: Frame reassembly failed (-90) 19:19:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:19:51 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0xffffffffff600000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2779.951720][ C1] net_ratelimit: 20 callbacks suppressed [ 2779.951729][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2779.963320][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2779.969174][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2779.975075][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2780.271702][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2780.277556][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2780.911669][ T3878] Bluetooth: hci1: command 0x1003 tx timeout [ 2780.917792][T23837] Bluetooth: hci1: sending frame failed (-49) [ 2781.071702][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2781.077513][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2781.083354][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2781.090011][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2781.311662][T28313] Bluetooth: hci2: command 0x1003 tx timeout [ 2781.317822][T23837] Bluetooth: hci2: sending frame failed (-49) [ 2782.991679][T28313] Bluetooth: hci1: command 0x1001 tx timeout [ 2782.997818][T23837] Bluetooth: hci1: sending frame failed (-49) [ 2783.391743][T28313] Bluetooth: hci2: command 0x1001 tx timeout [ 2783.397895][T23837] Bluetooth: hci2: sending frame failed (-49) [ 2785.071702][ T3878] Bluetooth: hci1: command 0x1009 tx timeout [ 2785.231669][ C1] net_ratelimit: 20 callbacks suppressed [ 2785.231675][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2785.243195][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2785.249019][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2785.254834][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2785.391805][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2785.397579][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2785.471731][ T3878] Bluetooth: hci2: command 0x1009 tx timeout [ 2786.191763][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2786.197624][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2786.203493][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2786.209239][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:20:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) 19:20:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000}) 19:20:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x1) 19:20:00 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0xfffffffffffffffe) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x202402) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040)=0x7, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:20:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000000}) 19:20:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:01 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0xffffffffff600000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:01 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$FICLONE(r6, 0x40049409, r5) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000180)={0x3, 0xffffffffffffff9c}) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x8000001, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r8, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="090000000010"], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:01 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0xffffffffff600000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2790.351741][ C1] net_ratelimit: 20 callbacks suppressed [ 2790.351755][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2790.364263][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2790.370037][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2790.375912][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2790.671698][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2790.677655][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2791.151656][ T2928] Bluetooth: hci1: command 0x1003 tx timeout [ 2791.157971][T23837] Bluetooth: hci1: sending frame failed (-49) [ 2791.471688][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2791.477512][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2791.483386][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2791.489148][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2791.791718][ T2928] Bluetooth: hci2: command 0x1003 tx timeout [ 2791.797939][T23837] Bluetooth: hci2: sending frame failed (-49) [ 2793.231731][T27474] Bluetooth: hci1: command 0x1001 tx timeout [ 2793.237844][T23837] Bluetooth: hci1: sending frame failed (-49) [ 2793.871791][T27474] Bluetooth: hci2: command 0x1001 tx timeout [ 2793.877953][T23837] Bluetooth: hci2: sending frame failed (-49) [ 2795.311681][T27474] Bluetooth: hci1: command 0x1009 tx timeout [ 2795.631658][ C1] net_ratelimit: 20 callbacks suppressed [ 2795.631665][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2795.643106][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2795.648908][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2795.654687][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2795.791737][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2795.797544][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2795.951666][ T2928] Bluetooth: hci2: command 0x1009 tx timeout [ 2796.591745][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2796.597587][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2796.603429][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2796.609168][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:20:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) 19:20:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1e000000}) 19:20:10 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0xffffffffff600000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:10 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffe79, 0x800, 0x0, 0x17b) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futimesat(r6, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x2710}}) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="7e499f81bfcc583bf8752052f0143e500104be2f1052ed000000000000000000000000ee03e3a6c2cb0da5d597c421b4bc00000085440dd3475e1e2d4c640b031aba675e39681c5ad7383633d2621df814b93211cc0b28100bdbeeaf7f0ba8a9c3a7b496ecc2"], 0x1}}, 0x0) ioctl$KVM_GET_CLOCK(r7, 0x8030ae7c, &(0x7f00000003c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xb) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/llc\x00') r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x22a040) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000000c0)={0x21, 0x3}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)=0x2) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x2b, 0x1, 0x8, 0x400, 0x10, 0xfb000000000, 0x33e7, 0x100000000, 0x2, 0x13, 0x80000000, 0xffff}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x100, @ipv4={[], [], @broadcast}, 0xfb64}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000002c0)={r3, 0x7ff}, &(0x7f0000000300)=0x8) 19:20:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfdfdffff}) 19:20:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:20:11 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x400, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000500)={@ipv4={[], [], @empty}, 0x6c, r7}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) socket$packet(0x11, 0x0, 0x300) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f00000000c0)=0x17, 0x4) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r9, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="8e598bacdfc9553eb6da68fcdda062d6678de12dfaed10e3d6ff73c5ec4a1d30050b48eff4e271561813a9d793503321f99792a4095a2f54ac3121a9f8361c228de4dc6334aeaee0ed75c66691fe6842eed0e37486ef71b5acd7eeed5819959b5910d8275e25b12b444c083c4703c4f1cd5ae80a9358fac08c2b965117ab819801196aac20c304f4df81d5f1f372eedc655a0028"], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:20:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffdfd}) [ 2800.751662][ C1] net_ratelimit: 20 callbacks suppressed [ 2800.751671][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2800.763148][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2800.768936][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2800.774718][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2801.071675][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2801.077455][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2801.391688][ T3878] Bluetooth: hci1: command 0x1003 tx timeout [ 2801.397896][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2801.871672][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2801.877480][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2801.883337][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2801.889086][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2803.471665][ T3878] Bluetooth: hci1: command 0x1001 tx timeout [ 2803.477790][ T2697] Bluetooth: hci1: sending frame failed (-49) [ 2805.551707][T28313] Bluetooth: hci1: command 0x1009 tx timeout [ 2806.031644][ C1] net_ratelimit: 20 callbacks suppressed [ 2806.031650][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2806.043117][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2806.048893][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2806.054676][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2806.191698][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2806.197541][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2806.991743][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2806.997580][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2807.003343][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2807.009068][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:20:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) 19:20:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:20:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x3, 0x20002) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x164, r2, 0x18, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xb8, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) syz_open_pts(r0, 0x8000) 19:20:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000000000000}) 19:20:21 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) r5 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x2, 0x80000) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000002c0)={'veth0_to_hsr\x00', {0x2, 0x4e24, @multicast2}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYBLOB="100001008010"], 0xa) ioctl$RTC_UIE_ON(r0, 0x7003) r7 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r7, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(r4, 0x0, 0x8, 0x100000005) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r8, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:21 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r2, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2809.574584][T24511] Bluetooth: hci1: Frame reassembly failed (-84) 19:20:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000000000000}) 19:20:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1e00000000000000}) 19:20:21 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000180)={0x14, 0x2, &(0x7f0000000600)="1fddb3a5e01db53e2cd60baaf1b7fd6e27f51863bba9f59754f85927ebe9d2a5014041b57caef7ceb65cd3f486f5878d8d70f28682c5cac3f49c57f85fd0fbd1481e951009cabce81f4c06fd3cd1ca647d8cb12492c8c9c8beaefd312710ec8bdf2103d9ce6e34ac0af96ff824ad3f244a5eef047c2744a0d0731533da5fee8ae550bae2166454c1e1e02a56eb076ce3e416d368355b03fa00bcacf69104305323523d8b8d208b35d54828d9c51a58aab48e6b953452784e37af3ebfb55c8195b9fe02895bd62ab74962ef4c2c45c6cbc6434aae1ee46b7b76ade07419361cea6c89", {0x200, 0x100, 0x0, 0x9, 0x38, 0x7, 0x0, 0x3}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r6 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r6, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000002c0)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) ioctl$SIOCX25SCALLUSERDATA(r7, 0x89e5, &(0x7f0000000540)={0x66, "e99fa802592b50db61459eb4ab5400812013a79ba801a0d1022435f5e22308c88edb7939d1750aa1725248e1e454948af676a603221fb276ad1f496fa885c808ee02e5e9c383e466c94ac053b6c0e14e1a9ac7c7cd48273761bcddc7fd9454ef770029b87c6bc04b57ce1e695bbebb4c2a87b0f239eb4e1acd3efc64dccdefec"}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfdfdffff00000000}) 19:20:21 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r2, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2811.151662][ C1] net_ratelimit: 20 callbacks suppressed [ 2811.151674][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2811.163211][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2811.169054][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2811.174882][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2811.481654][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2811.487493][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2811.631685][T28313] Bluetooth: hci1: command 0x1003 tx timeout [ 2811.637901][T23837] Bluetooth: hci1: sending frame failed (-49) [ 2811.711664][ T3878] Bluetooth: hci2: command 0x1003 tx timeout [ 2811.717909][T23837] Bluetooth: hci2: sending frame failed (-49) [ 2812.271639][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2812.277487][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2812.283325][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2812.289063][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2813.711749][ T3878] Bluetooth: hci1: command 0x1001 tx timeout [ 2813.717894][T23837] Bluetooth: hci1: sending frame failed (-49) [ 2813.791667][ T3878] Bluetooth: hci2: command 0x1001 tx timeout [ 2813.797831][T23837] Bluetooth: hci2: sending frame failed (-49) [ 2815.791659][T28313] Bluetooth: hci1: command 0x1009 tx timeout [ 2815.871663][T28313] Bluetooth: hci2: command 0x1009 tx timeout [ 2816.431663][ C1] net_ratelimit: 20 callbacks suppressed [ 2816.437352][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2816.443125][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2816.448933][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2816.454674][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2816.591688][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2816.597459][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2817.401698][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2817.407497][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2817.413380][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2817.419161][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:20:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 19:20:31 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(r2, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x10}) 19:20:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0xc00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:20:31 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x0, 0x2) accept4$llc(r2, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000003c0)=0x10, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r6 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r6, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000880)={{{@in=@multicast1, @in=@broadcast}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') syz_open_dev$binder(&(0x7f0000000600)='/dev/binder#\x00', 0x0, 0x806) sendmsg$SEG6_CMD_DUMPHMAC(r8, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="f64f27bedccc08fb1c7d230bf6ed9735c18b3f4428803a4541d38d984375360f6dc4a289502a977d5e9394862a371718526b1fd8b7f47a1116c6ed8e859ae18fd5d102171c108e4cfc07184f8a18ea7b68db2217cf678786e8d739d39f8f3fc86710558e5990ca526540062bc8eb71ff50"], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1e}) 19:20:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x1e00}) [ 2819.865256][T30390] Bluetooth: hci1: Frame reassembly failed (-84) 19:20:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x1e00}) 19:20:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1e00}) 19:20:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x1e00}) 19:20:31 executing program 0 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 2821.551667][ C1] net_ratelimit: 20 callbacks suppressed [ 2821.551676][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2821.563188][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2821.568963][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2821.574752][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2821.871647][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2821.877426][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2821.883330][ T2928] Bluetooth: hci1: command 0x1003 tx timeout [ 2821.889441][T23837] Bluetooth: hci1: sending frame failed (-49) [ 2821.951624][T27474] Bluetooth: hci2: command 0x1003 tx timeout [ 2821.957780][T23837] Bluetooth: hci2: sending frame failed (-49) [ 2822.671615][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2822.677518][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2822.683395][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2822.689160][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2823.951658][T27474] Bluetooth: hci1: command 0x1001 tx timeout [ 2823.957770][T23837] Bluetooth: hci1: sending frame failed (-49) [ 2824.031620][T27474] Bluetooth: hci2: command 0x1001 tx timeout [ 2824.037770][T23837] Bluetooth: hci2: sending frame failed (-49) [ 2826.031732][ T2928] Bluetooth: hci1: command 0x1009 tx timeout [ 2826.111645][ T2928] Bluetooth: hci2: command 0x1009 tx timeout [ 2826.831635][ C1] net_ratelimit: 20 callbacks suppressed [ 2826.831641][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2826.843068][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2826.848853][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2826.854658][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2826.991675][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2826.997447][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2827.791710][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2827.797503][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2827.803342][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2827.809102][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:20:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 19:20:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x100000}) 19:20:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 19:20:41 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x0, 0x80) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000180)=0xa298, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r6 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r6, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) keyctl$session_to_parent(0x12) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f4c5627fbfc6b09fdc4966de6bfcb3bd526642e623056965e33af8625b416bfb60e19be88bf9a1a49cca2df3aa2fa8b205d66ce13df9310cc9c49737d479e02c870c558930cb48c1d07bb8c7ce14e2d6ac06e6401959"], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:41 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000440)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000540)=0xe8) r5 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) r7 = geteuid() getresuid(&(0x7f0000000600)=0x0, &(0x7f0000000640), &(0x7f0000000680)) r9 = getuid() getresuid(&(0x7f00000006c0), &(0x7f0000000700)=0x0, &(0x7f0000000740)) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000008c0)=[0xee01]) fstat(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000980)=[0xffffffffffffffff, 0xee01]) fcntl$setlease(r0, 0x400, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000009c0)={{}, {0x1, 0x4}, [{0x2, 0x5, r1}, {0x2, 0x5, r2}, {0x2, 0x1, r3}, {0x2, 0x3, r4}, {0x2, 0x1, r5}, {0x2, 0x6, r6}, {0x2, 0x4, r7}, {0x2, 0x4, r8}, {0x2, 0x1, r9}, {0x2, 0x4, r10}], {0x4, 0x6}, [{0x8, 0x5, r11}, {0x8, 0x7, r12}, {0x8, 0x5, r13}, {0x8, 0x3, r14}, {0x8, 0x2, r15}], {0x10, 0x2}, {0x20, 0x6}}, 0x9c, 0x0) r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x100, 0x0) ioctl$TIOCSETD(r16, 0x5423, &(0x7f00000000c0)=0xf) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x1, 0x5, 0x3f, 0x7, 0x10, 0x9}) ioctl$TIOCSETD(r16, 0x5412, &(0x7f0000000200)=0x2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000a80)=0xb65, 0x4) 19:20:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xffffffffffffffa8, 0x200040) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0xab0, 0x800}) 19:20:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x10000000}) 19:20:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x33, {0x4, 0x9, 0x442, 0x2, 0xc138, 0x5}}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:20:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1e000000}) [ 2830.240955][T23837] Bluetooth: hci2: sending frame failed (-49) 19:20:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000240)='keyring\x00', 0x10) fcntl$setlease(r1, 0x400, 0x0) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 19:20:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) [ 2831.951677][ C1] net_ratelimit: 20 callbacks suppressed [ 2831.951687][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2831.963215][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2831.969106][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2831.975014][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2832.191589][T20198] Bluetooth: hci1: command 0x1003 tx timeout [ 2832.197842][T23837] Bluetooth: hci1: sending frame failed (-49) [ 2832.271650][T20198] Bluetooth: hci2: command 0x1003 tx timeout [ 2832.271659][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2832.271715][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2832.289957][T23837] Bluetooth: hci2: sending frame failed (-49) [ 2833.081673][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2833.087686][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2833.093688][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2833.099439][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2834.271705][T28313] Bluetooth: hci1: command 0x1001 tx timeout [ 2834.277799][T23837] Bluetooth: hci1: sending frame failed (-49) [ 2834.351858][T28313] Bluetooth: hci2: command 0x1001 tx timeout [ 2834.357944][T23837] Bluetooth: hci2: sending frame failed (-49) [ 2836.351706][T28313] Bluetooth: hci1: command 0x1009 tx timeout [ 2836.431963][T28313] Bluetooth: hci2: command 0x1009 tx timeout [ 2837.231660][ C1] net_ratelimit: 20 callbacks suppressed [ 2837.237431][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2837.243205][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2837.249051][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2837.254820][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2837.391700][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2837.397543][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2838.191675][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2838.197569][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2838.203427][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2838.209220][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:20:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 19:20:51 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x4000000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x480, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5}, 0x0, 0xa, r3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f00000000c0)) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r7 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xe}) connect$caif(r7, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) r8 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(r0, 0xfffffffffffffffe) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) sysfs$3(0x3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r8, 0x84, 0x74, &(0x7f0000000700)=""/174, &(0x7f00000003c0)=0x480) sendmsg$SEG6_CMD_DUMPHMAC(r9, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="f0ba0104550dcf3427ca0a38d7dfa889f5b64d54d65b9c5623666f6ff4d51f602356063f73e8507cfcad7813a44a994dfd123f827b88ce4110501a2699f697260346deba8751e6c808b5a75c990d75e4c1561be45cbf5359e89b9a76a8fcd013866f7a46c5b12670bdd5e8c36b4e9074796512a8399290bc996c8708c550840ce9234992e221e9e908cdf044b08ad39235cf444ab43146748402b2aad88f069ef535b07ce98479fabf0a8f0c72017c34a3a4fa25d53582f20e336fd9d41eb4669646c9c9f67ae0bb4911a8f7b1f7261acf400536c81316887687f0b547"], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x200c00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x4ab, 0x2082) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={r2, 0x8}, &(0x7f0000000200)=0x8) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) 19:20:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 19:20:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) write$FUSE_LK(r1, &(0x7f0000000180)={0x28, 0x0, 0x4, {{0xc869, 0x401, 0x2, r2}}}, 0x28) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000000)="3c32b688f55df6a495ad80760bae8d19b71a6186b430a523fb778fe60b72684ec9722c9717f052d9f743704647e5ec30631eec6f83baa10c363c1205e80fbf28b68b27bb19c702aa09701c5f46267f40f47ce8bb2f258d0000db671ccd418950e4a0b5df1b5431824e3b320a08ea67da16049b555d1d752072b3be1d56a6d7") 19:20:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x10000000000000}) 19:20:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1000000000006, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) ioctl$KDADDIO(r0, 0x400455c8, 0x400000000000) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000100)={@rand_addr, @broadcast}, &(0x7f0000000140)=0x8) 19:20:52 executing program 2: openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200002, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) 19:20:52 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000000c0)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:20:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1000000000000000}) 19:20:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x40002, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000140)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000001c0)) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, 0x100323, 0x0, 0x10, &(0x7f0000ffe000/0x1000)=nil, 0x9}) connect$caif(r0, &(0x7f0000000280), 0x18) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000200)=@generic={0x3, 0x7, 0x7}) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) [ 2842.351622][ C1] net_ratelimit: 20 callbacks suppressed [ 2842.351629][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2842.363273][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2842.369079][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2842.374937][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2842.431626][T20198] Bluetooth: hci1: command 0x1003 tx timeout [ 2842.437794][T23837] Bluetooth: hci1: sending frame failed (-49) [ 2842.671636][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2842.677562][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2842.991627][T20198] Bluetooth: hci2: command 0x1003 tx timeout [ 2842.997786][T23837] Bluetooth: hci2: sending frame failed (-49) [ 2843.471594][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2843.477388][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2843.483211][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2843.488950][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2844.511669][T28313] Bluetooth: hci1: command 0x1001 tx timeout [ 2844.517807][T23837] Bluetooth: hci1: sending frame failed (-49) [ 2845.071755][T28313] Bluetooth: hci2: command 0x1001 tx timeout [ 2845.077888][T23837] Bluetooth: hci2: sending frame failed (-49) [ 2846.591681][T20198] Bluetooth: hci1: command 0x1009 tx timeout [ 2847.151656][T20198] Bluetooth: hci2: command 0x1009 tx timeout [ 2847.631610][ C1] net_ratelimit: 20 callbacks suppressed [ 2847.637299][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2847.643142][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2847.648998][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2847.654996][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2847.791621][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2847.797404][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2848.591640][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2848.597479][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2848.603352][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2848.609117][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:21:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 19:21:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:21:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1e00000000000000}) 19:21:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x12) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = dup(r0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r2, 0x535, 0xfffffffffffffffa}, 0xc) ioctl$TIOCSETD(r0, 0x5437, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0xe63, 0xb646}, 0x4c}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200080, 0x0) 19:21:02 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x24000, 0x84) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000540)={0xfff, 0x0, 0x3f, 0xe25, [], [], [], 0x1b5, 0x1000, 0xffffffffffffffff, 0xffffffffffffffc1, "1afb4218e460a2f51dac7de0410b0ad9"}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r6 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r6, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000700)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x210000, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="6b8594451619ba0fea075041df837a47acbc5ab89bdc76cb2c3e87fc793a15cbf096c1de63a592d602f1232b3cba6a87fd24ff72ff508ab436f0c678471eaecdb6cde6e5688dec751c223fddd433361d3a59d5f04245db9fb9943b5256eca7368d4dfa346146d3f5e63a35eaff7895a87f779dca"], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:21:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x3f}, 0x4) 19:21:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 19:21:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 19:21:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x1, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f00000001c0)={'erspan0\x00', 0x5, 0x7f}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000002c0)=0x200005) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x1, 0x9, 0x5}) 19:21:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000140)={0xfd, 0x7, 0x6, 0x4, [], [], [], 0x5, 0x2, 0x5, 0x1f, "bc6d1adc47f0b4052dd03b516a248696"}) ioctl$TIOCSETD(r0, 0x5437, 0x0) 19:21:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) 19:21:02 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) 19:21:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) [ 2851.196456][T30390] Bluetooth: hci2: Frame reassembly failed (-84) [ 2851.198072][T27178] Bluetooth: hci2: Frame reassembly failed (-84) 19:21:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}) 19:21:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = gettid() sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x7, 0x5, 0x6}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)=r1) 19:21:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00}) 19:21:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x101002) syz_open_pts(r1, 0x4400) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 19:21:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}) 19:21:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}) [ 2852.751666][ C1] net_ratelimit: 20 callbacks suppressed [ 2852.751676][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2852.763190][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2852.768978][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2852.774878][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2852.911576][ T2928] Bluetooth: hci1: command 0x1003 tx timeout [ 2852.918015][T23837] Bluetooth: hci1: sending frame failed (-49) [ 2853.071607][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2853.077439][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2853.231582][ T2928] Bluetooth: hci2: command 0x1003 tx timeout [ 2853.237935][T23837] Bluetooth: hci2: sending frame failed (-49) [ 2853.881553][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2853.887352][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2853.893209][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2853.899023][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2854.991641][ T2928] Bluetooth: hci1: command 0x1001 tx timeout [ 2854.997774][T23837] Bluetooth: hci1: sending frame failed (-49) [ 2855.311625][ T2928] Bluetooth: hci2: command 0x1001 tx timeout [ 2855.317834][T23837] Bluetooth: hci2: sending frame failed (-49) [ 2857.071602][T20198] Bluetooth: hci1: command 0x1009 tx timeout [ 2857.391658][ T2928] Bluetooth: hci2: command 0x1009 tx timeout [ 2858.031580][ C1] net_ratelimit: 20 callbacks suppressed [ 2858.037274][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2858.043036][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2858.048840][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2858.054655][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2858.191689][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2858.197523][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2858.991601][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2858.997430][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2859.003285][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2859.009027][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:21:13 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$RTC_UIE_ON(r0, 0x7003) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r5, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="413cf9be23500d7e007e5b1548c3fd69193349ed19a1926f47545b47e140ccb9bacab14b3e2d90f34a95194e07940003536d6e4a7c71cde769a39eeb1ae7e6439f7e96c395c92db03f282ac0e0af2abb399f5f41947cb4587d05cce9e80a00"/107], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:21:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) 19:21:13 executing program 4 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000040)) 19:21:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7f, 0x600000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 19:21:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1e000000}) 19:21:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x9, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:21:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) [ 2861.523217][T27758] FAULT_INJECTION: forcing a failure. [ 2861.523217][T27758] name failslab, interval 1, probability 0, space 0, times 0 [ 2861.603824][T27758] CPU: 0 PID: 27758 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190415 #25 [ 2861.612987][T27758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2861.623155][T27758] Call Trace: [ 2861.626467][T27758] dump_stack+0x172/0x1f0 [ 2861.630827][T27758] should_fail.cold+0xa/0x15 [ 2861.635549][T27758] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2861.641386][T27758] ? mark_held_locks+0xf0/0xf0 [ 2861.646168][T27758] ? rcu_read_unlock+0x16/0x60 [ 2861.650951][T27758] __should_failslab+0x121/0x190 [ 2861.655905][T27758] should_failslab+0x9/0x14 [ 2861.660427][T27758] kmem_cache_alloc_node+0x56/0x710 [ 2861.665649][T27758] ? ldsem_down_read+0x33/0x40 [ 2861.670444][T27758] __alloc_skb+0xd5/0x5e0 [ 2861.670461][T27758] ? skb_trim+0x190/0x190 [ 2861.670585][T27758] bcsp_recv+0x8fb/0x13e0 [ 2861.679336][T27758] hci_uart_tty_receive+0x22b/0x530 [ 2861.679355][T27758] ? hci_uart_write_work+0x710/0x710 [ 2861.679453][T27758] tty_ioctl+0x4ed/0x15c0 [ 2861.698569][T27758] ? tty_register_device+0x40/0x40 [ 2861.703687][T27758] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2861.709949][T27758] ? tomoyo_init_request_info+0x105/0x1d0 [ 2861.715865][T27758] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2861.722121][T27758] ? tomoyo_path_number_perm+0x263/0x520 [ 2861.727766][T27758] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2861.733594][T27758] ? __fget+0x35a/0x550 [ 2861.737765][T27758] ? tty_register_device+0x40/0x40 [ 2861.742887][T27758] do_vfs_ioctl+0xd6e/0x1390 [ 2861.747488][T27758] ? ioctl_preallocate+0x210/0x210 [ 2861.752604][T27758] ? __fget+0x381/0x550 [ 2861.757121][T27758] ? ksys_dup3+0x3e0/0x3e0 [ 2861.761644][T27758] ? tomoyo_file_ioctl+0x23/0x30 [ 2861.766879][T27758] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2861.773143][T27758] ? security_file_ioctl+0x93/0xc0 [ 2861.778277][T27758] ksys_ioctl+0xab/0xd0 [ 2861.782457][T27758] __x64_sys_ioctl+0x73/0xb0 [ 2861.787063][T27758] do_syscall_64+0x103/0x610 [ 2861.792126][T27758] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2861.798025][T27758] RIP: 0033:0x458c29 [ 2861.801937][T27758] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2861.821639][T27758] RSP: 002b:00007f6e80ed8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2861.830928][T27758] RAX: ffffffffffffffda RBX: 00007f6e80ed8c90 RCX: 0000000000458c29 [ 2861.838906][T27758] RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000003 [ 2861.847151][T27758] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 19:21:13 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000240)) mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x8000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0x2) alarm(0x1) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000140)) 19:21:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x58182, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000040)) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000140)=""/218, 0x8000}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 2861.855130][T27758] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6e80ed96d4 [ 2861.863103][T27758] R13: 00000000004c3082 R14: 00000000004d6428 R15: 0000000000000004 [ 2861.880939][ T402] kasan: CONFIG_KASAN_INLINE enabled [ 2861.888393][T27924] Unknown ioctl 21545 19:21:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9abf68b08879f28133df9208fea81d5fd5d1bf"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) [ 2861.898857][ T402] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2861.915806][T27758] Bluetooth: Can't allocate mem for new packet [ 2861.969443][ T402] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2861.976435][ T402] CPU: 1 PID: 402 Comm: kworker/u4:3 Not tainted 5.1.0-rc4-next-20190415 #25 [ 2861.985193][ T402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2861.995280][ T402] Workqueue: events_unbound flush_to_ldisc [ 2862.001372][ T402] RIP: 0010:skb_put+0x35/0x1d0 19:21:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xc0, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000040)={{0x2, 0x4e24, @empty}, {0x1, @remote}, 0x4c, {0x2, 0x4e21, @rand_addr=0x9}, 'veth1_to_bridge\x00'}) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 2862.006147][ T402] Code: 89 f5 41 54 49 89 fc 53 4d 8d b4 24 b8 00 00 00 48 83 ec 08 e8 8c b3 f5 fb 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 4c [ 2862.025766][ T402] RSP: 0018:ffff88803e1efb28 EFLAGS: 00010206 [ 2862.031836][ T402] RAX: dffffc0000000000 RBX: ffff888088315000 RCX: ffffffff84fa032a [ 2862.039829][ T402] RDX: 0000000000000017 RSI: ffffffff857ad504 RDI: 0000000000000000 [ 2862.047808][ T402] RBP: ffff88803e1efb58 R08: ffff8880860da1c0 R09: ffffed1015d25bd8 [ 2862.055789][ T402] R10: ffffed1015d25bd7 R11: ffff8880ae92debb R12: 0000000000000000 [ 2862.063765][ T402] R13: 0000000000000001 R14: 00000000000000b8 R15: 0000000000000000 [ 2862.071923][ T402] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 2862.080877][ T402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2862.087472][ T402] CR2: 0000001b31d24000 CR3: 0000000095fd5000 CR4: 00000000001426e0 [ 2862.095451][ T402] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2862.103427][ T402] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2862.111510][ T402] Call Trace: [ 2862.114809][ T402] bcsp_recv+0x9e2/0x13e0 [ 2862.119253][ T402] hci_uart_tty_receive+0x22b/0x530 [ 2862.124558][ T402] ? hci_uart_write_work+0x710/0x710 [ 2862.129853][ T402] tty_ldisc_receive_buf+0x164/0x1c0 [ 2862.135159][ T402] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2862.141409][ T402] tty_port_default_receive_buf+0x7d/0xb0 [ 2862.147132][ T402] flush_to_ldisc+0x228/0x390 [ 2862.151836][ T402] process_one_work+0x98e/0x1790 [ 2862.156790][ T402] ? pwq_dec_nr_in_flight+0x320/0x320 [ 2862.162176][ T402] ? lock_acquire+0x16f/0x3f0 19:21:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x9, 0x10, 0x5, 0xe616}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={r2, 0x7}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={r3, 0x22b8}, &(0x7f0000000240)=0x8) setsockopt$rose(r1, 0x104, 0x1, &(0x7f00000003c0)=0xfffffffffffffffd, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000400)={0xc, 0x89, "365c41c8fe07c54327eaa463fd398b1b63fbca61275a30edc60d4d267397eac34d2c06a243094beff19ff8a06311bddd2c539637b3b724583ce1a8032e835bfe3ea1c409225ed02451f06cf76435a42d889c4502a4570c87e5e662b62534fb00f1c4dba6b0f50b6d5d04bf3611c2ed37eb92c1d196e8b6890379479e8ea2f7140cdab0c709b7d9eeaf"}, 0x8f) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x3fffe, 0x0) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000140), 0x4) r5 = socket$inet(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="24000000030107081dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x101002, 0x0) ioctl$RTC_PLL_SET(r6, 0x40207012, &(0x7f0000000040)={0x4, 0xfffffffffffffffe, 0x7, 0x800, 0xfffffffeffffffff, 0xffff, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x20080, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000280)={r3, 0x0, 0x100000001, 0x1bc3, 0x7ff, 0xfffffffffffffffd}, &(0x7f00000002c0)=0x14) [ 2862.166891][ T402] worker_thread+0x98/0xe40 [ 2862.171499][ T402] ? trace_hardirqs_on+0x67/0x230 [ 2862.176711][ T402] kthread+0x357/0x430 [ 2862.180790][ T402] ? process_one_work+0x1790/0x1790 [ 2862.185995][ T402] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 2862.192782][ T402] ret_from_fork+0x3a/0x50 [ 2862.197244][ T402] Modules linked in: [ 2862.218572][ T402] ---[ end trace 8603052f808a0cda ]--- [ 2862.228501][ T3877] kobject: 'loop2' (000000003e37a954): kobject_uevent_env [ 2862.237171][ T402] RIP: 0010:skb_put+0x35/0x1d0 [ 2862.243731][ T3877] kobject: 'loop2' (000000003e37a954): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2862.255446][ T402] Code: 89 f5 41 54 49 89 fc 53 4d 8d b4 24 b8 00 00 00 48 83 ec 08 e8 8c b3 f5 fb 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 4c [ 2862.278530][ T3877] kobject: 'loop5' (00000000e404e054): kobject_uevent_env [ 2862.284634][T27701] kobject: 'kvm' (00000000a66ea2f7): kobject_uevent_env [ 2862.293149][T27701] kobject: 'kvm' (00000000a66ea2f7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2862.303535][ T402] RSP: 0018:ffff88803e1efb28 EFLAGS: 00010206 [ 2862.309757][ T402] RAX: dffffc0000000000 RBX: ffff888088315000 RCX: ffffffff84fa032a 19:21:14 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80000001}, 'port1\x00', 0x58, 0x1000, 0x7, 0x401, 0xfffffffffffff0c7, 0x0, 0x0, 0x0, 0x4, 0x1}) r6 = dup3(r4, r3, 0x80000) sendmsg$nl_crypto(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=@alg={0xe8, 0x10, 0x200, 0x70bd25, 0x25dfdbfd, {{'sha1\x00'}, [], [], 0x2000, 0x2000}, [{0x8, 0x1, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) ioctl$RTC_UIE_ON(r0, 0x7003) r7 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, [], 0x28}, 0xe}) connect$caif(r7, &(0x7f0000000080)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fdatasync(r6) fchmod(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x20080, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r8, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xaa9fcd) 19:21:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x2) [ 2862.310119][ T3877] kobject: 'loop5' (00000000e404e054): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2862.332113][ T402] RDX: 0000000000000017 RSI: ffffffff857ad504 RDI: 0000000000000000 [ 2862.340426][ T402] RBP: ffff88803e1efb58 R08: ffff8880860da1c0 R09: ffffed1015d25bd8 [ 2862.344604][ T3877] kobject: 'loop3' (000000008e0fe63d): kobject_uevent_env [ 2862.357363][ T402] R10: ffffed1015d25bd7 R11: ffff8880ae92debb R12: 0000000000000000 [ 2862.364684][ T3877] kobject: 'loop3' (000000008e0fe63d): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2862.382625][ T402] R13: 0000000000000001 R14: 00000000000000b8 R15: 0000000000000000 [ 2862.386833][ T3877] kobject: 'loop1' (000000009ed86cc9): kobject_uevent_env [ 2862.398257][ T3877] kobject: 'loop1' (000000009ed86cc9): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2862.411864][T28442] kobject: 'kvm' (00000000a66ea2f7): kobject_uevent_env [ 2862.420710][ T402] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 2862.431722][T28442] kobject: 'kvm' (00000000a66ea2f7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2862.435577][ T402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2862.450923][ T402] CR2: 00007f65d65c5db8 CR3: 0000000099f02000 CR4: 00000000001426f0 [ 2862.463421][ T402] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2862.474239][ T3877] kobject: 'loop2' (000000003e37a954): kobject_uevent_env [ 2862.476548][ T402] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2862.485440][ T3877] kobject: 'loop2' (000000003e37a954): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2862.492290][ T402] Kernel panic - not syncing: Fatal exception [ 2862.516586][ T402] Kernel Offset: disabled [ 2862.523532][ T402] Rebooting in 86400 seconds..